Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32342d3234203d3e20323637383038.roa
File:                     34352e3137322e32342e302f32342d3234203d3e20323637383038.roa (raw, json)
Hash identifier:          sieMM4Fa8ZiHfU+K2iHMAPSUfsZdTKdx2/wMD4tGQ7M=
Subject key identifier:   67:16:F1:73:A9:F2:D2:61:6B:73:A5:F0:03:C4:3A:D8:4B:9C:B3:23
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       26C21EE98C8BFF68F390758E46843556E3DF4891
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32342d3234203d3e20323637383038.roa
Signing time:             Tue 04 Feb 2025 20:02:35 +0000
ROA not before:           Tue 04 Feb 2025 19:57:35 +0000
ROA not after:            Tue 03 Feb 2026 20:02:35 +0000
asID:                     267808
IP address blocks:        45.172.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 21 Feb 2025 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c2:1e:e9:8c:8b:ff:68:f3:90:75:8e:46:84:35:56:e3:df:48:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Feb  4 19:57:35 2025 GMT
            Not After : Feb  3 20:02:35 2026 GMT
        Subject: CN=6716F173A9F2D2616B73A5F003C43AD84B9CB323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:1f:b8:07:f7:e5:94:fc:6f:c2:61:c3:35:
                    0e:9d:fb:3d:50:ca:13:4c:01:30:54:fc:93:94:a4:
                    49:88:f6:8c:25:e8:e2:0c:aa:ff:e5:dd:83:1e:d4:
                    22:c1:23:25:4c:1c:1c:56:fd:37:59:26:b2:08:4b:
                    89:5b:9d:14:29:55:dc:2a:00:29:55:0b:7e:2d:f5:
                    23:c5:42:59:37:98:1d:ad:3a:b4:5a:57:36:8a:42:
                    5e:01:79:e3:7b:e4:7b:42:27:79:d8:bb:88:66:cb:
                    a1:13:07:0e:7d:c4:e3:fd:a2:06:7e:d4:46:49:fe:
                    45:26:11:1a:fe:80:82:04:e7:13:98:cd:b4:4e:32:
                    d6:8a:81:b5:ae:6c:2a:91:d0:80:95:3c:c7:2c:f7:
                    cd:d9:fe:68:1b:4a:ac:49:64:62:70:65:53:a3:a8:
                    67:79:4f:f8:28:2c:05:29:2b:b5:a7:54:db:c7:48:
                    99:be:17:82:c3:5f:96:86:c0:32:8b:07:7a:70:30:
                    98:46:c2:02:88:94:a9:3e:cd:d4:9d:69:80:cc:e9:
                    1a:71:e1:42:7e:45:47:01:c7:09:61:75:10:89:ef:
                    79:02:28:35:22:97:cd:e4:31:fe:2a:8e:51:f4:97:
                    6f:76:eb:05:79:83:24:f9:6c:58:ea:2a:fd:3a:6b:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:16:F1:73:A9:F2:D2:61:6B:73:A5:F0:03:C4:3A:D8:4B:9C:B3:23
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32342e302f32342d3234203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:6c:7c:98:cf:07:a2:21:75:04:5a:d5:3d:1c:9f:b8:e9:
         ad:f3:f7:ed:0a:4b:99:ee:bf:4c:7c:c7:96:1a:93:ce:bb:a2:
         e2:8f:f6:c0:0b:b0:e3:c9:2e:8b:63:1a:f6:16:cf:50:a8:de:
         e9:2b:29:bc:13:cc:df:9a:30:9d:3a:11:ae:db:06:8d:20:c6:
         fa:9a:1b:9d:25:71:30:4f:03:b8:55:97:d4:05:6a:2f:9d:79:
         92:38:86:f8:a4:a7:0b:1a:fa:e4:76:69:50:be:14:23:46:9f:
         41:ec:26:e1:30:3e:4b:5c:67:2c:b8:fe:33:18:04:71:36:48:
         35:63:97:df:8f:f3:67:6c:a8:e7:32:15:d9:20:60:24:fa:04:
         c9:36:61:74:be:46:5b:79:2d:d1:67:b4:e3:bb:c5:fe:ac:6b:
         93:39:1a:81:30:d1:ae:30:76:3d:84:14:d8:c2:19:40:70:1a:
         9b:e5:8e:c8:9f:ca:f8:18:dc:75:18:b2:84:11:24:23:5c:6c:
         1f:fc:7b:cc:59:04:f5:66:c8:f7:67:e8:18:61:1b:9d:7c:7c:
         d2:26:6b:5d:21:9f:4b:b8:06:e5:86:78:1b:73:af:ce:85:67:
         63:64:74:22:04:0a:a8:e8:ed:17:0f:21:c6:03:c8:97:bc:15:
         9b:83:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:24 2025 by rpki-client