Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa
File:                     34352e372e3234302e302f32322d3234203d3e203532343434.roa (raw, json)
Hash identifier:          QNYI+YNu92ZNG9KIiNgvfzkF2moEJ0HC2snBd8kRfpE=
Subject key identifier:   34:25:B7:5C:3B:75:1F:6D:2B:7E:93:E4:4A:54:4C:29:6B:BA:A6:8E
Certificate issuer:       /CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
Certificate serial:       3FE9FF873106040242447E79E3F01EF3037D204F
Authority key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa
Signing time:             Tue 05 Mar 2024 18:09:06 +0000
ROA not before:           Tue 05 Mar 2024 18:04:06 +0000
ROA not after:            Tue 04 Mar 2025 18:09:06 +0000
asID:                     52444
IP address blocks:        45.7.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 21:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e9:ff:87:31:06:04:02:42:44:7e:79:e3:f0:1e:f3:03:7d:20:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
        Validity
            Not Before: Mar  5 18:04:06 2024 GMT
            Not After : Mar  4 18:09:06 2025 GMT
        Subject: CN=3425B75C3B751F6D2B7E93E44A544C296BBAA68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:34:d6:17:19:69:cd:5b:0c:6b:4c:1e:b0:
                    9d:60:cd:df:ba:dd:4d:6d:47:e1:7b:13:c2:bf:e9:
                    ec:7a:b1:3b:65:44:b0:64:50:96:88:63:83:ff:a5:
                    2e:55:09:c3:6b:eb:aa:e6:be:21:44:7e:4e:f3:7f:
                    87:ca:ce:24:02:29:b5:9b:e3:b0:c3:ff:f3:bf:29:
                    7a:08:12:84:de:21:c0:9f:e0:58:11:5e:e4:e8:84:
                    b1:e7:86:16:65:50:30:10:e0:2a:73:9a:25:e5:05:
                    8a:f6:cb:3b:28:54:1a:02:54:d9:72:1d:ef:62:9c:
                    29:dc:74:37:e3:5d:20:07:f5:c2:99:80:43:3c:5a:
                    ed:8a:1d:74:3b:8b:73:89:81:89:43:4d:eb:92:0c:
                    c8:fc:35:79:b7:95:55:d0:35:83:85:85:52:31:1f:
                    6d:20:7f:ec:6c:d0:34:3c:71:4c:1a:57:98:d5:92:
                    6a:17:10:a2:ce:5e:c5:12:f9:df:59:e6:1f:6f:b7:
                    aa:a8:b6:26:db:57:b5:bf:67:6d:de:ee:6d:a3:e6:
                    57:7c:05:a6:7e:b7:02:ea:26:48:9d:53:d5:90:63:
                    b6:14:b8:63:88:21:9d:4f:b0:69:80:b9:42:7f:c2:
                    f9:1f:a2:8c:28:a6:12:02:83:76:c2:47:9d:6c:86:
                    86:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:25:B7:5C:3B:75:1F:6D:2B:7E:93:E4:4A:54:4C:29:6B:BA:A6:8E
            X509v3 Authority Key Identifier:
                keyid:EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/34352e372e3234302e302f32322d3234203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:13:4a:1d:8d:44:5c:0d:dd:40:b3:0c:43:6b:3b:bd:6f:09:
         3c:d9:f8:5f:e1:02:34:e6:13:23:ef:5c:e9:f1:77:2c:cd:ba:
         e6:6a:6f:57:9a:6b:3f:a0:6b:59:d1:68:16:83:5e:a3:48:d2:
         7c:98:ab:be:63:7d:08:db:ea:e3:bf:16:b4:2c:e8:e0:e2:22:
         18:48:39:b7:dc:5c:98:00:00:f1:08:6b:b5:b2:83:17:9b:01:
         0d:19:7f:d4:72:28:71:4d:af:9f:26:a6:56:39:09:c7:29:c3:
         05:87:34:30:d0:03:e2:5e:77:bc:e8:b2:64:52:71:3d:6b:47:
         3f:65:de:23:72:da:f2:1e:2d:a2:d7:f6:6e:34:ee:10:ed:57:
         17:a0:91:bf:bd:47:95:a2:43:18:8b:cc:b0:f2:05:fd:72:80:
         d5:dc:d6:35:4b:a7:c8:7b:0d:b3:6b:b7:e0:42:ac:f1:2c:80:
         58:bc:02:a0:eb:4d:29:89:d1:23:46:af:06:a0:dd:09:0e:3e:
         f7:96:dd:19:36:4a:ca:15:10:fe:f9:4d:09:e6:f8:61:f7:4b:
         94:67:4e:48:3b:5c:67:d7:d9:28:3a:9f:aa:15:16:94:a7:08:
         b1:51:0d:97:97:62:68:11:f3:19:6e:f0:48:d7:93:5f:91:78:
         84:25:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:12 2024 by rpki-client on console-ams.rpki-client.org