Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31382e302f32342d3234203d3e20323637373835.roa
File:                     34352e3137322e31382e302f32342d3234203d3e20323637373835.roa (raw, json)
Hash identifier:          bgp0frsSfMx+VBgpjwpoVWsCL6qHpuS0NeX8+M2iItA=
Subject key identifier:   EC:72:05:BF:5D:F5:3F:68:4B:4F:82:59:3E:6D:F1:29:71:27:16:58
Certificate issuer:       /CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
Certificate serial:       7B3AB9828286A9C653D3D9CC84F5867F512FD247
Authority key identifier: C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31382e302f32342d3234203d3e20323637373835.roa
Signing time:             Tue 05 Mar 2024 18:19:01 +0000
ROA not before:           Tue 05 Mar 2024 18:14:01 +0000
ROA not after:            Tue 04 Mar 2025 18:19:01 +0000
asID:                     267785
IP address blocks:        45.172.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3a:b9:82:82:86:a9:c6:53:d3:d9:cc:84:f5:86:7f:51:2f:d2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
        Validity
            Not Before: Mar  5 18:14:01 2024 GMT
            Not After : Mar  4 18:19:01 2025 GMT
        Subject: CN=EC7205BF5DF53F684B4F82593E6DF12971271658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:b5:5f:72:59:96:f4:5d:c6:61:ba:5a:39:
                    32:e7:00:4b:43:36:bc:2d:46:ce:21:65:97:6b:3e:
                    a4:65:a4:a4:cb:ad:eb:9c:d2:d7:3e:1c:ce:76:d3:
                    32:e5:21:bd:80:25:7e:e7:09:f5:32:3b:8f:c8:70:
                    72:21:7a:43:79:db:f4:3e:67:12:08:06:b6:fc:2c:
                    87:e1:5d:5e:42:77:b5:0b:1d:86:b0:4f:d2:93:58:
                    aa:ea:1c:87:70:f9:94:10:0c:c6:83:26:4b:5d:56:
                    0b:18:30:c4:15:b6:37:f8:43:56:97:3e:da:b0:88:
                    62:c2:70:e5:68:fa:1f:9f:99:71:bb:ea:b5:be:0f:
                    12:0f:b4:79:43:34:e9:39:f5:f7:6b:fe:66:3a:89:
                    69:15:0a:39:bc:17:82:25:29:68:99:b8:c0:7f:7d:
                    bf:d1:7b:28:01:47:36:31:a9:86:58:f1:65:e6:1d:
                    bd:7d:5c:fd:18:4b:78:eb:6a:41:b9:2f:61:d1:78:
                    12:49:a8:09:28:02:0d:3b:20:35:7e:3e:4f:d0:cd:
                    bd:13:2e:28:1e:1e:29:32:a8:6d:56:d4:e9:a9:d9:
                    d2:7c:bf:31:33:32:c6:2a:a6:80:1f:f6:b9:81:76:
                    ef:97:76:e4:67:14:6a:c4:f2:83:ed:98:78:c9:82:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:05:BF:5D:F5:3F:68:4B:4F:82:59:3E:6D:F1:29:71:27:16:58
            X509v3 Authority Key Identifier:
                keyid:C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31382e302f32342d3234203d3e20323637373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:7f:66:d8:f9:d3:e6:58:db:20:df:29:2f:c9:5f:de:4f:9a:
         5d:40:80:25:65:a4:15:b7:02:9f:a3:bc:27:49:b2:8a:82:0e:
         b1:39:55:de:70:09:0f:54:4e:ca:48:ec:73:2f:9a:b8:15:e7:
         96:35:ed:51:75:25:19:a2:d6:63:3e:fe:62:73:c1:4e:74:18:
         ae:bb:cb:ba:99:ba:6a:52:bf:ef:04:22:da:f3:a1:78:33:17:
         73:40:85:f0:e1:08:06:46:52:b9:4e:44:48:87:d2:27:84:39:
         a0:a2:3d:48:52:e9:d7:08:b8:b7:1d:a1:ca:bd:36:71:0d:31:
         8e:ee:76:52:53:f7:b4:aa:de:76:8d:a3:58:5f:e6:9a:24:67:
         dd:3c:23:48:f8:a6:bb:70:c5:54:d8:9d:47:9c:df:27:6f:2b:
         f7:8c:62:14:2b:f1:61:f8:23:d9:1b:57:b6:88:00:8a:d3:0e:
         71:6a:d1:6e:7e:10:07:d7:00:8d:0c:b9:6b:ca:d4:12:75:22:
         7f:f8:ef:12:60:a8:cb:a2:c3:21:16:1d:2f:14:e9:f7:a1:e7:
         ee:94:4a:57:ce:69:37:ec:e2:42:ab:e6:eb:95:c0:9e:01:7d:
         3c:93:17:45:19:fb:7a:f4:e1:6b:7c:13:47:cc:8b:c2:eb:e5:
         82:6b:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org