Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/34352e3233302e32302e302f32342d3234203d3e20323032.roa
File:                     34352e3233302e32302e302f32342d3234203d3e20323032.roa (raw, json)
Hash identifier:          rcOkTX7EIdD4KQlmEU7ORf+qAbOa6ld4Pgx0Hdt0UzE=
Subject key identifier:   E5:8A:F2:E0:32:74:C1:4D:3E:EF:E5:1C:B0:AC:B9:0C:B9:C1:2E:EB
Certificate issuer:       /CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
Certificate serial:       5D451E929866B0D70BA5474374957F30370F725E
Authority key identifier: 96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/34352e3233302e32302e302f32342d3234203d3e20323032.roa
Signing time:             Fri 25 Apr 2025 19:16:09 +0000
ROA not before:           Fri 25 Apr 2025 19:11:09 +0000
ROA not after:            Fri 24 Apr 2026 19:16:09 +0000
asID:                     202
IP address blocks:        45.230.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 08:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:45:1e:92:98:66:b0:d7:0b:a5:47:43:74:95:7f:30:37:0f:72:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96
        Validity
            Not Before: Apr 25 19:11:09 2025 GMT
            Not After : Apr 24 19:16:09 2026 GMT
        Subject: CN=E58AF2E03274C14D3EEFE51CB0ACB90CB9C12EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:19:8e:fc:89:9e:46:1a:01:a0:92:c1:ca:
                    5b:99:e9:e6:76:e1:31:e9:5c:b7:01:cf:79:17:fb:
                    37:60:a2:03:44:87:e5:52:b3:a1:b2:6e:06:1b:ea:
                    6c:ea:a2:5c:d4:04:7f:cd:f0:c5:40:bb:12:6b:ce:
                    91:3d:6c:27:28:d6:18:11:d9:25:ab:9a:ff:78:42:
                    9a:d8:14:89:82:c0:d5:42:cd:91:07:16:3d:99:2c:
                    6e:52:6e:10:88:97:87:07:76:7e:63:c0:6a:55:f6:
                    20:58:20:41:28:e1:b4:ea:72:d6:c6:da:9c:24:b0:
                    41:8d:73:c6:83:f0:23:f8:0c:96:e8:f4:f7:37:12:
                    da:a1:ad:ee:1f:2c:36:61:1b:29:1d:b2:80:68:fc:
                    64:5d:e8:6d:1a:b9:58:af:8a:39:f5:a4:98:87:12:
                    f5:55:29:35:f0:ca:d3:25:f2:63:98:52:88:d0:d3:
                    59:91:af:5a:dc:cf:2d:a6:00:0e:5a:da:d6:e4:9b:
                    a2:01:96:1e:d9:a3:74:13:81:c3:f3:fa:9b:55:77:
                    b8:6f:53:e5:97:fc:3e:7c:1a:21:3f:4b:fb:a2:d6:
                    26:b4:dc:6c:a5:4a:7f:d2:68:5e:14:c5:32:9b:7f:
                    35:e6:ea:38:1b:72:16:88:90:d9:41:74:46:cb:12:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:F2:E0:32:74:C1:4D:3E:EF:E5:1C:B0:AC:B9:0C:B9:C1:2E:EB
            X509v3 Authority Key Identifier:
                keyid:96:4E:B9:84:A6:CD:AD:66:DD:3C:C7:17:D7:0D:6E:7D:CD:4F:FE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/964EB984A6CDAD66DD3CC717D70D6E7DCD4FFE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB4FA6DE1E1C424F1F3EDED7073AB81312FC4A68EAD020ADF2F6168B79FDE8FD/0/34352e3233302e32302e302f32342d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:c2:35:b5:a9:0d:c8:ec:43:ea:78:70:10:31:6b:2a:82:
         f9:5f:57:59:1e:d4:da:cd:f2:a9:f3:d2:37:12:80:fa:86:b1:
         3f:44:0a:04:88:6f:48:11:1c:66:d7:25:cf:18:f2:70:25:82:
         14:b0:ec:9c:47:de:cb:f8:48:e4:20:f6:3b:7a:71:ce:d9:13:
         12:5d:ad:79:93:29:b6:27:2a:3a:44:76:9b:73:38:5e:85:16:
         ed:16:07:04:d3:49:06:74:a1:58:6e:41:fb:1e:ea:58:07:17:
         a2:ee:98:05:db:15:6d:eb:11:da:02:bb:8d:82:2d:da:3a:70:
         bd:1e:5c:66:f2:b5:de:65:2c:ca:7e:a2:fc:d2:5e:4e:a7:e0:
         be:6d:d5:d2:90:49:70:85:92:62:38:0d:ba:9f:1a:67:b6:c7:
         ad:72:50:b9:cc:b9:46:86:f9:ac:43:aa:b8:cf:4b:9d:79:67:
         1d:19:6f:c7:64:da:03:53:7a:da:8d:07:07:e5:b5:47:ae:dd:
         f4:96:2e:50:e3:63:9b:d2:c5:39:ff:5e:bd:de:9f:c7:95:39:
         25:0a:21:b4:17:84:9d:f0:84:4e:b4:e6:89:2c:ec:ea:27:f0:
         e8:bf:6a:53:9a:15:fe:ea:85:17:c8:de:e1:97:75:17:26:c6:
         13:37:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:46:53 2025 by rpki-client