Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa
File:                     34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa (raw, json)
Hash identifier:          WjVlKSmlKMfYyLfSYBFcHYHLAWBav6vyWpdUW5Fo7i0=
Subject key identifier:   A7:F4:94:6B:68:CA:52:E0:0C:7C:27:1B:81:89:01:7A:60:3D:69:91
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       7AF57733C8994939B672DE13492BA63E89935F3D
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa
Signing time:             Mon 09 Jun 2025 16:40:00 +0000
ROA not before:           Mon 09 Jun 2025 16:35:00 +0000
ROA not after:            Mon 08 Jun 2026 16:40:00 +0000
asID:                     273965
IP address blocks:        45.175.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Jun 2025 04:58:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f5:77:33:c8:99:49:39:b6:72:de:13:49:2b:a6:3e:89:93:5f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Jun  9 16:35:00 2025 GMT
            Not After : Jun  8 16:40:00 2026 GMT
        Subject: CN=A7F4946B68CA52E00C7C271B8189017A603D6991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:51:d2:10:93:4d:bd:b8:5d:65:05:4c:57:
                    a2:39:f9:37:11:6a:d3:81:7c:f8:c7:95:c1:6a:76:
                    94:74:0f:21:94:60:c4:68:1b:4d:f3:ed:91:78:7a:
                    19:b4:32:b5:81:81:82:66:3a:f7:79:13:94:a1:a6:
                    33:aa:ac:05:dd:81:45:ed:cc:f7:25:28:23:97:f2:
                    7a:b2:79:8d:e8:98:68:a2:03:81:b4:e8:f5:df:39:
                    b1:b7:03:4a:30:4f:dc:37:83:c7:2e:f7:05:f9:8c:
                    5f:13:af:38:a8:97:ed:4b:8d:a1:b3:6e:c5:44:61:
                    66:b1:13:a6:65:7f:12:6f:ae:76:da:8b:73:5c:82:
                    ba:a6:13:cf:8a:f6:29:d5:0c:af:1b:43:fc:b5:fb:
                    ec:05:64:a9:0c:07:22:2b:50:aa:55:eb:14:58:a4:
                    59:94:1f:08:aa:fe:0e:56:b7:f3:e2:c3:1e:01:76:
                    e9:93:62:73:78:15:3a:6d:b8:72:17:94:51:0b:71:
                    a7:00:4a:fd:dd:ed:b6:00:28:b2:ad:ab:f2:ce:04:
                    8c:8d:c1:7c:f6:2e:08:27:3e:0e:bd:31:79:77:a5:
                    4e:ff:60:7f:5e:9a:2d:8a:ba:c8:31:9f:e3:7a:51:
                    c4:8f:e3:e8:bf:0b:a3:df:6b:a1:a8:a7:83:8f:30:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F4:94:6B:68:CA:52:E0:0C:7C:27:1B:81:89:01:7A:60:3D:69:91
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323733393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:07:70:7c:ca:62:9d:d2:5d:13:72:d0:f0:b5:2a:2f:ff:b7:
         16:f9:58:30:3d:91:59:6f:5f:66:d7:25:5c:1f:f6:e2:00:26:
         c0:d8:b5:42:71:1c:6b:66:79:a1:61:9e:07:a9:ac:8f:f5:2a:
         fe:5a:70:d8:8c:1a:a7:52:c0:ca:ea:af:fe:dd:6f:b4:62:b6:
         51:63:3a:eb:bd:f2:94:f9:49:77:08:63:b4:40:08:90:9c:41:
         95:c6:e0:79:bf:f3:ab:f0:12:87:42:fd:71:22:06:95:66:14:
         1a:40:bd:15:30:40:c7:24:b8:e0:0b:45:75:60:8c:2b:58:b8:
         03:13:b3:33:d7:96:f1:3c:90:c4:3e:8c:ab:d4:d5:ca:96:68:
         03:65:65:1f:0a:e2:eb:e9:71:48:b1:35:9c:05:19:e4:67:6d:
         cf:e3:4c:25:a8:19:45:25:ce:da:b2:11:c4:eb:c9:1d:e3:48:
         d4:4e:ed:00:ea:a5:a1:76:4a:b4:cd:68:7b:28:a3:6f:b8:f5:
         ef:8d:1c:01:bf:fd:99:5d:1e:78:da:28:b7:a9:41:dd:14:d7:
         10:ba:c7:d0:b5:2b:a1:e3:7a:11:8f:6e:fd:d0:0e:35:f1:68:
         c9:23:4b:6d:da:fd:29:26:15:a8:35:fd:28:a6:c2:36:2c:42:
         52:df:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:23:47 2025 by rpki-client