Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35362e302f32342d3236203d3e20323635353732.roa
File:                     34352e3137342e35362e302f32342d3236203d3e20323635353732.roa (raw, json)
Hash identifier:          6QuGYYDxjjF9xl74+T4aZWHzpljMgKc2HmMCAzPhtF8=
Subject key identifier:   AB:54:34:7A:24:40:8E:F2:CD:CE:42:E8:4C:73:29:76:8B:B7:E9:D7
Certificate issuer:       /CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
Certificate serial:       1A52FE42064B2D2CBC29B08D28863127DC6028C4
Authority key identifier: BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35362e302f32342d3236203d3e20323635353732.roa
Signing time:             Tue 04 Feb 2025 20:08:02 +0000
ROA not before:           Tue 04 Feb 2025 20:03:02 +0000
ROA not after:            Tue 03 Feb 2026 20:08:02 +0000
asID:                     265572
IP address blocks:        45.174.56.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:52:fe:42:06:4b:2d:2c:bc:29:b0:8d:28:86:31:27:dc:60:28:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
        Validity
            Not Before: Feb  4 20:03:02 2025 GMT
            Not After : Feb  3 20:08:02 2026 GMT
        Subject: CN=AB54347A24408EF2CDCE42E84C7329768BB7E9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:7d:61:bc:34:bd:dd:c4:a9:8a:c2:06:a8:
                    b5:45:2a:ba:8a:24:18:24:0c:15:58:1d:e9:4f:93:
                    cd:be:66:5c:36:8d:cd:cf:eb:62:ce:69:d2:5c:3f:
                    8f:41:1e:9a:b8:68:0a:f4:06:ff:60:eb:d7:76:5c:
                    69:9c:af:f5:03:18:fd:6c:5b:da:e5:c2:78:44:f4:
                    67:42:b7:0f:c0:cc:4e:aa:dd:c3:96:2d:e5:2c:d0:
                    1a:f6:d0:12:c8:79:e2:6d:b7:7d:c6:f5:d8:a2:37:
                    4c:8b:67:85:34:ea:ae:ca:b8:b4:f0:64:cf:f6:87:
                    f7:4a:d2:26:c4:33:39:f3:d0:f6:52:fe:13:e2:3d:
                    43:c6:e3:fa:f1:e1:40:90:b6:12:28:1c:1b:92:9b:
                    a5:17:75:58:28:c4:22:2b:3c:3b:5d:6c:c8:a2:a6:
                    6f:92:56:ef:a6:86:81:52:2d:1a:e0:29:40:82:ac:
                    02:87:fe:83:f6:ef:eb:1b:33:ac:e7:2a:c0:b0:13:
                    26:ee:7e:e9:9f:2f:da:f5:ea:50:71:bd:72:4e:e1:
                    d1:5f:2a:16:79:8f:33:6a:ba:3f:10:35:ab:88:a5:
                    30:21:48:30:01:97:ff:ac:25:d4:69:e2:67:fd:36:
                    01:3f:df:4a:2c:d4:78:d8:a1:4d:f1:38:81:74:f0:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:54:34:7A:24:40:8E:F2:CD:CE:42:E8:4C:73:29:76:8B:B7:E9:D7
            X509v3 Authority Key Identifier:
                keyid:BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35362e302f32342d3236203d3e20323635353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:89:aa:9c:ad:aa:b3:21:09:a3:6b:ff:16:38:fa:79:59:01:
         9b:22:2e:ac:1d:32:64:fa:c4:c6:7e:e4:a6:42:ba:03:87:d3:
         d3:ad:02:18:e0:10:77:a6:0c:85:88:68:93:f3:ae:8c:2f:e4:
         eb:83:fd:28:6c:53:82:26:22:d0:b4:9d:5b:91:52:91:0e:a7:
         7d:73:3f:71:93:c4:90:52:7e:5e:57:cb:4b:2f:58:ed:8e:48:
         e2:b1:6a:07:38:0a:c4:78:bf:05:c4:89:f2:8c:24:dd:43:a2:
         39:5a:8c:a8:13:5a:10:7e:42:21:c8:6c:c2:39:80:67:70:1b:
         99:b1:88:3a:30:7a:a4:73:b8:6a:39:5c:43:f8:32:62:41:87:
         6f:82:45:72:cd:98:50:e3:43:5f:18:2b:b8:3d:a7:14:a4:65:
         76:a6:80:84:f1:d0:9e:1c:cd:a4:ef:21:a9:2e:53:24:1f:a2:
         21:ab:d2:bb:95:51:49:37:0f:cf:af:20:cf:7f:6f:17:21:bf:
         c7:02:8a:c0:fe:2e:90:3c:6e:ef:13:fa:13:82:b2:d9:71:c1:
         e2:84:7a:7c:ad:06:66:da:e2:02:62:7d:01:b8:ef:44:c1:38:
         d0:65:3f:bd:d5:09:32:ec:37:3f:33:bf:e2:91:3d:b2:b9:0f:
         55:36:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:00:52 2025 by rpki-client