Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa
File:                     34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa (raw, json)
Hash identifier:          1RpICFoWfzXqlKmlMv7ni10fwllDP67vSoWcOqFyamg=
Subject key identifier:   78:B3:11:8C:86:2F:BA:25:B5:BD:64:36:AE:3C:3C:77:25:E7:C5:E7
Certificate issuer:       /CN=9F2857C840DE891C3C4CE0EE86756147DDB65ABF
Certificate serial:       65A5F1C90E2100B8032D36E098A1821775361059
Authority key identifier: 9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa
Signing time:             Tue 05 Mar 2024 17:47:25 +0000
ROA not before:           Tue 05 Mar 2024 17:42:25 +0000
ROA not after:            Tue 04 Mar 2025 17:47:25 +0000
asID:                     267865
IP address blocks:        45.174.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a5:f1:c9:0e:21:00:b8:03:2d:36:e0:98:a1:82:17:75:36:10:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2857C840DE891C3C4CE0EE86756147DDB65ABF
        Validity
            Not Before: Mar  5 17:42:25 2024 GMT
            Not After : Mar  4 17:47:25 2025 GMT
        Subject: CN=78B3118C862FBA25B5BD6436AE3C3C7725E7C5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:c6:07:71:c8:2c:22:75:c1:f9:7f:53:30:
                    3d:64:20:0e:b7:5c:fb:da:f3:22:30:c4:ed:a8:7f:
                    17:89:83:09:5b:96:12:be:49:2e:e8:1f:64:51:77:
                    40:96:81:93:0a:88:24:35:63:be:5a:c8:a8:e2:66:
                    95:ef:ed:63:ae:87:ce:f3:14:21:15:56:e6:6c:2a:
                    6f:d9:16:23:94:0d:49:c4:87:d1:57:92:39:d1:12:
                    3d:5a:81:df:14:13:be:17:5a:15:34:d2:60:d0:11:
                    eb:e6:86:be:2a:73:dd:ed:3f:bf:ed:f7:92:44:c4:
                    bb:96:04:97:3a:dc:43:15:7f:34:44:30:fa:4f:7d:
                    09:bb:cd:14:e0:ce:a7:87:ea:ba:44:bd:4c:0b:e6:
                    5d:6c:95:60:ac:bf:39:d6:b2:98:5a:d8:10:32:24:
                    e3:9b:7b:a7:de:5e:41:1b:02:a1:0c:ff:a9:35:17:
                    cf:70:38:d3:7a:f5:0e:a3:2d:9a:51:5b:b2:d7:2c:
                    48:5b:c7:c5:c2:c6:d3:a9:8d:a2:bf:78:36:09:0c:
                    d7:76:02:25:a0:98:89:25:16:07:56:71:26:17:b5:
                    d1:21:78:f4:dc:18:db:42:fd:6d:6b:08:85:4e:bf:
                    98:3a:7a:50:bd:29:d9:a3:dc:ea:76:c1:3e:c5:ef:
                    3c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B3:11:8C:86:2F:BA:25:B5:BD:64:36:AE:3C:3C:77:25:E7:C5:E7
            X509v3 Authority Key Identifier:
                keyid:9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:6b:78:95:7c:98:1d:0e:73:4b:b9:37:58:e8:bd:1c:fb:70:
         5c:94:e4:44:4d:37:8d:95:06:3d:89:30:82:4e:e0:51:e1:3f:
         a9:87:6f:84:01:0f:67:63:c1:22:ac:3e:11:41:78:7c:de:d8:
         70:a1:71:9e:86:08:69:2a:0a:1a:00:a1:59:69:40:d8:d8:65:
         67:c6:55:30:bd:73:8f:a9:ee:4f:09:21:83:28:9c:b4:0a:0c:
         0b:fd:9e:e7:92:9a:7d:63:da:3e:78:12:fe:b9:52:ea:60:fd:
         5f:6c:e9:96:4d:77:5e:78:a7:6b:19:2a:d4:58:89:b0:64:ae:
         da:83:bb:0d:52:3f:da:c7:b8:be:e6:1e:a6:82:c8:7c:60:d8:
         1d:24:e3:6f:b2:17:81:31:ab:ba:f7:2f:49:cc:a0:d8:56:b5:
         04:79:3c:5d:37:64:a6:cf:5e:26:45:35:50:fc:6f:97:63:4d:
         14:6e:99:3a:4e:b3:36:7b:8e:09:97:91:35:b4:dd:7d:e7:4a:
         4f:a5:c0:e0:d4:8f:af:61:5d:69:64:c0:b6:82:ae:ee:95:4a:
         cc:7d:60:08:47:a9:2a:26:dd:0c:a9:b0:22:f1:a8:c1:60:9c:
         6a:a5:21:6b:b8:58:d1:a7:1e:d7:03:57:3d:a7:38:0b:7c:c6:
         78:13:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:35:36 2024 by rpki-client on console-ams.rpki-client.org