Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa
File:                     34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa (raw, json)
Hash identifier:          Z98dTQQhAvRaSuO/2mA5J/MRRGlsEZEgwIF1WgpMqYY=
Subject key identifier:   60:FB:61:A2:2E:EF:5D:77:BA:8B:37:6B:F8:06:DC:63:8A:B2:06:50
Certificate issuer:       /CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
Certificate serial:       19A4062B06F1091276D1BFBE6BFC38CC9DE9DD23
Authority key identifier: 57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa
Signing time:             Tue 05 Mar 2024 17:51:32 +0000
ROA not before:           Tue 05 Mar 2024 17:46:32 +0000
ROA not after:            Tue 04 Mar 2025 17:51:32 +0000
asID:                     265582
IP address blocks:        45.174.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a4:06:2b:06:f1:09:12:76:d1:bf:be:6b:fc:38:cc:9d:e9:dd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A
        Validity
            Not Before: Mar  5 17:46:32 2024 GMT
            Not After : Mar  4 17:51:32 2025 GMT
        Subject: CN=60FB61A22EEF5D77BA8B376BF806DC638AB20650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ca:4e:6c:93:d9:16:e8:82:a7:91:30:97:f9:
                    bc:c7:ce:25:21:26:d7:63:42:a9:44:e2:39:92:41:
                    39:46:d3:5d:01:78:48:b9:7b:6a:56:a4:e5:24:9b:
                    92:83:9a:c9:36:20:61:7e:10:48:7b:ae:61:24:0b:
                    1a:ac:7a:ee:51:a4:cf:08:ed:58:9d:47:18:2e:42:
                    20:6b:11:78:94:fb:ec:9a:a8:43:bf:e4:76:49:e3:
                    6e:2f:9f:5c:8e:0d:34:b9:23:6a:41:53:c7:9a:e1:
                    bd:25:94:09:1e:eb:80:0a:cf:5b:ab:38:65:67:69:
                    6a:5e:1e:48:60:0c:26:f1:08:a7:c9:74:dd:18:db:
                    ff:09:bd:5e:00:dd:88:b5:f1:2f:df:01:17:61:9f:
                    ef:44:8a:6d:05:fb:36:bf:16:51:52:2e:c0:26:05:
                    16:24:a2:56:b6:4e:55:f8:5d:b0:f5:b3:95:3a:1d:
                    b5:08:f5:2e:57:c0:c1:4b:5d:a5:6f:5e:bc:aa:7d:
                    63:b0:7a:93:04:0f:ba:3b:6d:b0:2c:4b:7a:e2:4e:
                    71:53:f4:e3:9a:39:3e:1e:73:88:67:e7:ba:dc:42:
                    ec:cc:2e:a5:bc:fd:ef:da:e4:07:91:77:2c:52:45:
                    f7:e1:cc:c0:51:9f:29:a9:4f:21:e0:40:27:08:6b:
                    b4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FB:61:A2:2E:EF:5D:77:BA:8B:37:6B:F8:06:DC:63:8A:B2:06:50
            X509v3 Authority Key Identifier:
                keyid:57:A2:4B:2E:7F:7B:E9:8E:AC:AF:DE:93:92:D1:23:9A:A1:E9:2B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57A24B2E7F7BE98EACAFDE9392D1239AA1E92B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7098DDFA21B7D33CACF90BFB5F984261271C5E4866791FA00C23FA4C09158FA4/0/34352e3137342e3235302e302f32342d3234203d3e20323635353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:2d:36:60:d0:f0:59:a4:0c:04:af:58:55:3c:cf:a3:3d:e2:
         9c:aa:ab:67:f1:a1:a2:e0:ae:41:f6:e6:ae:c6:a6:bb:6c:b0:
         1e:d0:12:dd:92:c6:0c:dd:57:00:4c:36:47:11:29:ea:7c:46:
         7e:e2:30:a4:1c:d4:00:f1:32:74:19:e2:ff:e8:00:99:14:84:
         39:be:fc:76:0f:08:f8:d2:11:fe:73:f5:04:dc:ae:a2:a7:6e:
         5d:fe:46:5d:3c:a0:89:17:87:c9:7b:dd:59:e0:1f:bd:d5:48:
         d6:67:35:fa:6b:d2:00:cd:42:50:8a:ec:d2:68:e0:72:cf:b3:
         7c:1a:98:ff:62:f8:9a:0e:24:1b:f4:aa:17:49:fd:bc:fe:42:
         0a:47:94:32:4a:1b:f5:66:72:57:e6:57:7d:bd:b6:b4:01:64:
         ee:a5:dc:95:e7:24:55:07:76:00:03:d7:97:bf:d4:d6:54:e6:
         74:08:43:20:d3:59:7e:47:44:6f:a6:15:9b:20:d9:b7:44:85:
         a4:c0:d7:e3:fb:6a:3d:9e:b1:3d:ec:5e:43:b1:32:cc:58:f7:
         b9:3c:ee:d1:bb:bc:2e:ac:3c:08:04:81:17:d7:b9:ee:e2:59:
         7d:a3:b3:9e:09:7e:b0:67:17:fe:62:a8:b3:cd:cc:c5:34:7b:
         c7:fe:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:16:58 2024 by rpki-client on console-ams.rpki-client.org