Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235322e302f32342d3234203d3e203233343730.roa
File:                     34352e3137302e3235322e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          rKgGalieGlHue0LFKqmLhvEXJOnA3ssYWHccA/vM7CU=
Subject key identifier:   82:D2:9A:76:7F:95:DC:37:E7:F4:D3:9D:9A:60:59:59:16:FB:19:FF
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       200789581385BE50CDB34360FB5AB56661C81001
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235322e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Mar 2024 18:18:23 +0000
ROA not before:           Tue 05 Mar 2024 18:13:23 +0000
ROA not after:            Tue 04 Mar 2025 18:18:23 +0000
asID:                     23470
IP address blocks:        45.170.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:07:89:58:13:85:be:50:cd:b3:43:60:fb:5a:b5:66:61:c8:10:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: Mar  5 18:13:23 2024 GMT
            Not After : Mar  4 18:18:23 2025 GMT
        Subject: CN=82D29A767F95DC37E7F4D39D9A60595916FB19FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:c7:1e:f5:3c:b0:67:66:53:c5:b7:01:3c:
                    8b:9d:e8:90:9b:61:da:e8:f2:93:f8:92:aa:7b:e3:
                    85:e3:ad:68:cf:1e:39:0b:89:6f:7a:7d:9c:b8:af:
                    37:92:93:87:c8:5d:27:7f:71:80:d2:76:87:01:1d:
                    c7:b9:ff:67:d0:55:df:05:9a:01:92:5a:d2:be:17:
                    38:00:40:69:87:76:69:cf:97:3c:c3:b4:c5:f3:f6:
                    a9:3b:5e:cd:f3:5e:5c:4c:79:c7:36:d3:87:c2:0a:
                    82:0e:fb:62:d4:a2:ca:00:83:df:41:0c:95:0c:c3:
                    f6:9a:f2:51:00:cc:62:1e:2f:98:21:7f:51:26:29:
                    c8:e1:33:7d:b4:79:a5:83:ab:d8:3b:96:ec:3f:ae:
                    4f:2b:9d:9b:0d:c2:85:15:e7:7f:3c:1a:55:d6:88:
                    28:2e:9e:d9:04:e0:8d:97:d6:03:d1:19:42:4b:74:
                    e1:88:49:5e:d3:a2:ee:9c:67:7b:91:01:a6:54:c4:
                    26:a8:e9:2d:05:67:ea:5e:9f:d9:07:5c:ce:f9:c7:
                    cb:bf:b0:43:0e:65:fd:6f:f7:b0:3e:5b:60:23:f0:
                    ca:ed:8a:60:f5:43:7f:c6:65:82:39:91:c4:bd:eb:
                    a6:79:6b:5c:db:66:8d:a5:9a:52:83:fc:94:98:94:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D2:9A:76:7F:95:DC:37:E7:F4:D3:9D:9A:60:59:59:16:FB:19:FF
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235322e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:84:5e:f8:94:c6:29:91:9a:02:a1:20:f4:3a:61:af:40:0b:
         a8:19:d6:1e:10:5d:07:9c:f4:f4:3d:e7:13:dc:72:23:3f:e3:
         60:85:3e:ea:9f:e0:92:16:df:75:14:1d:ae:3b:78:32:4b:ae:
         59:33:a9:b2:e8:10:5a:c1:a0:82:09:66:76:76:c7:00:cf:76:
         5a:5c:0d:b0:88:c6:12:4c:e6:fc:fb:3f:fa:eb:e9:94:9f:16:
         ab:84:f2:0b:c0:6f:5a:b7:ea:32:f5:a7:db:95:8f:5e:17:fe:
         46:85:f1:0c:cf:38:63:33:06:98:65:7e:21:8c:6b:e3:ef:12:
         1a:d3:c7:61:7e:11:9f:27:f9:65:60:b6:db:f3:68:8d:e4:cf:
         53:62:06:6c:64:2d:57:e1:d9:89:f0:46:c5:9a:e7:d4:55:07:
         94:c0:9e:90:a7:12:13:d6:d7:28:aa:1c:b4:2b:bb:0d:19:a0:
         61:ac:d5:f6:4e:97:75:7b:8d:9e:ad:9b:8b:7d:ce:78:b0:1b:
         eb:33:82:38:7c:57:8a:0b:a7:56:7b:fc:84:c3:71:c1:95:cc:
         e9:3f:6d:1d:c6:f0:8c:26:cf:d1:ca:58:0c:b6:a9:bd:63:e0:
         46:10:a6:db:34:5e:3b:1c:9f:b2:2f:8f:b6:ac:e1:82:60:08:
         5c:7c:03:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:47:05 2024 by rpki-client on console-ams.rpki-client.org