Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203237393437.roa
File:                     34352e3138322e3131372e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          UhiNPoW0gdtxRLEV+UIR0CzQuQ4kLRNsyeFLiqZIhm4=
Subject key identifier:   AB:F0:59:B5:99:9B:12:53:56:38:0E:50:28:D2:F6:64:6A:1C:68:D0
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       52694174BE4E8AC03CD2093C32710BD89B0F25BE
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:01:47 +0000
ROA not before:           Tue 05 Mar 2024 17:56:47 +0000
ROA not after:            Tue 04 Mar 2025 18:01:47 +0000
asID:                     27947
IP address blocks:        45.182.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:69:41:74:be:4e:8a:c0:3c:d2:09:3c:32:71:0b:d8:9b:0f:25:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Mar  5 17:56:47 2024 GMT
            Not After : Mar  4 18:01:47 2025 GMT
        Subject: CN=ABF059B5999B125356380E5028D2F6646A1C68D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:99:f3:2a:78:8b:fe:9f:0d:f9:08:b9:1c:
                    6d:fc:63:93:db:9d:f2:ef:0e:36:22:60:47:a8:ea:
                    ca:cc:05:7d:b5:72:2f:5c:d8:43:a6:d5:53:07:e5:
                    81:58:01:51:cf:8b:28:c4:59:0b:e8:6c:39:bc:55:
                    52:55:d0:86:31:91:47:92:c1:d4:ca:f0:c6:2b:0f:
                    59:20:a6:f4:83:eb:bb:fc:10:35:ec:ce:24:d9:6c:
                    e8:28:9f:ce:7d:bf:ef:cc:8f:16:b5:65:96:6a:ce:
                    9b:a0:c7:bb:31:1c:4f:0d:8d:94:bf:27:fa:d3:7f:
                    e9:e8:c2:a0:06:6e:3a:83:95:78:56:96:7b:1c:03:
                    b4:66:c6:61:a9:ae:d5:11:57:56:09:29:b2:e6:e7:
                    3d:5d:e6:10:ae:bb:4c:3b:df:4e:f2:3d:b3:34:14:
                    da:d3:49:98:1b:48:5c:90:a8:cf:a6:02:33:97:9e:
                    ef:8a:70:cf:19:46:11:2b:bf:c0:b6:84:17:39:6c:
                    dc:78:b9:68:2f:8d:99:fe:7a:ee:24:a9:b4:2b:ed:
                    58:bf:77:94:d8:19:83:a8:45:a5:6b:8d:bf:cc:6c:
                    5a:26:f5:73:be:84:6c:a9:c5:e2:df:8b:47:63:ae:
                    28:6c:17:af:b9:3f:88:3f:d6:9c:ef:54:ed:50:b2:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F0:59:B5:99:9B:12:53:56:38:0E:50:28:D2:F6:64:6A:1C:68:D0
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:dc:e3:9a:57:6f:d1:b1:04:28:03:f4:f7:ee:b6:94:f4:3d:
         7a:fe:52:81:8d:c4:c6:ef:b0:f0:7e:2c:db:87:59:f8:50:54:
         94:fd:20:2f:81:62:00:1f:b8:f5:68:4d:5e:ff:a5:03:10:ae:
         5e:3b:83:52:da:06:b2:c2:e9:08:98:24:5a:c8:e6:dd:db:c3:
         5c:31:f0:02:18:81:9f:4e:38:89:1f:28:0c:3c:bd:6b:88:a7:
         09:c8:65:8b:f1:dd:55:7e:f0:4a:de:ac:44:b3:a7:88:8b:57:
         25:14:68:b9:9b:70:b3:15:65:3d:01:68:ba:a8:35:fe:5c:56:
         c8:2f:3f:f2:03:b2:6c:12:06:ee:ba:a3:30:d0:a5:31:39:d5:
         69:99:a4:f5:c5:bd:fd:06:54:36:05:c2:4b:19:ee:2e:f6:35:
         9f:57:5b:b5:66:0d:0f:27:78:22:76:b8:0a:54:f3:0e:64:75:
         73:3c:e4:40:ef:a5:e9:c8:f0:8a:e3:b1:02:a1:97:aa:e6:2c:
         13:0b:61:e6:8e:69:e4:3c:79:85:10:e8:50:6c:12:05:0b:66:
         3a:84:b4:9f:e5:a0:59:66:dc:b4:2a:e9:7f:fd:ac:56:33:b3:
         38:77:7a:5e:0d:ad:21:95:b6:31:ce:56:a9:94:9d:54:5c:f3:
         6f:38:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 06:40:22 2024 by rpki-client on console-ams.rpki-client.org