Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa
File:                     34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa (raw, json)
Hash identifier:          1LKGUvG1QBs1sgcKua196CpoGruERWGMe4WysCDGPqw=
Subject key identifier:   AF:BF:C6:5E:67:98:8C:0F:24:A0:F3:07:54:60:29:30:70:43:00:74
Certificate issuer:       /CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
Certificate serial:       25748C7A95B2B66180069E6A112F2F12AB863DBA
Authority key identifier: E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa
Signing time:             Tue 05 Mar 2024 17:44:07 +0000
ROA not before:           Tue 05 Mar 2024 17:39:07 +0000
ROA not after:            Tue 04 Mar 2025 17:44:07 +0000
asID:                     265574
IP address blocks:        45.174.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:74:8c:7a:95:b2:b6:61:80:06:9e:6a:11:2f:2f:12:ab:86:3d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7FC6D52B827804FAD0CF07C69DA6E0832E81C60
        Validity
            Not Before: Mar  5 17:39:07 2024 GMT
            Not After : Mar  4 17:44:07 2025 GMT
        Subject: CN=AFBFC65E67988C0F24A0F3075460293070430074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:15:2b:67:5b:7f:39:4c:a0:d2:7a:4c:b9:
                    99:38:e1:82:3a:20:ef:6b:9a:ab:47:29:0a:88:c4:
                    6e:68:6b:f3:31:7b:5b:8e:d8:d3:d2:ee:22:18:11:
                    d1:ba:0c:d8:c7:17:92:8d:ef:5a:28:b3:83:60:8e:
                    c8:b1:88:a4:fc:61:ff:9f:04:bd:8b:5a:a1:60:fd:
                    c0:1f:39:d4:08:cd:3a:13:e7:00:9d:6a:4f:c3:6c:
                    7d:f4:6e:96:d2:d3:a9:16:3b:5a:ea:81:50:53:2e:
                    52:59:a1:0d:f9:2c:cf:e8:2a:c1:31:2f:a0:be:de:
                    cc:42:58:9a:42:81:56:f3:bc:b6:4b:1a:b7:b5:32:
                    83:70:07:f6:5b:eb:79:52:88:60:e8:7e:04:95:c2:
                    3e:12:85:81:4f:2b:17:25:48:36:68:91:6e:96:c9:
                    ae:f1:78:29:ee:d7:50:46:a5:4a:28:4d:ea:fd:97:
                    b3:e3:46:f9:bf:20:63:4c:f3:c0:58:8a:5b:2b:ab:
                    b3:66:e6:9f:76:90:7b:67:2a:85:26:eb:5a:47:50:
                    8a:79:aa:e2:e2:f4:bc:cb:cc:b6:23:24:27:35:e5:
                    ae:ad:d6:6e:aa:65:cd:ab:30:3f:7a:91:59:76:2c:
                    bc:3b:e4:c5:01:dc:06:25:c7:63:6d:17:94:84:f1:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BF:C6:5E:67:98:8C:0F:24:A0:F3:07:54:60:29:30:70:43:00:74
            X509v3 Authority Key Identifier:
                keyid:E7:FC:6D:52:B8:27:80:4F:AD:0C:F0:7C:69:DA:6E:08:32:E8:1C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7FC6D52B827804FAD0CF07C69DA6E0832E81C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAD02786AE4DF74A4283557AB6A7500AB8ADA5C7442411C97F502F9FA9F9706A/0/34352e3137342e3130382e302f32322d3234203d3e20323635353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:40:59:1d:27:e0:4c:56:90:1b:13:e9:d1:be:54:c1:60:7b:
         87:6d:88:83:35:9f:af:69:d1:7e:b3:e3:e3:21:15:8e:53:8b:
         ee:b2:ba:1c:ee:23:ae:33:ad:22:27:de:0b:65:d3:81:20:f4:
         91:75:4a:5c:2d:5a:85:da:d3:72:ca:86:f6:be:84:38:12:5b:
         c4:4c:ca:7e:0d:35:eb:17:54:3f:b6:96:0d:76:c4:fc:dd:25:
         a1:03:0c:6e:b2:ee:fd:e8:f9:7a:55:15:d1:9b:5b:77:76:d2:
         9d:24:6e:d9:82:7e:df:b0:04:5d:59:e2:05:3a:6d:7c:4a:5d:
         01:6f:9c:2f:3a:b4:44:9d:18:91:47:74:58:83:d9:cd:ec:17:
         1b:86:fb:94:4e:31:91:25:2a:8f:c4:3a:08:45:12:4b:e6:4a:
         d6:a6:1e:3e:c3:ea:dd:9d:7f:b2:21:9e:68:a6:a5:4e:37:4f:
         34:ce:ea:28:13:bb:82:6c:88:25:0b:77:dd:a1:c0:c1:6b:de:
         e3:16:d0:44:37:d0:ae:ef:e3:e2:09:80:42:f7:fc:35:a9:d3:
         1a:7d:e2:c8:15:b1:23:c7:2c:ee:4a:20:5a:b8:90:73:49:67:
         1e:32:85:06:c9:1d:24:a8:0e:7d:95:34:d3:32:a8:cb:96:10:
         14:75:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:17 2024 by rpki-client on console-ams.rpki-client.org