Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa
File:                     34352e3137372e35332e302f32342d3234203d3e203139343239.roa (raw, json)
Hash identifier:          +56DXF1uyz/cK99BwowXj4BHa1DJt9Iae4a0hGk6Xjk=
Subject key identifier:   22:40:C4:23:94:9B:6A:51:EB:65:11:D6:DC:71:A8:92:0C:B8:02:9B
Certificate issuer:       /CN=8E7AB1B5E5771F4EEC756C6277874B6227101C79
Certificate serial:       16B2170B8D83D02D2E21B568FD588BD422A34749
Authority key identifier: 8E:7A:B1:B5:E5:77:1F:4E:EC:75:6C:62:77:87:4B:62:27:10:1C:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:39:30 +0000
ROA not before:           Tue 04 Feb 2025 18:34:30 +0000
ROA not after:            Tue 03 Feb 2026 18:39:30 +0000
asID:                     19429
IP address blocks:        45.177.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b2:17:0b:8d:83:d0:2d:2e:21:b5:68:fd:58:8b:d4:22:a3:47:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7AB1B5E5771F4EEC756C6277874B6227101C79
        Validity
            Not Before: Feb  4 18:34:30 2025 GMT
            Not After : Feb  3 18:39:30 2026 GMT
        Subject: CN=2240C423949B6A51EB6511D6DC71A8920CB8029B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:f1:2c:f8:66:be:35:fa:0a:f9:f9:88:66:
                    30:f0:dd:49:fb:a2:48:76:f7:d8:f9:28:e6:cd:d5:
                    94:89:b4:13:a8:d2:74:89:88:af:41:fd:19:81:38:
                    55:a2:3f:01:d2:e0:5d:7b:71:3f:f6:3c:59:06:e0:
                    09:86:9a:62:13:dd:c3:c4:58:10:d1:ee:0b:46:a7:
                    ab:d4:86:7e:ab:38:1c:58:79:ea:2b:8a:ec:c8:e3:
                    54:f9:b7:5b:11:52:a0:aa:bb:95:9c:bf:6a:b1:2d:
                    04:74:2c:0e:c1:7f:e2:66:02:ef:30:03:5d:28:bf:
                    78:48:49:10:26:90:57:ff:13:0b:6a:b5:73:09:6a:
                    c7:a4:ed:09:99:02:42:6d:5a:b7:b9:0d:14:2f:0f:
                    e9:d3:76:94:31:20:bd:49:ba:64:3d:90:87:eb:86:
                    ac:e5:33:e4:54:ae:e6:b6:4f:a2:d4:22:a8:c9:0f:
                    2d:bc:0c:5d:0f:07:25:50:f9:4f:f4:8e:c9:0f:d9:
                    5a:b4:1a:9d:34:27:a3:e6:f9:eb:49:f6:56:d8:0f:
                    3d:6d:e6:32:d3:8d:b4:19:d7:aa:97:bd:6e:6c:d0:
                    c1:c3:54:c6:52:77:ca:35:97:11:0d:d7:00:17:f2:
                    e3:30:58:95:e9:f4:29:44:da:16:e3:32:0d:e0:ef:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:40:C4:23:94:9B:6A:51:EB:65:11:D6:DC:71:A8:92:0C:B8:02:9B
            X509v3 Authority Key Identifier:
                keyid:8E:7A:B1:B5:E5:77:1F:4E:EC:75:6C:62:77:87:4B:62:27:10:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fc:07:3d:ad:e1:a9:14:6a:d2:64:b0:b3:28:85:48:d6:44:
         38:c5:f2:92:a5:c0:5d:58:10:46:16:ed:70:a2:69:26:57:80:
         12:42:1d:51:35:c3:66:d8:2a:64:10:37:3a:41:7f:e7:dd:47:
         9f:a7:51:e6:24:9e:53:10:b9:8e:1f:cd:e5:0d:7d:19:63:5a:
         6c:93:37:f0:17:ab:80:d8:4e:71:af:e4:16:d9:d1:99:3c:7d:
         f3:a7:ff:70:60:e8:84:34:b2:40:68:ab:55:2b:3b:98:ff:35:
         d0:35:88:7a:3b:71:9c:0a:c2:68:ad:5e:37:88:ce:0e:40:d1:
         78:8b:d5:ba:df:44:bc:41:67:3e:18:78:07:14:f5:96:dd:7a:
         3a:54:b5:aa:8e:ca:7a:83:84:00:bc:03:d9:77:0f:6c:e4:2a:
         78:10:45:2b:43:fb:bd:ac:b3:a6:a4:6c:e1:2c:c7:f0:f9:15:
         8e:99:56:17:81:e6:a5:de:46:06:37:94:a4:12:85:29:cd:68:
         80:97:c0:9a:5c:94:05:85:fa:ee:45:ab:e1:0e:8f:e0:fc:dd:
         9d:81:cd:21:a8:d0:3e:e9:c9:8c:10:dd:59:b0:0b:00:67:c1:
         72:29:c7:b2:c8:cd:62:bf:6c:3d:99:3a:f9:0c:06:c8:bc:41:
         a9:50:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:54:58 2025 by rpki-client