Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3234392e302f32342d3234203d3e20323635353832.roa
File:                     34352e3137342e3234392e302f32342d3234203d3e20323635353832.roa (raw, json)
Hash identifier:          jL0qvGRPc+TQx/BI9CIGWrDHJWgavRc32ujPQqm80dc=
Subject key identifier:   0F:B8:52:37:5C:32:94:FF:4B:E2:98:05:6B:11:67:F4:A9:69:F7:86
Certificate issuer:       /CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
Certificate serial:       0E876A511AF86E8F8DFA4E1159FD1601F21ADBEC
Authority key identifier: 57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3234392e302f32342d3234203d3e20323635353832.roa
Signing time:             Tue 04 Feb 2025 18:42:06 +0000
ROA not before:           Tue 04 Feb 2025 18:37:06 +0000
ROA not after:            Tue 03 Feb 2026 18:42:06 +0000
asID:                     265582
IP address blocks:        45.174.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:87:6a:51:1a:f8:6e:8f:8d:fa:4e:11:59:fd:16:01:f2:1a:db:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
        Validity
            Not Before: Feb  4 18:37:06 2025 GMT
            Not After : Feb  3 18:42:06 2026 GMT
        Subject: CN=0FB852375C3294FF4BE298056B1167F4A969F786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:96:78:e4:51:9e:31:f2:a0:97:57:af:28:
                    3a:ec:2c:e8:2f:4b:b4:a2:fe:58:ae:13:77:d8:44:
                    af:61:a1:6d:f5:54:83:c2:08:3c:b4:bc:40:fe:e9:
                    a8:f6:6c:46:2d:d7:a0:bf:3f:ea:e1:0f:0e:07:d0:
                    39:14:de:d5:db:c7:f8:f9:86:26:81:91:42:ed:04:
                    8f:51:a2:b7:89:cf:3d:c3:2d:1d:01:fc:06:d5:e8:
                    67:73:50:53:f9:a8:ba:00:df:64:70:e0:d7:a9:4b:
                    81:41:fe:08:04:ca:14:e2:e2:fc:30:13:2d:56:25:
                    fe:7e:1a:98:81:d4:37:f9:ad:0d:3b:bb:64:08:65:
                    45:6e:76:d4:f2:e8:d4:b4:d3:7a:2d:c2:47:c0:e2:
                    73:71:90:c4:9d:da:58:39:79:a7:0a:61:43:c6:7f:
                    29:3e:f7:5a:15:09:ef:13:12:df:83:fb:79:80:ac:
                    a9:cc:d1:b5:b6:c3:4f:7c:37:86:e4:97:be:a6:c7:
                    2b:b0:d6:59:00:2b:5d:85:ce:7c:5a:0f:b6:98:65:
                    2a:4f:d8:78:48:d8:66:be:d5:8d:38:fd:04:c8:84:
                    00:9f:26:3d:4c:c5:eb:a1:8b:81:a1:fe:69:00:e5:
                    17:29:85:99:35:ab:12:e9:36:76:5d:a5:f1:91:ef:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B8:52:37:5C:32:94:FF:4B:E2:98:05:6B:11:67:F4:A9:69:F7:86
            X509v3 Authority Key Identifier:
                keyid:57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3234392e302f32342d3234203d3e20323635353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1c:9e:a9:ab:74:12:cb:64:b7:29:a6:b6:af:7c:98:1d:bb:
         95:7d:90:fd:20:9a:6d:d7:e9:f4:d2:c9:82:54:2e:41:41:0e:
         c7:b5:13:69:d4:61:9c:40:2a:c7:6d:73:02:f5:d2:50:8e:d5:
         d5:54:ba:0f:ea:8c:b2:16:18:a0:02:af:cc:ed:70:ed:ee:6d:
         70:1b:7d:e8:90:cb:dc:1e:91:ca:f4:b2:f0:db:70:bb:1c:f5:
         44:f5:7a:ee:39:a0:a0:8e:77:c8:55:e8:08:91:70:31:7c:60:
         a5:69:66:c4:44:29:14:ed:8d:82:dc:3c:fa:b2:55:cf:6b:b6:
         7d:dd:06:4f:9c:08:eb:35:30:5f:05:d6:ac:be:1c:15:e8:6b:
         61:a2:56:3a:7f:ac:34:42:b4:38:c2:ba:32:88:5c:6e:a3:93:
         35:be:02:7f:a8:86:3c:83:91:53:dd:f7:48:5a:4a:59:2b:8a:
         ad:f4:53:1a:48:e2:49:27:d0:9b:86:ef:d1:62:a9:3c:90:b9:
         54:46:3a:f4:55:88:76:11:9f:a8:27:c7:06:70:a0:13:af:e9:
         89:02:b0:61:f1:3d:d8:30:24:d2:b0:ff:44:d2:8c:ac:2c:26:
         a8:b7:0a:b0:22:83:26:b1:1d:34:0c:00:f2:f8:be:ed:f5:3b:
         a0:19:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:18 2025 by rpki-client