Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/34352e3232342e3138362e302f32342d3234203d3e203237393531.roa
File:                     34352e3232342e3138362e302f32342d3234203d3e203237393531.roa (raw, json)
Hash identifier:          stQlIxCka0IFVb9GXmo7wrfS2Z0kj7XCEXjopEG7XT4=
Subject key identifier:   25:E7:78:19:D9:7D:20:B2:AE:82:2D:7C:AD:00:6E:48:12:B9:91:06
Certificate issuer:       /CN=5506D181AACC9E9E3171B16979FFCAE289CE6507
Certificate serial:       5F41989FCA61175E76D54AB8353B3CF26E7209BA
Authority key identifier: 55:06:D1:81:AA:CC:9E:9E:31:71:B1:69:79:FF:CA:E2:89:CE:65:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/34352e3232342e3138362e302f32342d3234203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:01:48 +0000
ROA not before:           Tue 05 Mar 2024 17:56:48 +0000
ROA not after:            Tue 04 Mar 2025 18:01:48 +0000
asID:                     27951
IP address blocks:        45.224.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:41:98:9f:ca:61:17:5e:76:d5:4a:b8:35:3b:3c:f2:6e:72:09:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5506D181AACC9E9E3171B16979FFCAE289CE6507
        Validity
            Not Before: Mar  5 17:56:48 2024 GMT
            Not After : Mar  4 18:01:48 2025 GMT
        Subject: CN=25E77819D97D20B2AE822D7CAD006E4812B99106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5e:4b:f1:ab:15:b0:bc:f6:47:8f:62:2e:aa:
                    00:c1:7a:6b:a6:ca:53:36:21:35:8e:c2:6d:5b:53:
                    11:4c:7b:f4:ef:d0:09:77:17:44:e0:23:02:c4:d1:
                    4c:1e:0e:09:36:67:59:68:e8:72:c2:65:e7:6c:f9:
                    80:e7:71:55:76:c1:73:73:c8:99:cf:58:2d:58:5f:
                    72:e1:91:94:cd:58:49:39:c5:43:91:8c:e9:24:f7:
                    ac:4e:c0:e8:e5:d5:c9:66:52:91:09:d3:93:f7:32:
                    3b:c2:2d:e7:61:e2:3b:29:ef:01:49:fc:b6:ad:ff:
                    42:f0:e1:9d:32:67:8c:89:96:db:86:75:ce:1e:e6:
                    cb:e0:15:55:5a:26:5c:0e:a8:57:45:70:0f:43:ab:
                    2c:dc:9d:59:06:fa:5e:0d:cd:65:50:17:1a:ef:93:
                    1f:84:1a:9d:b7:50:08:f5:0f:75:1c:70:82:31:e0:
                    6b:3f:48:b0:f2:54:2c:08:84:9c:a0:5d:a7:23:57:
                    6a:86:08:8a:44:e2:88:4e:9d:99:ee:98:30:2b:78:
                    dd:10:71:40:7f:86:7e:86:a6:63:ff:a0:ca:81:a1:
                    19:c5:f7:96:eb:88:c2:a1:05:1d:5e:dd:57:13:f7:
                    cf:4f:c9:3b:9b:fc:57:6d:23:5d:3c:c4:af:19:9b:
                    3e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E7:78:19:D9:7D:20:B2:AE:82:2D:7C:AD:00:6E:48:12:B9:91:06
            X509v3 Authority Key Identifier:
                keyid:55:06:D1:81:AA:CC:9E:9E:31:71:B1:69:79:FF:CA:E2:89:CE:65:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5506D181AACC9E9E3171B16979FFCAE289CE6507.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C94E0CD063D532A901FFB100FD63A8270D3663753C3979D7D53BA2DDD873C3DD/0/34352e3232342e3138362e302f32342d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:91:ed:55:c8:45:2a:5d:aa:6c:bf:ce:c9:09:c1:5c:3d:81:
         77:5a:8a:f5:ca:cd:21:71:49:f9:1a:23:00:15:63:26:fa:7f:
         13:7c:51:21:d6:c3:0b:1c:8e:8f:61:27:59:a8:d6:ee:76:8f:
         6f:30:ba:03:ce:9f:8b:0d:5c:a8:1d:81:cd:bf:e5:03:6b:3e:
         54:b9:81:b1:a6:ce:76:d3:16:99:77:c4:1c:ff:54:39:73:43:
         71:96:b2:8e:b0:73:e5:4b:54:50:74:2f:0a:63:46:82:9a:63:
         02:3e:7d:a4:72:dc:37:10:5a:a9:09:85:d2:71:9f:89:f5:b8:
         b0:3a:4e:55:3d:78:0e:22:17:17:04:f3:73:d4:c5:4a:17:b4:
         ce:02:25:0c:d2:c8:c2:94:20:7f:68:85:ab:b9:36:4b:fd:64:
         0c:73:e7:0d:87:d9:96:e1:86:24:79:bb:48:2c:60:5c:ed:71:
         b9:70:7b:b6:7a:6c:cf:a7:82:a0:16:b6:a4:d8:df:9b:0d:f7:
         3e:23:80:24:09:b1:da:74:fd:c6:19:b3:3c:5c:3f:04:87:f1:
         23:38:db:63:34:33:44:89:c3:3c:6c:62:af:e5:17:1b:f8:b5:
         09:42:f9:e2:8e:82:05:40:67:4c:19:33:9e:3f:b1:80:90:98:
         ee:f0:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:21:50 2024 by rpki-client on console-fra.rpki-client.org