Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203232373234.roa
File:                     34352e3138322e3131372e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          lIU7wdwZ1ijMWTAZbqvweMOnASMLhJE2bhY7klLEX0E=
Subject key identifier:   6F:F7:7D:DD:68:23:6E:A9:F7:7C:F0:97:19:79:FC:57:1C:97:9C:61
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       77CE6D480D846CDAF96A639A26DD3F0C0CCE0362
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203232373234.roa
Signing time:             Tue 05 Mar 2024 18:01:46 +0000
ROA not before:           Tue 05 Mar 2024 17:56:46 +0000
ROA not after:            Tue 04 Mar 2025 18:01:46 +0000
asID:                     22724
IP address blocks:        45.182.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ce:6d:48:0d:84:6c:da:f9:6a:63:9a:26:dd:3f:0c:0c:ce:03:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Mar  5 17:56:46 2024 GMT
            Not After : Mar  4 18:01:46 2025 GMT
        Subject: CN=6FF77DDD68236EA9F77CF0971979FC571C979C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:8c:89:ce:e2:7d:57:07:9f:ba:8d:eb:2b:
                    fe:b9:3b:df:fd:62:41:23:02:40:e7:50:c1:13:8d:
                    a9:8e:e9:ce:da:0f:2a:f8:cb:19:29:58:90:a7:86:
                    65:04:91:6a:b8:ca:79:d7:8f:1e:3a:19:d1:b4:b8:
                    40:aa:75:55:fd:48:67:aa:0e:bf:97:d6:a7:09:5e:
                    8f:84:9a:16:da:19:c6:23:fd:7f:dc:ef:8a:03:c1:
                    c9:35:b2:4e:7b:24:a9:d5:5f:88:e2:75:0a:76:3a:
                    f6:a2:89:69:e1:c6:5c:d7:ee:14:d4:59:f1:e1:b4:
                    79:32:c9:e6:3c:f5:1d:a8:27:14:f7:50:44:00:88:
                    38:69:bb:39:f7:08:ea:5d:71:30:87:76:7f:79:4c:
                    11:03:eb:dc:67:d0:d5:1e:ef:43:0f:c6:18:e5:f2:
                    31:39:ce:24:0f:a6:48:9d:26:71:5e:5d:5b:57:eb:
                    d8:81:e7:2b:e4:c2:32:a7:c9:f3:9c:7e:21:2c:5e:
                    0b:42:6a:63:db:eb:1e:50:42:41:00:eb:5b:7e:7b:
                    8f:50:d9:b8:1f:ca:d9:41:ad:7e:e9:b5:8b:dc:3f:
                    c3:88:0c:e1:c3:e1:99:b6:84:f0:2b:82:0e:39:a6:
                    44:08:2e:ef:bf:9b:ee:8d:94:48:66:f2:61:3f:8f:
                    74:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F7:7D:DD:68:23:6E:A9:F7:7C:F0:97:19:79:FC:57:1C:97:9C:61
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:37:2e:ad:04:12:97:5a:f1:f2:ff:39:a7:c2:7d:81:1e:38:
         2d:13:f0:bf:10:4d:db:92:9d:a2:36:64:db:26:cc:7d:d3:79:
         98:a1:56:62:39:c2:44:97:fc:68:04:6a:2f:53:e8:10:77:ac:
         a5:71:1f:2a:69:b3:ed:33:0d:20:db:26:bc:ae:8c:8f:d0:aa:
         17:78:96:93:ef:9c:cf:28:fb:37:c3:a1:77:61:93:f9:d5:ab:
         23:9c:43:3a:5d:5c:73:f0:b4:6e:7d:c5:d2:39:40:c9:0e:14:
         0d:3e:7d:ee:36:a9:62:de:4b:1b:51:cf:58:68:7d:83:fb:69:
         83:1a:2f:c8:15:f4:e9:2a:6f:ba:cb:c7:3f:cc:1f:40:d3:4d:
         57:29:f9:d5:1c:62:80:5b:a5:61:15:62:ca:73:22:f2:e7:9f:
         f6:32:f4:3c:05:cc:96:23:f2:22:d4:75:d2:fd:69:c1:89:3b:
         8e:db:a4:8c:99:a3:d1:87:71:ec:1e:27:e5:d2:fb:b5:b7:45:
         eb:ea:e3:c6:00:92:fd:c5:2b:03:3e:e5:3d:55:9d:b0:31:65:
         ac:8a:91:47:cf:1c:ff:36:85:10:74:4c:fa:29:26:15:1c:1d:
         f5:82:b2:47:c6:47:81:df:8c:c3:67:7e:96:56:70:ca:31:69:
         2c:ae:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:22 2024 by rpki-client on console-ams.rpki-client.org