Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130312e302f32342d3234203d3e20323733393733.roa
File:                     34352e3137302e3130312e302f32342d3234203d3e20323733393733.roa (raw, json)
Hash identifier:          bCrVHMXIhzB0wvFF95fX7hY4JbjSVR21KCqR+3FpkBo=
Subject key identifier:   EB:BA:49:0C:38:6F:A5:8E:96:0C:39:CE:EA:95:E9:8A:23:63:95:89
Certificate issuer:       /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial:       57FFE32EFB7B85FB88FF84FB85B971EC861732C3
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130312e302f32342d3234203d3e20323733393733.roa
Signing time:             Sat 07 Jun 2025 00:20:00 +0000
ROA not before:           Sat 07 Jun 2025 00:15:00 +0000
ROA not after:            Sat 06 Jun 2026 00:20:00 +0000
asID:                     273973
IP address blocks:        45.170.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ff:e3:2e:fb:7b:85:fb:88:ff:84:fb:85:b9:71:ec:86:17:32:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Validity
            Not Before: Jun  7 00:15:00 2025 GMT
            Not After : Jun  6 00:20:00 2026 GMT
        Subject: CN=EBBA490C386FA58E960C39CEEA95E98A23639589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:a5:37:a2:8e:e6:a0:ab:7f:f0:24:03:3e:
                    3d:d4:b2:66:28:c4:ee:13:54:ad:90:fa:b3:75:1a:
                    c6:b5:83:2a:6b:31:bd:32:9e:90:7b:ff:b9:09:d7:
                    cf:0b:55:cc:4e:7c:5c:cf:f0:0c:76:ce:41:40:e8:
                    5e:a8:4a:f6:d4:67:63:81:22:8f:64:69:5e:4a:b6:
                    e8:df:5f:14:c2:61:1c:76:6d:e9:72:a6:92:31:01:
                    a7:32:22:3e:46:ce:95:98:63:ee:7e:2c:7a:b6:da:
                    a3:41:3d:76:05:4f:b4:67:63:3c:49:f0:a9:0e:3f:
                    e7:8f:ec:40:2b:64:0b:f3:c4:99:c8:3f:51:c5:9a:
                    b7:df:9c:66:33:e0:20:9f:7d:cd:3e:2c:b1:29:98:
                    50:93:1c:53:4f:68:a0:95:db:a0:dd:f8:cc:71:43:
                    1e:b6:dd:1e:e7:9e:c2:8e:fa:32:2c:36:f3:b5:13:
                    eb:d3:68:fc:25:b5:0e:97:5a:4d:de:4b:d9:67:84:
                    ae:7e:f5:78:31:78:52:c5:72:a3:22:07:4e:94:40:
                    3b:53:c8:00:8c:a2:61:67:20:25:5b:14:1d:3b:57:
                    28:26:4b:db:a4:2a:9a:d3:dc:d0:5e:8d:58:bc:b1:
                    d6:db:58:1d:b7:e8:5d:6d:05:3e:ad:5a:04:01:23:
                    26:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BA:49:0C:38:6F:A5:8E:96:0C:39:CE:EA:95:E9:8A:23:63:95:89
            X509v3 Authority Key Identifier:
                keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130312e302f32342d3234203d3e20323733393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:8d:41:06:44:2d:90:a1:69:df:83:ae:f4:7f:5f:d3:3f:cb:
         11:fb:a5:87:ff:51:1c:07:0e:7e:eb:9c:af:dd:8c:8d:6c:6a:
         80:e6:79:66:74:3b:c1:6b:8d:c0:fc:d2:f5:8b:61:98:58:29:
         82:44:f7:47:35:85:ab:43:23:b2:06:a7:fd:4b:73:ca:15:e6:
         59:07:c5:15:d3:bd:60:f6:a1:fb:0f:e7:18:88:97:8a:7d:ff:
         4d:d8:c8:3e:7d:55:d0:46:15:09:84:76:54:8c:71:03:0b:f2:
         67:76:f5:87:f3:82:e0:25:39:36:86:7e:16:f2:64:2c:ad:f4:
         05:8d:c8:9c:b6:b2:45:3d:de:59:bd:3d:ef:1c:b5:7d:bb:97:
         21:c9:66:b8:19:30:b5:72:c5:ae:4e:73:d8:24:8b:ce:44:19:
         2d:47:ad:5e:82:ce:d8:94:be:38:ea:9f:da:05:03:be:32:bd:
         ce:4a:67:d6:43:e4:ef:f7:d3:00:bb:e7:51:1d:68:ed:93:bd:
         17:be:c6:01:b0:83:b6:7c:3c:c9:61:a8:10:7c:1d:66:ae:22:
         9b:f8:3a:a8:83:18:78:a4:2d:ff:a1:6c:4e:d3:36:24:4b:b1:
         d2:91:fa:8f:ad:81:3a:f2:6b:98:d7:fa:e3:42:f8:b5:45:0e:
         d5:66:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 20:46:07 2025 by rpki-client