Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132332e302f32342d3234203d3e20323636383030.roa
File:                     34352e3233342e3132332e302f32342d3234203d3e20323636383030.roa (raw, json)
Hash identifier:          b1/wrBJNEY0TcqGbKYrC4LukKMIy0/2n76A/vfJ4W0s=
Subject key identifier:   FC:FC:C0:AA:E5:81:11:2C:BA:CB:58:20:B2:A5:BF:C2:1D:7E:E5:EE
Certificate issuer:       /CN=E5E5F55E39001EF24D658430EB3A500D80E40348
Certificate serial:       19CC881932D8AB81E41B580DAE15DA7C01852816
Authority key identifier: E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132332e302f32342d3234203d3e20323636383030.roa
Signing time:             Sat 14 Jun 2025 17:22:17 +0000
ROA not before:           Sat 14 Jun 2025 17:17:17 +0000
ROA not after:            Sat 13 Jun 2026 17:22:17 +0000
asID:                     266800
IP address blocks:        45.234.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 11:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cc:88:19:32:d8:ab:81:e4:1b:58:0d:ae:15:da:7c:01:85:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5F55E39001EF24D658430EB3A500D80E40348
        Validity
            Not Before: Jun 14 17:17:17 2025 GMT
            Not After : Jun 13 17:22:17 2026 GMT
        Subject: CN=FCFCC0AAE581112CBACB5820B2A5BFC21D7EE5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:70:9a:b2:49:e5:76:5f:13:b7:bb:40:28:1a:
                    42:08:fa:91:92:4a:d9:70:b1:e2:ad:d4:d9:3e:35:
                    04:12:16:6e:ae:8e:a0:c8:06:9d:bb:15:89:89:64:
                    0b:f5:c8:d6:c5:2c:d3:03:b1:60:41:f6:4f:dc:67:
                    7a:53:71:e0:a3:c7:81:68:d6:b1:48:d7:c0:85:47:
                    6c:fc:d5:fa:b0:b7:81:cc:0a:5a:f0:60:ec:38:57:
                    68:8a:56:6b:84:89:48:3b:13:80:42:a7:69:f3:69:
                    c8:89:43:05:35:7e:d1:22:cf:fb:2b:b6:4c:7a:11:
                    97:dd:4e:b1:38:2a:9b:5a:4d:18:69:f9:4a:5b:59:
                    d0:e2:24:e8:f3:ce:fe:34:34:7a:ab:67:fd:12:3d:
                    bc:5a:51:76:58:cc:c5:43:bb:2b:1a:a5:59:32:e2:
                    f5:fe:8a:90:6d:88:e1:b5:97:87:c6:4b:51:ea:a7:
                    8b:39:65:00:d4:83:7d:88:4e:d5:f4:36:92:de:19:
                    f2:dd:2b:b9:75:5c:42:79:4d:09:4e:e3:a1:0f:2e:
                    eb:88:3f:61:10:2c:fa:78:c3:52:82:f8:51:3c:56:
                    54:a5:c0:07:73:42:61:ed:86:f4:16:cd:3d:2b:8c:
                    5a:97:1a:cc:fe:4c:8e:ae:a8:74:3c:ae:24:ba:2f:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:C0:AA:E5:81:11:2C:BA:CB:58:20:B2:A5:BF:C2:1D:7E:E5:EE
            X509v3 Authority Key Identifier:
                keyid:E5:E5:F5:5E:39:00:1E:F2:4D:65:84:30:EB:3A:50:0D:80:E4:03:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/E5E5F55E39001EF24D658430EB3A500D80E40348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5F55E39001EF24D658430EB3A500D80E40348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0EECE5412CB05783F14441C93C2D1F62C544B917EAFDF75655B4A896E07DE219/0/34352e3233342e3132332e302f32342d3234203d3e20323636383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:17:d9:8c:09:c7:50:8a:1f:e7:f7:79:af:e7:f9:63:ec:
         ac:34:7e:f2:12:1e:05:8c:59:6e:2e:93:c5:0c:1a:b2:a7:ca:
         ff:5f:32:82:f2:1b:a0:04:c9:67:a1:90:b2:38:97:d5:3e:e7:
         41:94:8e:57:0a:fb:92:d4:0f:7d:5c:b0:d7:9e:3f:1a:19:41:
         c3:fc:8a:a6:ef:22:0d:4d:59:8e:46:34:0d:82:bc:a5:b4:a8:
         14:0d:82:7b:d7:af:20:aa:7c:0b:dc:38:be:58:0c:d7:fc:6d:
         cc:0b:57:12:3a:72:b7:5c:0e:c7:4b:18:0e:06:cb:2c:1d:a8:
         2f:9e:d2:a0:11:16:64:ff:ce:65:06:61:4d:02:e8:95:32:f0:
         5a:63:17:8f:03:60:8c:6e:15:2b:ad:66:4c:af:f1:85:7a:28:
         36:6a:80:e9:73:0f:dd:96:27:bd:89:c3:79:34:35:96:a8:34:
         5c:35:57:ac:32:a2:71:81:a1:32:df:32:6e:03:5c:5b:57:13:
         c3:96:7d:f8:88:c5:2a:2e:e6:05:c7:0e:70:71:d6:30:72:79:
         f9:b4:50:2a:94:7f:52:81:47:d9:10:a9:c2:78:6c:23:60:1a:
         74:36:5e:2a:c9:38:83:8c:2a:76:28:2f:9e:77:72:19:da:e5:
         22:87:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:55:03 2025 by rpki-client