Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa
File:                     34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          KgCCKNeDuy1W4OCQpTkxhXq7oJs3wXgyiuZQxToQxYM=
Subject key identifier:   EB:3C:BA:FB:87:81:B8:45:2E:CB:53:F9:ED:50:67:A2:BD:A3:F6:D6
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       178A5858D15FD59E149C38135B5399F567DF0B33
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa
Signing time:             Tue 05 Mar 2024 17:54:39 +0000
ROA not before:           Tue 05 Mar 2024 17:49:39 +0000
ROA not after:            Tue 04 Mar 2025 17:54:39 +0000
asID:                     265851
IP address blocks:        45.225.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8a:58:58:d1:5f:d5:9e:14:9c:38:13:5b:53:99:f5:67:df:0b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Mar  5 17:49:39 2024 GMT
            Not After : Mar  4 17:54:39 2025 GMT
        Subject: CN=EB3CBAFB8781B8452ECB53F9ED5067A2BDA3F6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:74:3c:1a:c9:f0:7d:32:c9:5c:92:f6:ff:
                    8a:13:e9:bc:46:13:95:09:70:20:07:5b:f5:fb:f5:
                    ca:64:e3:a4:c6:43:36:1d:f1:0b:66:8d:87:56:18:
                    53:20:96:49:7f:9e:af:a1:9c:b2:72:95:0a:93:e9:
                    bd:ad:f5:4a:1d:23:4d:4c:ef:81:2f:b3:0a:c7:a3:
                    cb:37:3f:10:2f:f8:51:09:08:9c:87:4c:15:f8:20:
                    0f:5d:90:06:7d:6c:ab:3a:d6:47:ac:8f:38:7a:c2:
                    33:f2:2b:46:75:bb:b8:f7:97:1f:13:7d:59:4f:e0:
                    a8:cd:61:dd:bf:57:0d:04:52:34:23:81:63:22:2d:
                    f4:de:f4:cc:54:48:15:e5:19:b7:d6:8c:dd:71:48:
                    b0:58:97:65:5c:d5:5e:3b:29:a3:d1:4e:12:0b:9e:
                    74:cf:71:bf:c0:03:86:24:30:76:63:8a:3d:47:0f:
                    2d:05:4e:95:0c:d5:db:84:d1:65:3a:8e:05:92:60:
                    6d:b6:36:f5:50:0a:e3:c1:cd:4e:5e:37:c4:19:94:
                    95:09:d7:1b:65:2b:3b:4e:a0:38:28:e7:a5:37:f0:
                    c6:db:7d:01:b2:a0:c4:cd:52:e1:ab:9a:d4:57:2b:
                    ac:ba:41:91:90:29:68:21:c1:b2:11:1b:63:a4:56:
                    ff:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:BA:FB:87:81:B8:45:2E:CB:53:F9:ED:50:67:A2:BD:A3:F6:D6
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138362e302f32342d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:b6:83:2a:69:76:de:88:b4:4a:d4:ae:d2:4a:86:ec:f2:6a:
         46:8e:e8:30:59:a8:7d:1f:88:b9:fe:37:a4:69:80:ac:e6:42:
         63:41:eb:84:a4:cc:c3:fb:72:a7:41:1a:a3:a4:cb:4c:4a:dc:
         cc:2d:8d:b9:f4:cd:d3:d5:da:4e:01:73:4e:38:03:2a:1d:11:
         d4:01:81:d4:ea:15:b5:1d:0b:41:34:9e:df:15:a3:4a:ed:56:
         83:3f:d9:fd:ac:4a:cf:1a:5e:3e:1f:43:b8:e0:69:52:db:7a:
         1d:95:a4:70:2b:77:eb:e0:93:c0:f2:d9:a9:75:0b:da:60:1d:
         6f:94:0a:9f:24:3f:0b:6b:2c:42:3c:36:77:ba:d0:31:f5:85:
         4e:28:bd:68:00:f5:89:ef:15:70:37:6f:26:97:27:ac:d1:2f:
         bf:fd:79:d5:48:ec:53:a6:0f:65:25:cd:22:e3:87:15:a5:dd:
         51:c2:2b:f3:50:42:eb:61:9d:37:69:d0:1a:07:a4:37:18:11:
         ad:54:8c:a2:92:ea:ee:2d:0f:ac:71:46:44:17:82:2c:7f:0e:
         eb:f3:b7:82:da:af:37:f6:c1:00:0e:20:8a:c0:18:01:a0:40:
         5d:19:d8:ce:8c:14:38:0d:8a:b7:79:88:3a:96:3f:36:38:90:
         f0:6d:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org