Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e34332e302f32342d3234203d3e20323636363535.roa
File:                     34352e3232352e34332e302f32342d3234203d3e20323636363535.roa (raw, json)
Hash identifier:          RRdUDaFRqLrQYnIpIY15hyB6jvtcwppsvganIuZxte0=
Subject key identifier:   16:CE:0E:5C:C3:DC:D7:AB:71:AB:8D:88:C0:AF:5E:7B:9D:69:D6:B1
Certificate issuer:       /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial:       7BF0C406A1DBC94D6920E926B06C490613C6054E
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e34332e302f32342d3234203d3e20323636363535.roa
Signing time:             Tue 05 Mar 2024 18:00:32 +0000
ROA not before:           Tue 05 Mar 2024 17:55:32 +0000
ROA not after:            Tue 04 Mar 2025 18:00:32 +0000
asID:                     266655
IP address blocks:        45.225.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f0:c4:06:a1:db:c9:4d:69:20:e9:26:b0:6c:49:06:13:c6:05:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
        Validity
            Not Before: Mar  5 17:55:32 2024 GMT
            Not After : Mar  4 18:00:32 2025 GMT
        Subject: CN=16CE0E5CC3DCD7AB71AB8D88C0AF5E7B9D69D6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:1c:00:3a:6f:cb:9c:6c:1c:c1:b5:72:f9:
                    db:97:8c:d7:f3:5a:94:95:b8:b3:fc:b4:6b:28:e9:
                    86:40:33:1e:71:8e:3f:a2:92:ff:e4:0c:c0:9f:fa:
                    47:38:ad:96:54:f4:bb:dc:4b:64:20:85:30:03:cc:
                    90:ab:91:c5:a9:c9:b9:9c:a0:cb:24:22:d2:97:da:
                    11:b5:0e:eb:83:a9:97:c5:bc:37:a4:3a:9b:1b:13:
                    f7:fe:e0:dd:ed:ae:42:e9:fd:f6:6c:ce:24:c5:2c:
                    77:8b:45:cd:84:63:77:4a:11:33:89:25:a7:2c:f8:
                    bd:d8:2d:9d:9d:85:8b:7f:ce:68:84:23:47:fb:80:
                    54:f9:c2:c7:13:d3:58:44:f3:c8:7f:77:91:57:41:
                    78:18:c1:9a:b1:2d:6e:ac:66:23:29:c1:4c:09:10:
                    c3:cb:fc:05:ca:03:17:6c:7c:be:29:9a:e0:1f:a4:
                    b7:fa:01:1a:47:2b:50:92:26:82:b3:ca:26:fc:41:
                    9c:6c:32:51:dd:26:91:a7:1d:10:ec:1c:4f:9e:87:
                    63:89:b0:7a:e5:24:1a:cd:55:59:dd:8e:fd:d1:79:
                    64:9f:1a:70:57:87:c4:f7:ea:cc:57:96:55:06:fb:
                    72:bc:c9:72:7d:f8:4a:5c:d5:2d:0b:11:84:20:e0:
                    a6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CE:0E:5C:C3:DC:D7:AB:71:AB:8D:88:C0:AF:5E:7B:9D:69:D6:B1
            X509v3 Authority Key Identifier:
                keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e34332e302f32342d3234203d3e20323636363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:50:27:cf:92:11:b9:96:b0:79:bd:e1:d3:c9:c3:a0:47:3f:
         47:4d:69:d2:6f:0c:c5:a8:14:48:a1:d9:87:04:ee:1a:c8:6e:
         43:21:13:a6:ba:49:7b:e9:30:7e:98:e6:c2:69:0a:b3:28:2b:
         2b:f7:3d:48:8f:28:d7:e0:f3:b0:c5:f8:a1:1d:15:aa:43:c7:
         4c:24:4d:7e:df:21:a4:d7:28:75:31:9d:1e:5b:27:5f:ff:50:
         98:0d:93:50:7d:5a:bb:e4:39:19:56:78:88:bd:ba:8a:e7:ab:
         b9:3b:fd:08:13:7d:60:6f:c5:85:5c:56:77:ac:7e:ea:e9:7b:
         8b:eb:00:96:6f:85:e8:88:13:ef:8d:bd:72:4f:c1:9c:0c:5c:
         93:da:de:11:86:9e:55:e1:3e:81:98:00:4e:0b:90:7a:2c:30:
         71:54:db:32:c7:f9:14:0f:0d:7d:dc:25:e7:8d:f6:d2:07:fe:
         3d:d3:e3:95:be:cf:d6:10:0a:c5:f6:5f:ac:2b:2c:3c:d1:31:
         0b:79:6b:cc:16:6a:26:47:f6:4d:46:2f:62:5c:bf:20:f7:85:
         f8:86:24:cb:c8:2f:1f:97:3f:9e:ce:a3:8b:58:3d:02:80:65:
         8f:8a:1e:d7:50:e9:e1:26:36:c9:fc:01:35:c8:d9:9e:e2:2d:
         82:38:3a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 15:21:34 2024 by rpki-client on console-ams.rpki-client.org