Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32352e302f32342d3234203d3e20323637383038.roa
File:                     34352e3137322e32352e302f32342d3234203d3e20323637383038.roa (raw, json)
Hash identifier:          SI1/CuzxplhyjDwLu3XjSaOp+MV1zjsnDGShsa1g6ms=
Subject key identifier:   46:51:BF:6A:A6:0B:73:F9:36:C8:FC:C2:8D:A1:2C:DE:57:D8:50:B8
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       67D3DC26268588AC5A2476468FC54F605F04B67E
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32352e302f32342d3234203d3e20323637383038.roa
Signing time:             Tue 05 Mar 2024 18:13:19 +0000
ROA not before:           Tue 05 Mar 2024 18:08:19 +0000
ROA not after:            Tue 04 Mar 2025 18:13:19 +0000
asID:                     267808
IP address blocks:        45.172.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d3:dc:26:26:85:88:ac:5a:24:76:46:8f:c5:4f:60:5f:04:b6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Mar  5 18:08:19 2024 GMT
            Not After : Mar  4 18:13:19 2025 GMT
        Subject: CN=4651BF6AA60B73F936C8FCC28DA12CDE57D850B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:e5:49:f3:f9:d6:b8:83:6c:59:71:5b:c9:
                    9d:ae:a6:26:51:54:80:aa:51:c1:8f:15:d3:87:f5:
                    47:3b:7b:c1:9b:f8:a2:7b:08:88:03:fa:c0:66:aa:
                    f4:ec:1e:3a:3f:df:3a:33:fd:a7:9e:df:a1:01:55:
                    20:e4:03:b5:25:98:bb:ba:65:2b:0d:bf:d4:db:87:
                    4b:1c:23:b0:59:6b:2c:3e:ac:3a:f7:16:35:bd:7b:
                    1e:96:50:70:3f:3e:23:e4:08:a5:be:0b:05:39:65:
                    ad:85:a8:56:33:9d:e1:f3:5c:7f:80:c9:4a:a9:3c:
                    92:a5:16:2c:d4:dd:92:bf:a9:83:8c:d3:fb:c2:c2:
                    97:c1:0a:6a:67:3b:b8:ca:67:06:26:91:9c:99:ae:
                    16:84:71:34:17:38:4c:d8:f1:f4:bf:d1:12:92:f2:
                    a5:49:42:14:b0:59:a6:a6:6d:72:7d:ac:28:c2:15:
                    a5:64:1c:ea:35:c3:f4:67:26:0b:9b:a1:6d:74:4e:
                    17:c2:1b:e7:76:dd:10:59:e2:ac:66:96:64:66:9d:
                    b3:8d:9f:81:15:54:78:5e:c9:de:26:3b:bc:ed:5a:
                    5b:e8:92:8c:d5:ee:ef:76:e9:56:7c:24:e1:ca:9f:
                    9d:cb:b1:47:c8:dc:8e:72:eb:fb:8c:88:45:7b:e6:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:51:BF:6A:A6:0B:73:F9:36:C8:FC:C2:8D:A1:2C:DE:57:D8:50:B8
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32352e302f32342d3234203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:02:01:6d:92:e1:7b:b1:96:ce:98:27:6f:51:5c:e4:61:
         8f:70:11:c1:94:99:e8:94:74:57:09:0e:72:ed:f2:11:2d:37:
         48:01:2e:b0:a2:c6:bf:0d:56:7e:32:53:23:a4:f4:2b:f7:bd:
         a6:fb:2b:d4:c9:c7:b1:f2:9b:dc:3c:e1:71:51:8e:58:6b:6e:
         76:cd:5a:81:cb:86:97:fb:89:0e:37:e1:bb:a8:74:10:a0:c9:
         39:e6:30:dc:87:98:26:18:06:1c:2f:ba:43:bb:48:3d:a8:83:
         bf:0e:aa:82:79:20:f5:23:5d:dc:60:04:e2:40:7c:44:d1:47:
         e7:4c:1e:00:09:1e:d0:6e:43:24:73:9c:d6:96:4b:5c:bb:bb:
         db:09:d0:7d:84:5e:45:df:c7:60:b1:58:0a:97:7f:fe:78:b5:
         e3:34:c3:bb:94:65:89:d7:b6:27:b9:d4:99:51:75:e0:4f:08:
         1f:73:af:28:bf:69:b2:fc:11:33:93:10:15:68:60:44:19:b8:
         c2:76:b8:0c:cc:b8:46:41:d0:80:3e:ce:a9:7b:c8:a7:2b:3f:
         05:26:51:cd:0b:45:6e:7d:5a:f0:d0:9b:c2:09:f3:7c:66:05:
         71:52:ab:0c:7c:2b:2f:25:4d:f7:dc:24:2b:41:5b:4e:a5:fc:
         9d:53:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:43 2024 by rpki-client on console-fra.rpki-client.org