Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35352e302f32342d3234203d3e203634313539.roa
File:                     34352e36382e35352e302f32342d3234203d3e203634313539.roa (raw, json)
Hash identifier:          KQjEfCBR6HaA0IE25BQ2EtfkuvqBWDZU05BZCfzRIOk=
Subject key identifier:   1F:E8:AF:55:76:84:42:08:EC:D2:93:AD:04:E5:FE:DD:4A:40:33:F1
Certificate issuer:       /CN=F4F8147BF99626D17AFEE91E12422301459D2C55
Certificate serial:       675092FC95BBBF0737EAFDDC490DE65375E7AD74
Authority key identifier: F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35352e302f32342d3234203d3e203634313539.roa
Signing time:             Fri 09 May 2025 13:18:11 +0000
ROA not before:           Fri 09 May 2025 13:13:11 +0000
ROA not after:            Fri 08 May 2026 13:18:11 +0000
asID:                     64159
IP address blocks:        45.68.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 15:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:50:92:fc:95:bb:bf:07:37:ea:fd:dc:49:0d:e6:53:75:e7:ad:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4F8147BF99626D17AFEE91E12422301459D2C55
        Validity
            Not Before: May  9 13:13:11 2025 GMT
            Not After : May  8 13:18:11 2026 GMT
        Subject: CN=1FE8AF5576844208ECD293AD04E5FEDD4A4033F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:95:30:85:1b:92:a6:2d:d9:75:e8:c2:5f:
                    08:48:74:c4:16:ee:da:00:61:45:5d:cc:13:09:de:
                    f9:8d:49:cc:e4:97:0d:19:4c:77:b9:3c:2d:18:72:
                    9e:6b:3e:13:8c:60:7b:63:99:26:13:94:83:9a:47:
                    ed:91:87:94:3f:a4:86:95:c9:bc:fd:63:32:2a:52:
                    5f:b7:4a:ad:a7:b9:39:d6:c0:26:9b:07:6b:4a:8c:
                    ae:17:b2:1a:b6:49:94:f3:9f:ad:31:eb:9a:74:cc:
                    3e:df:21:28:ea:28:20:87:f2:ce:a9:d5:72:f1:16:
                    86:30:b9:83:20:33:e0:80:96:03:42:74:1c:fb:e7:
                    06:0b:0d:4c:69:35:b8:16:25:56:30:8f:23:2b:db:
                    2b:eb:c9:6c:0c:76:23:4d:9d:e9:37:18:66:ae:5a:
                    b8:28:d1:dc:16:b4:7e:81:fd:74:25:44:8f:a0:c7:
                    79:dc:fe:09:12:c9:63:c4:21:d5:6e:89:38:69:3c:
                    2b:9b:d9:ca:ae:a8:d1:6d:17:27:7a:1e:3d:b1:23:
                    6a:a3:d8:07:16:d8:6f:8b:8f:74:56:0f:bf:7f:49:
                    b3:5f:6c:f8:40:b7:fe:5f:be:28:4d:1f:af:79:86:
                    78:05:b0:86:99:c4:9f:46:37:80:03:75:21:73:42:
                    70:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E8:AF:55:76:84:42:08:EC:D2:93:AD:04:E5:FE:DD:4A:40:33:F1
            X509v3 Authority Key Identifier:
                keyid:F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35352e302f32342d3234203d3e203634313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fe:c3:96:8a:c4:e2:fc:1d:9f:a0:bb:17:28:1b:76:78:36:
         0a:a3:81:c5:41:ab:7f:b9:36:82:2a:74:9b:ac:69:e3:46:fc:
         c4:bd:59:67:30:66:8a:78:36:be:24:8d:61:b6:bd:98:c1:f1:
         a5:72:73:a8:47:02:34:d4:5d:7f:f3:ef:95:af:82:ce:53:77:
         60:05:9f:92:d1:d1:b1:4c:2d:ad:d9:7c:b2:77:9c:51:43:5d:
         83:7f:b2:48:14:53:6c:14:58:f7:97:30:7b:66:d3:ae:49:e6:
         cd:95:9b:35:af:18:33:06:2b:16:a4:26:29:df:05:48:61:c2:
         12:25:82:f0:92:7d:93:c5:fd:7b:21:32:8d:c0:98:b0:1c:23:
         3d:c7:5d:81:80:25:f1:db:d2:9a:8c:c4:26:d0:0a:e8:10:ae:
         1f:fc:09:9c:ae:38:4a:a9:08:44:03:01:75:cb:f9:68:09:93:
         f8:08:ef:09:99:97:2f:b9:f5:5a:a7:3f:a8:d4:ec:7d:4f:39:
         9d:30:00:0a:7a:64:8c:31:93:34:a9:3b:da:14:9d:16:e0:9a:
         0e:d3:48:11:db:5b:7d:0d:61:d8:59:5e:11:fc:16:e0:e7:e2:
         81:92:09:4f:69:33:99:23:15:48:ff:1a:43:48:e0:c9:4f:c6:
         4a:39:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:04:15 2025 by rpki-client