Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/34352e37312e372e302f32342d3234203d3e203237383137.roa
File:                     34352e37312e372e302f32342d3234203d3e203237383137.roa (raw, json)
Hash identifier:          Lrkr7Bvdp+Kadh2Ic3kEBMRBzGnAxfADHymqF10qTus=
Subject key identifier:   7F:CE:6C:EB:D1:FD:B0:DC:63:9A:FD:9F:82:44:6A:6B:32:14:E6:49
Certificate issuer:       /CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
Certificate serial:       052B5098845A7CA0EB6C94158061E65698501388
Authority key identifier: 88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/34352e37312e372e302f32342d3234203d3e203237383137.roa
Signing time:             Tue 05 Mar 2024 18:01:38 +0000
ROA not before:           Tue 05 Mar 2024 17:56:38 +0000
ROA not after:            Tue 04 Mar 2025 18:01:38 +0000
asID:                     27817
IP address blocks:        45.71.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2b:50:98:84:5a:7c:a0:eb:6c:94:15:80:61:e6:56:98:50:13:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829B72F41DDDC406EF086511DC7C0AF26D8C3E9
        Validity
            Not Before: Mar  5 17:56:38 2024 GMT
            Not After : Mar  4 18:01:38 2025 GMT
        Subject: CN=7FCE6CEBD1FDB0DC639AFD9F82446A6B3214E649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:3e:a4:92:e1:1a:de:fd:f5:8c:8a:c8:a3:
                    89:94:03:b5:c8:e9:fe:58:90:56:b1:38:06:0b:a7:
                    35:a8:f4:a1:16:68:96:34:4c:57:8d:b8:62:18:e9:
                    3b:65:92:84:7f:bd:4c:7c:48:a2:c9:98:d8:cb:b3:
                    97:e3:15:1c:9b:7a:2c:67:f3:38:13:62:15:f0:6d:
                    0e:58:02:e9:ad:4c:bf:cd:51:6d:c2:96:d1:b4:49:
                    62:83:87:a6:58:98:0d:89:56:a8:70:de:0e:07:c7:
                    6c:f1:d2:52:87:f6:56:02:9e:d0:20:ed:cd:2f:77:
                    6a:38:cc:df:d1:27:fa:97:61:38:41:5d:39:04:8d:
                    ad:95:e5:34:9e:3f:7e:b3:04:65:96:50:0c:4c:f4:
                    8c:95:d1:74:83:75:b1:e6:19:57:97:85:08:50:39:
                    d1:f9:06:11:09:09:d8:12:cf:8b:46:42:33:39:2c:
                    77:d7:bc:10:a0:10:73:51:c7:5d:1d:4e:5b:4c:4c:
                    63:f0:21:16:c8:a3:8f:16:1b:3a:23:64:ff:99:de:
                    46:2e:45:11:22:89:bf:06:60:0c:3e:07:ea:85:69:
                    a2:d8:f1:41:ed:6a:d8:4f:51:3e:83:0b:50:0e:ba:
                    7b:f8:93:95:7f:ac:71:40:a7:d1:a7:60:65:ed:76:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:6C:EB:D1:FD:B0:DC:63:9A:FD:9F:82:44:6A:6B:32:14:E6:49
            X509v3 Authority Key Identifier:
                keyid:88:29:B7:2F:41:DD:DC:40:6E:F0:86:51:1D:C7:C0:AF:26:D8:C3:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8829B72F41DDDC406EF086511DC7C0AF26D8C3E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C266DEA5767581F16FCC1CDAE444AF5C6C5F589AFB89EDFCCD9446C5A5E1791/0/34352e37312e372e302f32342d3234203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:17:4f:80:19:20:aa:df:1d:d4:a0:4d:12:5f:1c:a6:23:
         23:17:47:0d:cf:96:0a:f2:23:ec:15:03:81:e8:c6:b9:90:17:
         54:df:c2:c6:06:d8:c8:88:62:f8:99:ca:16:d2:da:6e:45:fb:
         50:c8:31:82:e9:dd:91:eb:b9:74:a4:92:e4:20:02:a9:56:d3:
         85:27:15:59:a4:e6:02:d2:38:c4:92:32:58:19:02:d6:59:b0:
         a1:da:76:ca:a3:36:6c:48:8a:e9:71:5a:f5:0a:8d:e9:52:55:
         ad:35:a8:b7:51:ce:c0:8b:8a:91:03:f7:1b:94:92:c0:c0:cd:
         ee:57:9d:a4:47:98:da:77:57:a2:df:27:68:44:1f:60:69:a9:
         6c:d4:da:4a:12:d9:17:e3:36:83:ac:51:5b:47:28:ad:5c:eb:
         33:6f:e9:b0:95:de:2b:6d:2d:a7:36:a2:06:06:16:82:85:74:
         0c:17:a2:26:56:01:33:21:03:51:75:8b:40:42:99:44:ff:f9:
         9f:29:c9:00:4f:e6:aa:89:5a:62:da:ca:8a:a0:88:a5:92:79:
         5e:59:2a:82:d1:8a:16:a9:5a:b5:b7:28:00:cc:30:dc:92:a8:
         80:a7:ef:2f:91:07:ba:9e:34:47:13:39:00:ca:7a:39:34:15:
         0a:27:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org