Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/34352e3137342e32342e302f32322d3234203d3e20323637383137.roa
File:                     34352e3137342e32342e302f32322d3234203d3e20323637383137.roa (raw, json)
Hash identifier:          KLDQdTdCUeNi8xXhRH1aL0zADYW0ZiEWylcZNVuDnr4=
Subject key identifier:   02:BC:6F:DF:10:65:45:90:03:AC:9A:8E:38:B5:70:37:5C:AD:54:E4
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       244DFCF9F1B26F6170C95EC08735816C9FBA417D
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/34352e3137342e32342e302f32322d3234203d3e20323637383137.roa
Signing time:             Tue 04 Feb 2025 18:51:14 +0000
ROA not before:           Tue 04 Feb 2025 18:46:14 +0000
ROA not after:            Tue 03 Feb 2026 18:51:14 +0000
asID:                     267817
IP address blocks:        45.174.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4d:fc:f9:f1:b2:6f:61:70:c9:5e:c0:87:35:81:6c:9f:ba:41:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Feb  4 18:46:14 2025 GMT
            Not After : Feb  3 18:51:14 2026 GMT
        Subject: CN=02BC6FDF1065459003AC9A8E38B570375CAD54E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:f4:30:c7:b4:87:52:f3:52:88:5d:aa:b7:
                    9d:49:11:18:4e:5e:7b:19:d7:88:93:90:34:6f:59:
                    5e:25:c5:be:e0:1e:b4:e7:c5:f4:4a:6e:e4:a5:5c:
                    40:6d:61:9d:c6:1f:8a:93:f7:21:1b:2d:40:9d:68:
                    25:ad:a2:19:eb:ef:31:55:81:4a:3c:73:45:13:55:
                    f3:f3:a8:71:11:3e:45:84:ef:8d:49:50:aa:72:4e:
                    0d:3f:4b:21:9b:b1:0d:86:a9:37:2a:36:c9:9b:6e:
                    fd:fb:4c:34:d6:39:06:1a:85:9e:46:b6:84:59:fc:
                    21:ec:c0:4b:46:19:18:47:a6:71:79:f4:b3:b2:84:
                    a1:83:fa:80:25:35:d3:d2:9b:40:47:e9:44:43:29:
                    db:59:2d:fd:49:dd:3b:8c:2d:19:ef:34:b6:f3:16:
                    17:b2:51:68:98:b6:2d:e8:f7:c3:3b:3a:f2:63:90:
                    22:dd:25:c5:56:f5:09:b5:ab:5f:a6:0b:d6:4a:b5:
                    b9:91:f8:bc:70:14:8b:7e:af:22:94:f6:4b:61:43:
                    e2:99:ae:6c:28:ea:e9:ce:05:c5:30:ad:84:7d:f6:
                    a7:c8:51:67:20:a9:44:79:2c:10:81:dc:27:dc:2e:
                    da:c8:4a:86:57:6d:51:79:15:8e:c9:94:14:03:b1:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BC:6F:DF:10:65:45:90:03:AC:9A:8E:38:B5:70:37:5C:AD:54:E4
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/34352e3137342e32342e302f32322d3234203d3e20323637383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:55:5f:8f:92:10:66:10:cd:d1:50:b5:27:2c:3a:df:89:
         e5:ab:84:53:a1:c7:fd:d9:0c:74:98:9a:4d:00:45:7e:98:6f:
         56:9a:f0:be:2c:3b:2f:b8:37:34:80:bc:3a:5d:31:f2:c7:b1:
         65:d7:14:17:f9:a6:ce:96:2a:8c:a8:0f:50:8c:61:aa:c4:72:
         d3:54:bd:74:52:30:58:36:d5:76:9c:3d:2f:25:69:55:7a:3b:
         68:61:21:73:a2:1f:5a:e2:6d:bd:47:12:09:23:dd:d1:68:18:
         c8:68:a9:87:8d:99:1b:de:23:06:d0:f8:99:b5:ae:92:9f:07:
         9b:21:00:14:d2:9f:99:38:8c:6d:01:43:0a:6d:ce:9a:eb:09:
         8f:ba:91:98:bf:8a:3d:23:64:dd:e4:7d:c2:4b:c9:da:9e:2b:
         14:a3:b2:43:22:e0:6e:5c:c1:c9:78:7c:00:26:bf:5f:09:d6:
         2e:7f:c0:09:fa:fa:41:7c:f4:df:73:7b:e3:76:e0:74:3d:e1:
         a4:ec:d8:67:e0:c4:bc:6d:6b:8d:1b:22:36:43:3f:b7:9d:db:
         d1:1f:bb:a2:47:3b:59:bf:f8:b1:a6:f9:3d:d4:9e:97:4a:09:
         a2:74:af:dc:dc:d2:35:07:01:b8:11:e5:81:74:e2:d1:47:6e:
         0b:1a:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:52 2025 by rpki-client