Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa
File:                     34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          qkGCVDysj8vQURxII+Mfy41lUJFalquyFdsV8eLmjTs=
Subject key identifier:   CB:06:64:95:A9:F6:BB:36:E7:B0:AA:27:AD:5F:C5:61:C2:F2:C2:6C
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       19E90946A7DBF1A7E0B500827185779A92CF3FF4
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 18:04:40 +0000
ROA not before:           Tue 05 Mar 2024 17:59:40 +0000
ROA not after:            Tue 04 Mar 2025 18:04:40 +0000
asID:                     267699
IP address blocks:        45.175.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e9:09:46:a7:db:f1:a7:e0:b5:00:82:71:85:77:9a:92:cf:3f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Mar  5 17:59:40 2024 GMT
            Not After : Mar  4 18:04:40 2025 GMT
        Subject: CN=CB066495A9F6BB36E7B0AA27AD5FC561C2F2C26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:0f:d7:a8:c5:79:2d:59:8c:be:84:49:ba:
                    8f:19:9e:ea:25:29:a7:db:74:b7:a2:2b:5e:20:73:
                    45:c2:eb:8d:01:6e:85:de:cc:ed:6c:f4:36:b6:16:
                    94:9c:c2:7e:14:88:de:97:4a:ee:c5:7f:d4:d9:e8:
                    e7:78:41:9c:aa:3b:ac:16:9f:bd:b2:21:26:48:03:
                    4d:5d:e0:93:05:5a:99:75:88:8f:44:40:bf:f3:03:
                    e5:26:e1:1b:dd:43:4b:89:ef:db:9f:69:88:64:07:
                    5c:af:18:65:8b:0b:37:29:ad:d6:d5:04:b8:d7:19:
                    af:f1:cb:81:ff:59:55:de:8f:96:4c:18:d9:8e:4f:
                    56:4e:13:51:bb:a5:2f:86:e0:d2:b4:56:a6:24:44:
                    b8:49:ce:2d:8e:f6:0a:ab:40:26:26:73:62:a2:ee:
                    2a:ed:80:a7:5a:cb:32:f4:3c:fd:44:8d:45:9e:59:
                    05:8f:f9:8b:8c:ea:94:9c:c0:fa:74:27:5d:5b:c7:
                    41:69:89:1d:aa:c9:1b:f9:b7:0f:3b:72:0b:94:f3:
                    5b:b6:2b:ac:30:1a:d3:e8:6d:35:ab:a2:7c:96:fc:
                    b9:3e:58:24:32:44:0b:b9:ff:3b:13:2d:57:66:cc:
                    09:db:20:e3:54:63:bd:fd:a0:77:c8:00:53:ac:30:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:06:64:95:A9:F6:BB:36:E7:B0:AA:27:AD:5F:C5:61:C2:F2:C2:6C
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136372e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:69:ee:2c:c7:83:e4:64:32:d5:1d:51:f3:5b:08:54:0e:95:
         e0:0d:1a:a2:cf:e9:34:b2:cc:b5:6b:79:92:fb:5a:36:f7:44:
         96:03:41:94:6b:16:a6:4e:3e:47:5f:c4:35:f1:e6:b5:d8:6f:
         6f:ff:a2:5e:1b:a5:6c:fb:38:33:c0:c4:93:48:cf:f2:4d:e5:
         d0:4f:86:e3:2e:4d:37:73:3e:9c:d3:62:e8:7c:df:bf:93:22:
         38:cd:c0:d5:25:93:fb:8d:74:8c:52:27:bf:00:4d:51:78:60:
         18:b3:bf:0f:05:c2:32:f3:04:39:02:6d:d4:a8:59:1f:11:dd:
         35:0c:c8:70:77:17:14:03:e5:13:7d:83:6e:aa:d6:d4:75:f0:
         54:45:29:0a:20:f1:c4:6f:a5:f9:b0:61:78:0e:e6:5d:6a:7c:
         28:77:a5:7c:76:71:e5:eb:91:b2:e4:e5:9f:fd:10:e9:b6:d1:
         26:3c:ea:40:61:3a:fb:00:dd:69:2b:ce:96:9e:38:7d:ef:0c:
         de:28:7d:e0:17:b5:a7:e7:e0:b1:25:1e:b1:c8:db:7c:e1:4f:
         0b:b1:f1:bc:c6:a8:f7:7e:de:3a:b1:9c:b0:3c:6c:c6:da:1c:
         3d:7d:c7:b1:0d:8f:4a:d7:c9:e1:70:1a:f7:d1:e3:b5:10:f2:
         40:48:3e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org