Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203631343638.roa
File:                     34352e3138322e3131372e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          SF9MspG40sm4fApAQJadroaPqQ7kFfWVsvtudF95qjg=
Subject key identifier:   09:78:A3:33:F6:FD:BD:FF:5A:0A:4F:5D:C9:DB:92:E4:47:23:DD:C1
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       44DBC25F7BE38B2A2412A4372943E0E8B373A235
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 18:01:47 +0000
ROA not before:           Tue 05 Mar 2024 17:56:47 +0000
ROA not after:            Tue 04 Mar 2025 18:01:47 +0000
asID:                     61468
IP address blocks:        45.182.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Jun 2024 10:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:db:c2:5f:7b:e3:8b:2a:24:12:a4:37:29:43:e0:e8:b3:73:a2:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Mar  5 17:56:47 2024 GMT
            Not After : Mar  4 18:01:47 2025 GMT
        Subject: CN=0978A333F6FDBDFF5A0A4F5DC9DB92E44723DDC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:c9:13:e3:32:d6:99:64:7e:7f:81:55:0f:
                    17:54:1c:48:bd:2a:46:b1:1c:ea:27:7f:67:36:42:
                    77:b2:8c:ab:33:b3:cc:84:cf:7f:84:74:fd:92:0d:
                    f2:cb:d2:b6:f5:5c:00:dc:33:00:ac:29:9e:88:39:
                    96:9a:1e:11:e8:24:51:c5:48:fb:05:b7:0d:b7:1e:
                    6b:6b:9f:4b:43:f1:08:06:d4:81:bf:f0:41:d4:55:
                    c7:f4:17:5f:36:52:fc:4e:86:d1:6d:33:22:c9:e3:
                    0f:23:11:7d:81:28:62:a4:8e:8c:26:67:86:68:c4:
                    6a:4b:67:55:d1:a4:21:ea:b7:18:e1:cb:fb:0a:a4:
                    7d:57:b7:43:4d:98:57:6f:bc:b1:25:f8:dd:59:fa:
                    e7:9e:fb:02:da:cd:06:57:4b:1d:9c:57:37:42:8b:
                    a7:dd:c7:cd:5a:35:58:b0:83:8a:b9:c0:a4:b3:5e:
                    bc:46:11:e8:9b:9a:b9:53:80:31:e7:b7:a4:72:21:
                    10:49:3e:11:f4:ab:d6:9c:ff:63:12:ae:42:66:1a:
                    07:9e:18:bb:94:31:c7:40:15:1b:35:14:21:30:c0:
                    75:d8:55:97:7f:59:48:2c:0e:87:20:b0:6a:b7:0d:
                    5d:ea:29:4e:26:a8:95:37:23:85:a5:8e:d1:31:18:
                    e0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:78:A3:33:F6:FD:BD:FF:5A:0A:4F:5D:C9:DB:92:E4:47:23:DD:C1
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:ee:03:63:8a:69:e5:3b:56:d3:d0:6b:a7:59:6a:df:1d:
         38:dd:e1:ca:28:10:5d:a3:b0:e0:76:de:17:72:b9:23:53:14:
         3a:0f:3b:6d:44:9e:df:c5:04:b8:93:48:5a:db:ac:a2:98:a9:
         53:12:2d:99:ab:ea:a9:60:a9:df:ee:c7:7c:10:02:04:50:71:
         8e:8a:5a:f8:43:49:99:1b:9e:7d:13:52:ed:5f:3b:ab:f7:0e:
         2f:08:39:be:53:af:dc:0f:af:08:aa:a0:0e:40:cd:e8:7b:ff:
         f9:80:4e:8f:cb:fc:e6:d0:83:26:d1:f3:c0:92:c4:0f:90:4f:
         6b:2f:f2:e0:39:3d:63:65:05:bf:bd:5e:cb:77:59:6f:d9:ea:
         f9:28:87:5f:b7:ab:a0:1e:e3:21:81:81:a6:70:36:8a:92:b5:
         2c:2a:7e:a3:bc:08:6f:54:78:3e:60:14:d3:51:fa:d0:95:a8:
         c4:9d:62:33:94:5f:0f:e7:b0:6e:98:3a:62:e2:0c:78:16:b2:
         aa:8c:a0:e0:94:00:a8:2b:b7:df:d5:81:1a:f7:9e:0b:44:c0:
         70:21:05:84:5b:03:51:4b:2a:4a:a2:0b:79:7c:79:3a:96:9b:
         48:f0:23:8c:c9:de:7b:13:1d:d1:93:d3:4e:63:3b:ca:a7:16:
         0c:86:3a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 10:34:47 2024 by rpki-client on console-fra.rpki-client.org