Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa
File:                     34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa (raw, json)
Hash identifier:          vojAqR7GNhtAn4GRPQNP0Hh8I9ReGiq7MdOn/aURNKc=
Subject key identifier:   32:82:D2:9F:FE:97:FE:35:BC:A7:5A:22:59:81:52:DA:A7:CB:A9:77
Certificate issuer:       /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial:       174C212BF64BA782878A7244C2E0A95CC5299431
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     266655
IP address blocks:        45.225.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4c:21:2b:f6:4b:a7:82:87:8a:72:44:c2:e0:a9:5c:c5:29:94:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=3282D29FFE97FE35BCA75A22598152DAA7CBA977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:fd:db:06:91:75:58:a7:91:6e:7e:d3:67:
                    8a:cc:a7:b9:2e:81:87:47:eb:99:14:54:48:32:1d:
                    2e:4c:4d:11:c4:00:aa:8e:66:2a:21:fa:b8:43:46:
                    ba:87:45:1b:24:cc:5f:1a:24:ae:c0:8c:e3:dd:39:
                    e6:99:40:f4:11:7f:05:00:16:b6:ee:a3:bb:3d:8c:
                    17:b8:50:78:92:2f:cf:ab:29:c3:fc:fc:ee:8f:75:
                    a9:f4:57:55:41:03:e8:84:00:6f:9a:48:e4:b6:7a:
                    0d:00:61:fc:7a:67:91:84:87:b6:c2:4a:f2:0a:82:
                    8e:58:84:0b:bf:81:41:68:a3:87:b5:a3:c1:d3:96:
                    d3:e4:03:e4:4e:0d:8a:c4:e1:19:22:1f:d5:b5:99:
                    0a:c9:12:ab:04:8d:d0:2f:d4:d1:73:13:1d:66:50:
                    cf:f7:b4:a4:b7:20:d5:bf:1d:89:f9:a2:cd:ba:56:
                    ac:d6:5c:55:ab:59:2d:47:a5:17:b3:a7:60:9a:c2:
                    7d:db:20:f0:4d:93:ec:04:43:fa:57:32:88:f1:81:
                    e9:8b:e2:57:a3:81:7b:e5:2b:67:b7:fd:db:ee:da:
                    d1:14:c8:ba:5d:2c:b9:bc:ec:5b:9e:05:c6:ab:39:
                    1d:a8:db:c4:13:cb:e8:af:83:c8:e5:6b:df:07:51:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:82:D2:9F:FE:97:FE:35:BC:A7:5A:22:59:81:52:DA:A7:CB:A9:77
            X509v3 Authority Key Identifier:
                keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32342d3234203d3e20323636363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:38:ed:5f:19:1c:1a:34:75:07:2e:44:7a:a4:c4:76:67:d2:
         1d:b3:6b:36:bf:f9:3e:7d:8d:cf:1c:48:9d:db:cd:20:9a:32:
         e4:b2:3c:d3:d6:79:c3:89:31:52:47:30:56:af:28:63:a8:c6:
         07:c4:60:05:60:5c:ba:25:47:a5:de:92:1e:ac:9e:0d:16:b5:
         7d:a3:bb:b6:a3:c7:a7:c4:de:a5:67:62:1c:e4:e7:73:0a:69:
         d7:ba:fe:83:5d:bc:e8:69:89:10:af:3e:5c:87:46:2c:31:16:
         10:a7:b4:e0:5e:6d:ec:a0:da:b2:93:4b:a8:3c:3c:52:ab:24:
         87:ef:94:50:e8:78:b7:25:16:9d:cf:08:83:d5:92:31:ee:cd:
         0b:39:3f:11:d5:df:b5:02:14:ac:d5:6b:e5:1b:03:b0:ef:d8:
         d6:28:51:ce:cd:7f:f6:4e:91:36:53:c6:ae:9d:4a:82:7d:5b:
         f4:96:d1:15:9d:51:48:e7:a8:c3:77:c2:67:07:64:bd:5b:43:
         b9:ac:21:77:70:df:84:ff:bf:fb:90:55:f9:61:87:67:8e:6f:
         47:cd:eb:a5:81:fe:c4:82:40:11:32:ec:98:d7:f5:39:f9:dc:
         0b:29:b2:5c:b3:89:18:b7:94:f9:f3:f9:fe:37:43:02:ab:0d:
         82:a3:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:04:39 2024 by rpki-client on console-fra.rpki-client.org