Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34372e302f32342d3234203d3e203634313132.roa
File:                     34352e36382e34372e302f32342d3234203d3e203634313132.roa (raw, json)
Hash identifier:          fM8O4VxCiVI6jlz3eb0EVk3s2cDhYiLytt9kPi0hx0g=
Subject key identifier:   E5:BD:BF:71:C5:B7:CF:4E:FA:05:1F:44:8A:6D:12:9B:04:53:60:D5
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       7718A05341488F2E137DACB88E9CF6BC8E07D2B7
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34372e302f32342d3234203d3e203634313132.roa
Signing time:             Tue 10 Dec 2024 14:25:00 +0000
ROA not before:           Tue 10 Dec 2024 14:20:00 +0000
ROA not after:            Tue 09 Dec 2025 14:25:00 +0000
asID:                     64112
IP address blocks:        45.68.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:18:a0:53:41:48:8f:2e:13:7d:ac:b8:8e:9c:f6:bc:8e:07:d2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Dec 10 14:20:00 2024 GMT
            Not After : Dec  9 14:25:00 2025 GMT
        Subject: CN=E5BDBF71C5B7CF4EFA051F448A6D129B045360D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:40:1a:c8:6d:09:7d:d5:9f:56:29:c3:12:
                    a2:4f:24:b4:77:0c:ac:39:b7:35:ba:df:d8:01:9b:
                    43:53:83:78:87:33:41:b0:68:67:c5:bd:49:2e:be:
                    cc:c7:d7:87:b6:08:fc:a6:e0:06:5c:54:41:10:8e:
                    68:53:fa:9d:dc:aa:d8:9d:d4:f9:65:72:42:79:a4:
                    eb:32:44:8e:50:a4:f6:bd:50:e9:a9:94:d7:96:f7:
                    26:7e:39:7c:6f:89:54:9f:5d:77:d4:ad:01:4b:58:
                    6a:d5:6c:45:76:e7:a1:fb:00:84:08:5a:b9:7d:f2:
                    5f:8b:ae:29:9a:46:b1:0f:ab:19:4d:bf:23:e5:86:
                    71:b4:5e:31:d8:27:a0:0a:4c:2f:85:91:e2:4d:3d:
                    27:cf:d1:ce:04:ba:e4:3f:2e:a7:e1:bf:b8:95:f7:
                    4e:4b:f3:b7:79:78:3c:88:a5:b9:95:25:fe:ee:1f:
                    35:e1:3b:aa:eb:e1:79:0d:9c:b3:b9:d3:86:ec:af:
                    45:68:31:3a:4f:20:2d:26:62:ba:8d:b2:27:b3:84:
                    2a:41:92:b7:f2:68:b7:6d:69:e7:06:9d:d9:22:f6:
                    2d:da:5d:b3:00:5d:43:65:c1:da:24:2b:f4:70:e9:
                    84:ec:45:49:83:2b:79:1f:0d:27:7e:74:8a:8a:c8:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BD:BF:71:C5:B7:CF:4E:FA:05:1F:44:8A:6D:12:9B:04:53:60:D5
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34372e302f32342d3234203d3e203634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:0d:d0:44:f9:9d:83:63:84:27:f6:af:f4:f7:dc:5c:5a:ca:
         82:ad:4b:0e:41:45:76:55:13:e1:70:f1:bd:9f:09:9b:f1:d7:
         92:80:ca:f9:eb:72:bf:87:b3:7c:36:a2:52:3d:05:f9:9d:e9:
         c7:93:eb:b8:c5:aa:8c:56:d0:47:5e:f9:de:0d:e8:e3:79:bd:
         ca:b5:0e:99:d3:69:2a:79:56:0e:d9:ca:72:99:63:4a:3d:84:
         0b:6e:62:ac:43:be:96:f7:e3:b7:51:78:de:18:99:03:14:d3:
         5c:36:05:cc:7a:de:3b:9c:30:14:df:90:14:04:5e:1c:84:fe:
         89:05:5d:cd:e3:e6:49:ec:2d:b1:c9:14:0e:6e:2b:94:9e:c4:
         77:e3:4a:e8:e1:bd:6d:19:ae:34:13:69:40:49:6a:bb:5f:e1:
         ed:ab:83:2d:23:03:26:81:27:3f:27:06:53:90:92:29:9b:0f:
         51:c9:32:24:b9:bb:b4:0b:c1:0e:99:fa:c1:c4:84:61:fb:e9:
         ef:47:f5:a1:f1:a4:b9:8f:6e:cc:3b:40:09:c3:8d:99:8e:f3:
         b2:21:60:01:d3:9a:df:cf:ef:0a:75:ba:44:ee:42:f6:ed:70:
         90:91:ce:c7:ca:14:ff:48:04:f1:3c:df:ec:f9:9d:44:23:04:
         90:53:eb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:14:25 2025 by rpki-client