Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35372e302f32342d3236203d3e20323635353732.roa
File:                     34352e3137342e35372e302f32342d3236203d3e20323635353732.roa (raw, json)
Hash identifier:          HjazcQhl3TJ3pa5RewnIuLYADBHImqWfsssNiwDarJg=
Subject key identifier:   2B:18:46:34:E9:DA:23:F0:C5:91:54:A9:C1:3F:01:D6:BF:D6:89:C9
Certificate issuer:       /CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
Certificate serial:       090A9EC3821F2D230C3FD27E557C2547DB752A20
Authority key identifier: BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35372e302f32342d3236203d3e20323635353732.roa
Signing time:             Tue 05 Mar 2024 18:18:27 +0000
ROA not before:           Tue 05 Mar 2024 18:13:27 +0000
ROA not after:            Tue 04 Mar 2025 18:18:27 +0000
asID:                     265572
IP address blocks:        45.174.57.0/24 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0a:9e:c3:82:1f:2d:23:0c:3f:d2:7e:55:7c:25:47:db:75:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
        Validity
            Not Before: Mar  5 18:13:27 2024 GMT
            Not After : Mar  4 18:18:27 2025 GMT
        Subject: CN=2B184634E9DA23F0C59154A9C13F01D6BFD689C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:d4:d2:ca:2f:37:f2:a4:78:ad:04:17:f1:
                    89:c9:e4:98:6a:ae:d5:83:c6:b3:15:97:6d:4f:c5:
                    4c:98:35:89:f2:27:c6:af:cc:f5:73:56:7c:b2:b6:
                    9c:7a:58:59:d3:fd:44:a2:0b:6d:61:36:aa:6a:71:
                    4b:ef:1d:8d:40:10:ab:11:78:64:c5:bd:b8:11:a6:
                    7b:bc:aa:3e:72:93:3d:13:d4:e2:41:8c:3c:0b:88:
                    f0:80:87:d0:4f:ad:5f:24:4f:47:63:30:48:41:5d:
                    15:9e:96:e5:95:61:ce:c7:02:5e:e2:c0:6a:6e:11:
                    72:51:c7:0c:46:34:5d:e2:45:8c:12:19:79:54:ea:
                    d2:7c:20:78:6d:4e:d6:97:7d:1f:71:08:60:2d:01:
                    54:74:3f:7e:67:c4:66:8c:b7:08:84:ed:33:f3:7f:
                    a5:b1:ed:1e:65:48:e9:70:0e:cb:28:d0:03:4e:8c:
                    1e:b0:e5:12:cc:b1:3c:9d:f3:21:1f:55:dd:70:37:
                    1b:ee:dc:a4:40:c1:97:a9:10:c0:29:8e:bb:1e:0c:
                    62:1b:e6:c8:49:7a:56:a0:3a:f3:75:75:b1:cf:9c:
                    cc:c7:87:5e:86:0a:1f:e2:7c:e6:47:37:07:6a:d3:
                    93:36:9a:b0:98:53:21:f3:9e:48:4d:4f:82:0b:10:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:18:46:34:E9:DA:23:F0:C5:91:54:A9:C1:3F:01:D6:BF:D6:89:C9
            X509v3 Authority Key Identifier:
                keyid:BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35372e302f32342d3236203d3e20323635353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:92:c5:f8:bc:c3:f8:07:2d:63:6f:b3:b3:31:0a:5b:9b:
         1c:76:6f:1b:06:bd:1f:d7:3c:a3:92:ea:d4:c3:5b:15:e6:1f:
         fc:b5:37:44:bc:dd:1a:ba:59:bd:4e:15:0a:a1:c7:70:97:c1:
         4f:2f:e8:80:50:48:94:67:7f:a3:1b:0f:fc:08:1f:c1:7f:2c:
         48:1d:20:59:f9:b5:ca:c3:59:e8:30:af:89:ed:34:e0:ed:4d:
         2c:bf:df:da:16:43:80:ee:da:01:b4:9b:69:d2:65:a0:81:68:
         1f:fa:25:68:48:c5:2b:3b:7b:5f:52:3e:65:d2:a9:5b:84:d4:
         6e:c3:fe:a8:aa:0f:5d:7c:6b:a8:f6:86:8b:d3:01:a2:de:c3:
         28:8e:94:38:61:be:52:56:b5:25:be:52:57:bc:07:d5:1e:37:
         71:18:55:f7:a3:a1:3d:3a:ba:a5:cb:51:e7:c5:45:9d:5f:6e:
         c9:b2:07:9f:81:fa:f5:8b:e2:9d:21:b2:9d:97:74:53:9f:76:
         7c:83:18:19:77:e9:4b:84:be:85:1f:a4:c7:8c:76:7d:d2:4b:
         cf:ca:5c:57:fd:16:7d:aa:6f:8a:ff:fa:45:14:11:e9:6e:2b:
         7d:79:ca:c2:70:09:b8:5d:56:8e:84:bd:65:f5:2f:a3:c2:c8:
         e9:44:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org