Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136352e302f32342d3234203d3e20323637363939.roa
File:                     34352e3137352e3136352e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          6xWnArFq2d6Acvhzy+jfGmxf6xRp5E3wlQ3+UwPmlaw=
Subject key identifier:   7B:0B:2F:8C:E7:B1:73:29:FD:2D:44:8A:B2:49:2D:A2:B2:04:FC:E8
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       368754E874B9F668F9C3678A8A13DCF968317CA8
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136352e302f32342d3234203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 18:04:40 +0000
ROA not before:           Tue 05 Mar 2024 17:59:40 +0000
ROA not after:            Tue 04 Mar 2025 18:04:40 +0000
asID:                     267699
IP address blocks:        45.175.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:87:54:e8:74:b9:f6:68:f9:c3:67:8a:8a:13:dc:f9:68:31:7c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Mar  5 17:59:40 2024 GMT
            Not After : Mar  4 18:04:40 2025 GMT
        Subject: CN=7B0B2F8CE7B17329FD2D448AB2492DA2B204FCE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:bc:f8:25:83:b3:b5:45:4f:b1:0b:e8:82:
                    36:8b:d9:e8:97:95:ac:e3:c9:a1:22:34:6f:6e:59:
                    ce:8a:98:37:7c:e0:60:a6:6e:ce:c7:a2:9f:5e:56:
                    48:9e:69:28:1e:c6:ea:a8:12:95:a6:ce:a5:b9:38:
                    af:ad:3f:95:e2:6b:5e:ff:83:88:b5:31:62:d3:9b:
                    f9:5f:bd:e5:71:40:bf:d5:f8:0f:a0:92:30:e9:21:
                    93:e2:0b:4e:b0:a4:f1:76:5d:1b:d9:b0:ed:5b:51:
                    35:04:3b:d3:b8:2e:9e:d6:ae:c9:ac:8f:7a:1a:79:
                    ac:ca:fb:00:3e:4b:a9:ff:12:46:c3:db:66:92:03:
                    9b:b1:ce:68:3e:16:b9:eb:4b:f7:63:50:22:0f:03:
                    81:12:19:ff:df:ea:93:09:e0:7b:cc:0a:5b:b3:08:
                    70:8f:15:b8:9a:98:a6:20:ed:bd:ec:f3:81:90:7d:
                    3d:1b:04:0e:20:12:66:91:97:45:81:81:cb:00:9d:
                    93:3b:d3:3b:fe:f2:f0:83:3d:a7:3e:b9:ec:6c:70:
                    83:d4:38:01:91:b6:7f:ab:09:33:24:22:ef:3e:8d:
                    80:eb:45:86:bf:de:69:48:88:76:2d:6a:d4:58:59:
                    95:71:0a:7c:37:81:89:8a:29:3e:df:3a:b7:52:33:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0B:2F:8C:E7:B1:73:29:FD:2D:44:8A:B2:49:2D:A2:B2:04:FC:E8
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136352e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:71:2a:3e:98:e0:3f:3f:79:4e:00:fc:b7:b1:8a:08:e7:e9:
         99:39:38:d2:72:63:73:66:d6:43:f5:c4:47:21:90:3f:a4:9a:
         dc:e1:c5:06:05:4b:94:8b:b4:51:ad:8b:f4:cf:2e:07:d2:64:
         09:10:70:79:2a:92:64:88:ad:0c:42:b1:bc:cb:66:f7:24:b6:
         66:ac:28:13:29:79:18:46:99:b0:bd:5b:f6:ba:53:21:a2:28:
         b9:f8:8f:da:93:cc:ac:a9:5a:1a:5a:dd:90:13:da:ad:f6:8e:
         d1:3e:98:6c:9f:99:1c:c5:b4:34:37:9d:78:c8:2d:ab:9e:64:
         9c:a9:cf:1a:a9:d3:86:4d:1c:cf:30:14:b5:eb:ab:b0:e3:03:
         42:f4:84:e4:b6:3c:6a:4a:ad:2c:62:3b:51:bf:97:f2:bc:65:
         62:99:10:46:ec:fa:a3:33:c7:ef:68:0f:df:50:af:c0:d2:59:
         2c:44:99:ab:65:81:0b:0f:23:3a:38:6a:27:44:8f:01:b7:36:
         8e:c2:08:68:bb:c1:07:ee:b5:4b:ec:1e:a3:b8:e1:b9:ac:94:
         48:55:1d:a3:7d:88:c3:5e:68:10:fb:47:d4:4e:b8:0a:f5:ae:
         a6:90:d3:8b:00:52:83:a3:60:e2:83:d2:0a:b8:1e:f2:4d:92:
         59:00:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org