Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa
File:                     34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa (raw, json)
Hash identifier:          CA57jkU2XzX2vChOrm6gQ6g2uiKsQyaWtFsG4XnPmLQ=
Subject key identifier:   15:5B:AD:5A:E4:33:AE:2C:CB:83:D2:24:45:33:0B:5F:99:D2:6C:8B
Certificate issuer:       /CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
Certificate serial:       6A489C8A3B8E9F8CA52E96BEB1B3943AFF88F1D8
Authority key identifier: 57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa
Signing time:             Tue 04 Feb 2025 18:42:04 +0000
ROA not before:           Tue 04 Feb 2025 18:37:04 +0000
ROA not after:            Tue 03 Feb 2026 18:42:04 +0000
asID:                     265582
IP address blocks:        45.174.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 05:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:48:9c:8a:3b:8e:9f:8c:a5:2e:96:be:b1:b3:94:3a:ff:88:f1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
        Validity
            Not Before: Feb  4 18:37:04 2025 GMT
            Not After : Feb  3 18:42:04 2026 GMT
        Subject: CN=155BAD5AE433AE2CCB83D22445330B5F99D26C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:2a:c9:07:6a:bc:b8:6a:42:69:97:cf:bd:
                    94:b7:1d:9f:6e:35:25:c5:1d:07:f0:0a:9d:24:64:
                    c2:85:84:c1:51:f5:bc:2e:8a:0f:d2:26:7f:c2:0c:
                    f6:b0:7e:20:28:c9:89:b7:c3:bb:e8:11:b2:40:bd:
                    3e:7a:78:7b:b4:07:db:85:fb:e3:fb:9f:91:b8:20:
                    8a:6c:2c:e6:72:21:cf:00:81:74:46:80:56:b9:d2:
                    0a:4c:04:ee:60:d0:f7:f1:97:4b:f1:59:63:b2:ee:
                    15:4d:98:8f:1b:bd:28:97:58:d1:6d:02:65:43:e8:
                    7a:2d:4a:ac:ca:04:e2:77:34:df:79:9f:b5:cc:58:
                    35:48:8a:1f:e5:e6:52:25:d7:2c:03:d0:f3:3d:ba:
                    b4:7f:16:e9:72:a0:77:f2:be:d0:ad:5e:03:76:35:
                    2d:73:b0:cf:9e:d7:e9:61:07:83:42:21:03:3b:a0:
                    bb:b9:58:b4:ad:32:37:56:fd:51:dc:c3:10:f2:ad:
                    75:8d:b0:b5:1c:42:2c:51:a8:98:88:ef:17:aa:32:
                    dd:a1:f8:c4:e9:54:25:b8:6f:f1:cd:57:7b:97:84:
                    b3:ba:ab:7f:9c:3f:91:55:ea:00:c2:80:7f:57:f4:
                    8b:08:ec:fd:95:e8:0c:23:3f:34:81:f5:3a:22:77:
                    22:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5B:AD:5A:E4:33:AE:2C:CB:83:D2:24:45:33:0B:5F:99:D2:6C:8B
            X509v3 Authority Key Identifier:
                keyid:57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9e:bb:ae:ef:26:36:29:e1:44:56:65:51:f7:d5:11:7d:73:
         46:01:8c:5f:aa:b3:b6:f7:da:3c:6f:07:12:69:a5:f6:58:f5:
         c6:a1:6b:7c:23:09:24:7f:89:ae:b1:5f:e4:4a:19:c9:e6:1e:
         4f:cf:86:96:70:74:00:b5:69:42:10:21:dc:1e:77:f7:4d:80:
         48:8c:ce:57:a7:a9:15:e0:de:21:1c:ff:95:00:11:43:0e:ac:
         82:56:12:fe:19:77:72:3d:2f:58:d2:24:0f:bb:4f:e1:ff:eb:
         6e:78:f3:b5:9c:a9:0b:b0:7c:bb:b7:c8:c3:95:4b:e3:de:c1:
         17:59:a5:c4:20:a3:cb:54:ab:9f:13:c6:48:cd:62:0f:9f:b0:
         e3:52:8a:7b:f5:3c:f9:7f:f0:98:7d:03:5f:56:ca:7b:db:a7:
         55:ec:b7:da:af:5b:8f:87:3f:42:ea:d4:62:b2:ce:52:12:17:
         58:ea:c6:33:47:37:85:f8:c8:8b:ef:f9:c0:11:9c:c3:6b:38:
         3c:b5:d1:81:5a:34:d7:a9:c9:f7:5d:61:e4:fd:08:bb:5f:fa:
         72:0a:6d:96:15:98:d8:05:a9:ab:a5:66:f8:3b:ab:10:1a:7a:
         fb:de:f3:4b:fb:e4:0d:e4:7a:61:1c:0f:ca:b5:ab:37:11:75:
         b0:09:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:48:58 2025 by rpki-client