Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa
File:                     34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          REmgH4okzxLsVlP5YOHOj+/UWtfCKKvvpzqEg7aVPqY=
Subject key identifier:   59:7F:9C:F0:2F:05:11:F4:27:35:DF:09:DC:00:17:E6:91:E1:0B:63
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       042A470C7A92BCE5FE4B0242B6EAA0BB2CCC6C64
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa
Signing time:             Tue 05 Mar 2024 17:54:39 +0000
ROA not before:           Tue 05 Mar 2024 17:49:39 +0000
ROA not after:            Tue 04 Mar 2025 17:54:39 +0000
asID:                     265851
IP address blocks:        45.225.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2a:47:0c:7a:92:bc:e5:fe:4b:02:42:b6:ea:a0:bb:2c:cc:6c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Mar  5 17:49:39 2024 GMT
            Not After : Mar  4 17:54:39 2025 GMT
        Subject: CN=597F9CF02F0511F42735DF09DC0017E691E10B63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:17:66:48:ca:d9:53:50:e5:42:a6:e3:77:
                    ad:1a:58:d8:1b:ed:74:e3:d1:7c:ad:6b:c4:33:72:
                    ae:d6:68:1f:fc:34:fb:40:bc:8a:4c:b7:02:5d:62:
                    09:98:31:cb:39:3a:76:81:b8:0e:b8:b2:4d:5e:d0:
                    7c:5f:64:47:f5:40:0b:81:44:aa:1f:82:a8:4e:9f:
                    31:f2:29:14:23:60:0d:4c:1b:b8:1c:e3:e1:37:34:
                    90:a6:d4:13:ee:51:e7:a4:15:b7:dd:69:78:1a:a2:
                    a8:47:d2:58:35:db:1b:89:19:41:1f:38:ce:d5:30:
                    d4:00:49:65:fe:50:c9:9c:b3:22:c3:1e:87:73:af:
                    0c:99:58:a9:13:2d:98:7a:80:00:6e:ac:7d:16:8d:
                    13:3c:62:c5:38:46:65:25:ba:68:e9:48:a7:36:91:
                    c1:1a:9c:3f:22:d6:11:f5:52:f2:c5:e3:74:f8:12:
                    0c:71:92:d6:8d:99:4a:cf:94:60:44:bd:16:0f:72:
                    dd:68:d0:0a:cf:6c:73:6c:c4:68:28:1f:1d:3a:39:
                    57:fd:26:66:3d:77:0c:23:eb:14:25:15:5c:af:25:
                    26:3c:41:53:5b:0b:26:6c:d8:a4:b6:18:cb:03:eb:
                    6c:96:9e:8c:d2:58:22:a7:2a:a6:89:de:7b:13:b2:
                    67:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7F:9C:F0:2F:05:11:F4:27:35:DF:09:DC:00:17:E6:91:E1:0B:63
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138372e302f32342d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:31:8a:ed:35:5e:41:04:26:a5:5c:7f:54:ca:34:34:32:
         20:db:cd:c5:ba:42:cd:97:db:78:90:62:0a:87:72:19:e5:8e:
         3f:27:2b:fc:29:54:f5:7d:02:35:b3:b6:5b:d4:66:0f:f6:2c:
         c7:e8:e2:83:38:05:43:11:44:cc:22:92:7d:71:c3:ca:ba:e1:
         9b:c2:03:35:5a:07:37:88:ad:a3:52:03:55:d3:b7:01:d8:02:
         b1:7b:5a:57:68:25:55:c6:6a:8d:fd:53:4d:b3:ff:65:08:84:
         54:9e:b1:43:9f:8a:b2:47:74:21:f3:04:d4:81:bb:f8:fa:49:
         33:28:be:d9:08:f9:64:7e:f4:c9:b8:88:b0:8b:2f:8a:3b:c3:
         dc:84:36:34:39:14:b1:f2:6f:30:33:50:ba:7e:57:bb:ba:b3:
         6c:58:f1:c7:2e:09:6a:54:b8:c6:bf:e1:6c:18:f7:7a:ec:9e:
         81:7a:86:a4:7f:6a:49:87:0c:d3:54:59:6f:d2:fc:a8:f8:df:
         c2:45:90:4f:a1:3e:2e:8c:ce:f0:ae:45:30:03:cc:ab:94:77:
         35:2e:27:18:e1:ac:9b:e3:56:d1:0f:ab:a4:67:41:35:41:bb:
         42:b9:8b:03:c3:6b:a5:71:af:52:0f:ee:a1:cc:5d:8f:a0:d9:
         fb:5a:3c:45
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBCpHDHqSvOX+SwJCtuqguyzMbGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTg1NTg5RDRDQjYzRjA2Q0IwNjM4RkQ4M0RDMjM1NkRE
RDJCNjE4MDAeFw0yNDAzMDUxNzQ5MzlaFw0yNTAzMDQxNzU0MzlaMDMxMTAvBgNV
BAMTKDU5N0Y5Q0YwMkYwNTExRjQyNzM1REYwOURDMDAxN0U2OTFFMTBCNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCUBdmSMrZU1DlQqbjd60aWNgb
7XTj0Xyta8Qzcq7WaB/8NPtAvIpMtwJdYgmYMcs5OnaBuA64sk1e0HxfZEf1QAuB
RKofgqhOnzHyKRQjYA1MG7gc4+E3NJCm1BPuUeekFbfdaXgaoqhH0lg12xuJGUEf
OM7VMNQASWX+UMmcsyLDHodzrwyZWKkTLZh6gABurH0WjRM8YsU4RmUlumjpSKc2
kcEanD8i1hH1UvLF43T4EgxxktaNmUrPlGBEvRYPct1o0ArPbHNsxGgoHx06OVf9
JmY9dwwj6xQlFVyvJSY8QVNbCyZs2KS2GMsD62yWnozSWCKnKqaJ3nsTsmd/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWX+c8C8FEfQnNd8J3AAX5pHhC2MwHwYDVR0j
BBgwFoAUqFWJ1Mtj8GywY4/YPcI1bd0rYYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUI3NzAwRTJGRTA3ODVCNEI2NTBGQjZCN0IxQjM1REU4
REFGQzkzQTMxODQxOEVGMTEyODAxODMyQ0RCQTczLzAvQTg1NTg5RDRDQjYzRjA2
Q0IwNjM4RkQ4M0RDMjM1NkRERDJCNjE4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODU1ODlENENCNjNGMDZDQjA2
MzhGRDgzREMyMzU2REREMkI2MTgwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFCNzcwMEUyRkUwNzg1QjRCNjUwRkI2QjdCMUIzNURFOERBRkM5M0Ez
MTg0MThFRjExMjgwMTgzMkNEQkE3My8wLzM0MzUyZTMyMzIzNTJlMzEzODM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeG7
MA0GCSqGSIb3DQEBCwUAA4IBAQAMnjGK7TVeQQQmpVx/VMo0NDIg283FukLNl9t4
kGIKh3IZ5Y4/Jyv8KVT1fQI1s7Zb1GYP9izH6OKDOAVDEUTMIpJ9ccPKuuGbwgM1
Wgc3iK2jUgNV07cB2AKxe1pXaCVVxmqN/VNNs/9lCIRUnrFDn4qyR3Qh8wTUgbv4
+kkzKL7ZCPlkfvTJuIiwiy+KO8PchDY0ORSx8m8wM1C6fle7urNsWPHHLglqVLjG
v+FsGPd67J6Beoakf2pJhwzTVFlv0vyo+N/CRZBPoT4ujM7wrkUwA8yrlHc1LicY
4ayb41bRD6ukZ0E1QbtCuYsDw2ulca9SD+6hzF2PoNn7WjxF
-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org