Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa
File:                     34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa (raw, json)
Hash identifier:          K3b4rtsCmkMQq/LDcwyWDOwDDv/kX2Tz+wukcFUxOco=
Subject key identifier:   C8:A8:E6:34:92:BD:E4:EB:17:C7:2D:1B:A6:D3:BB:EB:03:56:7A:58
Certificate issuer:       /CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
Certificate serial:       449C33C9E16CD00E463DF36E5ECE7632C4AF32DE
Authority key identifier: 24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa
Signing time:             Mon 08 Apr 2024 16:05:00 +0000
ROA not before:           Mon 08 Apr 2024 16:00:00 +0000
ROA not after:            Mon 07 Apr 2025 16:05:00 +0000
asID:                     267850
IP address blocks:        45.175.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9c:33:c9:e1:6c:d0:0e:46:3d:f3:6e:5e:ce:76:32:c4:af:32:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CD02F5861A290CB8722F495D087C5FC34EB3A8
        Validity
            Not Before: Apr  8 16:00:00 2024 GMT
            Not After : Apr  7 16:05:00 2025 GMT
        Subject: CN=C8A8E63492BDE4EB17C72D1BA6D3BBEB03567A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:92:0b:39:3f:05:90:08:dc:df:a5:7a:ca:
                    8b:93:1f:e2:6d:37:1e:80:52:95:e2:f9:31:69:56:
                    0a:d5:ad:27:c7:28:ce:e8:7d:0b:a1:06:d6:96:9f:
                    f0:0f:33:3d:d4:0d:05:83:42:9d:8f:1c:f0:b2:3f:
                    eb:20:b8:55:15:16:be:75:d0:a8:3e:b5:b5:1e:99:
                    3a:72:25:07:ad:83:86:b8:8f:1e:fc:4e:42:e2:42:
                    86:71:24:3b:b2:7b:62:95:ff:12:e0:99:81:c0:75:
                    8d:7d:2f:02:51:cd:7e:56:2a:84:69:a3:ff:cb:2a:
                    1d:d1:0c:51:2b:04:3b:85:e1:99:4e:d6:7e:a8:17:
                    8e:da:ed:b2:3b:96:c7:8d:a5:ff:d1:45:72:56:af:
                    87:40:a8:1c:ce:0b:99:e1:ff:17:43:18:e9:e8:b7:
                    4f:d0:46:f9:ec:19:a1:9a:8f:d9:fd:0d:59:e3:ce:
                    f8:cf:2f:92:55:f8:96:ea:71:4f:a2:d7:89:e0:43:
                    5d:7a:25:9b:a2:de:ed:88:73:e3:2d:f2:52:d1:32:
                    7a:36:0c:e2:03:b0:68:d7:09:d5:f3:ce:d7:06:e6:
                    50:69:fe:99:ee:7a:c3:d9:e1:30:61:26:59:7e:bf:
                    0e:50:51:cd:e5:ba:79:af:f7:ae:36:5a:8b:5f:c6:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:E6:34:92:BD:E4:EB:17:C7:2D:1B:A6:D3:BB:EB:03:56:7A:58
            X509v3 Authority Key Identifier:
                keyid:24:CD:02:F5:86:1A:29:0C:B8:72:2F:49:5D:08:7C:5F:C3:4E:B3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CD02F5861A290CB8722F495D087C5FC34EB3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCE028F3FD2E2A68FE4A98F4EBC7C1806009E6F0964B94BA1AF0B56655F5F22B/0/34352e3137352e3133382e302f32342d3234203d3e20323637383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:a8:11:96:b8:6c:55:20:06:9f:ad:63:b9:9b:ed:7c:f3:e3:
         db:49:32:7a:a0:29:c8:20:6c:94:5c:b0:41:d5:52:68:b1:c0:
         9b:44:17:a7:40:00:8e:63:8e:a2:c6:cb:ef:6a:a9:d6:e5:d9:
         be:ec:c7:09:04:52:a2:32:0f:22:52:90:9a:b2:b6:f0:7f:f3:
         0f:6e:21:ec:58:1e:c8:9f:07:e6:96:0f:4c:1f:82:c8:59:34:
         90:39:b3:5b:46:0c:08:a7:89:53:be:8e:1c:60:6f:99:d8:e8:
         ec:93:95:36:26:81:bc:60:ca:8e:fe:5b:7a:5c:8a:b4:3d:5e:
         80:f6:fd:ca:79:01:05:83:b6:52:49:9b:b4:78:58:d1:b4:c8:
         8a:ae:6b:f8:f5:53:99:f0:dc:32:20:b0:2b:c6:af:be:60:5c:
         81:55:7a:33:f4:9f:e5:99:ad:d8:c3:98:ae:25:b9:e7:28:6d:
         32:b8:94:94:c5:45:51:37:62:e5:b5:e6:ea:bf:fc:43:78:ef:
         91:03:4b:cf:0b:eb:33:81:e9:f6:34:6d:59:81:42:3b:86:1f:
         d7:7c:44:5c:0d:d0:01:bb:c4:79:88:06:0c:b6:c6:b5:a7:1b:
         f9:96:c3:99:f7:7e:07:f1:4a:a2:5f:64:8b:11:a4:7f:30:16:
         21:85:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:23 2024 by rpki-client on console-fra.rpki-client.org