Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/34352e3232342e3235352e302f32342d3234203d3e20323635373730.roa
File:                     34352e3232342e3235352e302f32342d3234203d3e20323635373730.roa (raw, json)
Hash identifier:          +dNUkqVV9735fLTgfPy9upzdte5qIGfxM0YU9RwhQcM=
Subject key identifier:   DF:72:32:32:C8:74:A8:D4:D2:AC:89:BD:5D:CB:BD:20:13:9A:A8:37
Certificate issuer:       /CN=6B513DA47D330ABD029046B0C0FB7A850D26C312
Certificate serial:       1EC8D7DBAEFE944732B4FC2D17375099EDC18F34
Authority key identifier: 6B:51:3D:A4:7D:33:0A:BD:02:90:46:B0:C0:FB:7A:85:0D:26:C3:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/34352e3232342e3235352e302f32342d3234203d3e20323635373730.roa
Signing time:             Mon 12 May 2025 15:40:00 +0000
ROA not before:           Mon 12 May 2025 15:35:00 +0000
ROA not after:            Mon 11 May 2026 15:40:00 +0000
asID:                     265770
IP address blocks:        45.224.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 15:44:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c8:d7:db:ae:fe:94:47:32:b4:fc:2d:17:37:50:99:ed:c1:8f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B513DA47D330ABD029046B0C0FB7A850D26C312
        Validity
            Not Before: May 12 15:35:00 2025 GMT
            Not After : May 11 15:40:00 2026 GMT
        Subject: CN=DF723232C874A8D4D2AC89BD5DCBBD20139AA837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:cd:07:94:ff:09:82:41:3d:1c:fb:8a:02:
                    c9:0a:ef:ef:65:3e:5c:0d:45:ab:70:c8:4b:8a:ba:
                    d1:dc:ec:c5:72:7b:38:3e:f1:ff:33:66:97:f1:e2:
                    fd:9a:cb:f8:14:04:7c:b5:24:1e:ad:dc:8e:32:78:
                    6d:4b:45:11:cb:85:88:06:d3:e5:f1:a8:5e:d4:e9:
                    7d:dd:f2:0a:be:f5:e5:6d:94:ee:34:8f:2c:64:7d:
                    c7:74:53:9b:59:58:0f:5b:1d:00:9e:b3:b9:7e:cc:
                    53:7b:79:35:19:d2:06:b2:3b:d8:eb:f8:a2:c3:57:
                    6f:a8:d9:e6:ac:89:62:2c:4b:2c:69:91:8b:e3:f2:
                    5e:27:04:50:e6:f7:dc:69:cb:90:61:e1:d1:3c:1a:
                    c3:66:04:ef:9a:d5:3c:f1:cb:48:75:be:39:52:32:
                    6f:71:47:cb:ab:d6:d7:f1:0c:1e:bc:ec:67:03:bb:
                    b9:a7:10:a1:57:d1:d5:7f:7e:bb:65:6f:90:57:ff:
                    33:38:43:0b:65:8a:0d:27:87:2e:b8:7a:0b:d9:6d:
                    ee:d2:da:b0:fc:f3:ee:b8:0a:97:35:1e:a2:2e:e8:
                    f7:7b:74:cd:e2:6e:9b:08:f3:21:65:93:88:37:14:
                    08:3e:2c:a4:79:d4:49:de:d3:46:53:b6:b1:a2:96:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:72:32:32:C8:74:A8:D4:D2:AC:89:BD:5D:CB:BD:20:13:9A:A8:37
            X509v3 Authority Key Identifier:
                keyid:6B:51:3D:A4:7D:33:0A:BD:02:90:46:B0:C0:FB:7A:85:0D:26:C3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B513DA47D330ABD029046B0C0FB7A850D26C312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C96DE90F4F4E1C7CD63FD12D2DD6415B40DA8653A63972536D0D44B79017CF63/0/34352e3232342e3235352e302f32342d3234203d3e20323635373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8e:48:01:fb:3f:c5:59:f6:dc:69:c7:37:35:42:56:3d:51:
         af:45:3c:c4:1f:05:61:3b:02:a3:ce:c2:b4:fb:65:68:4c:9c:
         bb:8c:0e:d6:6a:35:f3:25:85:de:76:f3:09:68:60:12:99:86:
         95:ec:c2:0f:47:84:0b:2d:65:cc:f1:b0:86:ec:1d:23:70:e2:
         21:55:ff:7d:24:31:50:ef:dc:db:ac:e3:ed:ff:30:b6:2a:0b:
         e9:71:df:27:8b:28:65:0a:cf:ae:a1:57:9d:fb:b7:91:2d:8e:
         3f:93:5b:a9:d6:bd:db:10:4f:53:72:b2:96:c5:5e:71:a3:1b:
         18:e5:74:80:22:99:b2:ce:7e:02:1e:0c:51:93:03:aa:da:4f:
         7a:b3:12:ce:62:b7:72:db:af:de:57:fc:75:d8:b4:ec:77:cd:
         2e:c8:ed:c7:01:eb:70:42:aa:d1:6e:be:f4:4e:f3:40:ec:c4:
         b8:a4:89:6b:fe:f6:b5:87:14:97:65:06:48:49:b9:52:4b:48:
         98:93:d6:7a:97:8e:ec:0a:c3:1e:ca:2c:64:67:83:8c:4d:33:
         92:95:2e:bb:ca:ee:62:ea:f7:bb:32:4f:ed:e7:0d:dd:9e:ac:
         9a:12:ec:9b:8a:6d:b8:dc:f7:1e:0b:10:c1:0d:c9:d3:fe:27:
         6e:01:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 09:56:58 2025 by rpki-client