Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e322e302f32342d3234203d3e20323635383537.roa
File:                     34352e3232352e322e302f32342d3234203d3e20323635383537.roa (raw, json)
Hash identifier:          nZpvpMORhu81XYTiy/5HoqT3TWqVpG05mRyeeJ082A8=
Subject key identifier:   FA:B7:14:1B:1E:0F:76:B3:D9:BA:33:C8:75:4E:72:75:2E:0A:55:73
Certificate issuer:       /CN=B1225D42FCF145DB2561F136DC359390925409AD
Certificate serial:       1F52F0B15376185BE9B4950978A7CA4E8D9A634F
Authority key identifier: B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e322e302f32342d3234203d3e20323635383537.roa
Signing time:             Tue 04 Feb 2025 18:24:36 +0000
ROA not before:           Tue 04 Feb 2025 18:19:36 +0000
ROA not after:            Tue 03 Feb 2026 18:24:36 +0000
asID:                     265857
IP address blocks:        45.225.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:52:f0:b1:53:76:18:5b:e9:b4:95:09:78:a7:ca:4e:8d:9a:63:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1225D42FCF145DB2561F136DC359390925409AD
        Validity
            Not Before: Feb  4 18:19:36 2025 GMT
            Not After : Feb  3 18:24:36 2026 GMT
        Subject: CN=FAB7141B1E0F76B3D9BA33C8754E72752E0A5573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:17:03:38:00:09:89:04:0a:81:27:eb:cc:
                    f5:16:7e:0b:82:6d:18:62:64:06:1d:67:e7:9c:39:
                    71:50:9d:12:b0:8c:aa:e4:fa:78:60:cd:ea:de:69:
                    33:cc:3d:7a:1d:6c:a5:2f:37:55:d0:a3:08:0e:0b:
                    a9:c7:8e:0d:fc:c5:26:62:50:51:ed:ab:e1:4d:5c:
                    2f:fe:77:c9:48:d4:7f:38:e6:aa:df:e9:25:b4:77:
                    ff:b7:81:7f:32:5c:12:82:c9:51:7a:82:9f:2e:b4:
                    c6:ed:47:83:0e:97:66:3a:51:ee:39:96:84:47:71:
                    6c:f2:9b:7a:c8:ca:19:fe:29:cf:f7:90:02:6b:5c:
                    b4:d5:8f:4d:e3:e6:b1:6b:bb:51:ff:1c:41:ca:88:
                    bd:6a:14:03:74:ac:1e:2d:3f:77:7d:a2:63:ec:60:
                    b3:67:81:8c:84:86:fe:b1:f8:87:d4:27:37:8c:1e:
                    95:62:1b:fa:bd:1c:e2:07:f7:f3:9a:4b:2b:a8:ac:
                    df:5c:99:df:f2:a5:6e:f3:2f:fa:9c:dd:3d:18:01:
                    a6:48:61:1a:87:6d:58:01:0d:5b:02:86:2a:12:69:
                    0c:3b:07:13:fd:68:11:63:b8:ed:77:3a:f2:eb:12:
                    94:9f:ff:87:4e:18:83:d3:94:fb:18:28:5a:ac:c1:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B7:14:1B:1E:0F:76:B3:D9:BA:33:C8:75:4E:72:75:2E:0A:55:73
            X509v3 Authority Key Identifier:
                keyid:B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e322e302f32342d3234203d3e20323635383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:76:f8:6a:73:bc:4c:b1:b0:47:fd:0d:e3:d6:01:0b:a1:
         1b:eb:ec:69:dc:42:45:d3:b9:70:a6:f2:b0:5d:23:b7:5b:e8:
         5f:7c:8c:e1:22:4c:4d:7d:96:18:23:7d:10:fe:c3:8d:9b:55:
         9a:6d:23:d5:4a:04:7f:c9:2f:b5:5c:f1:f3:85:8c:91:4f:c2:
         eb:54:a2:8f:16:03:da:a2:ac:aa:b0:ae:80:85:fe:94:9c:68:
         b9:b3:e3:4b:6f:bb:97:7e:29:ef:d0:b9:47:7e:c8:82:bf:6d:
         f7:29:52:98:d8:ac:f1:58:0d:18:e2:ef:93:14:46:ae:8d:ae:
         75:0d:fd:74:47:5f:5d:3b:c0:9e:d8:ee:0b:ea:70:c2:53:24:
         d8:29:96:4a:a4:d3:5f:5e:11:e9:35:6e:e9:b6:1e:7d:91:92:
         f4:b2:a7:5a:2d:be:47:90:1c:6b:ad:b4:5b:05:ad:ba:a7:93:
         f4:2a:f3:74:61:3c:34:a4:bb:98:4c:80:8a:d4:66:bb:15:b9:
         20:90:43:50:b3:f0:4f:96:40:4c:e3:da:70:17:ae:24:96:91:
         67:f0:cd:7b:92:0a:c6:1c:dc:7e:a3:f4:06:4c:47:28:cc:e7:
         4a:95:8b:6b:d0:22:79:ef:94:fd:66:e5:02:85:8a:d9:09:e6:
         c5:49:1c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:56 2025 by rpki-client on console.sobornost.net