Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35382e302f32342d3236203d3e20323635353732.roa
File:                     34352e3137342e35382e302f32342d3236203d3e20323635353732.roa (raw, json)
Hash identifier:          0X5j35R3wTAglw1WBlz0DHFOeuv4JxM1JipEWwrWqrQ=
Subject key identifier:   D1:2E:AA:AF:3F:D7:88:32:2C:43:D9:48:D2:9D:E0:47:8D:C8:13:05
Certificate issuer:       /CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
Certificate serial:       6D96FFEE42399E17A043BBD6AC4246D1A69D332D
Authority key identifier: BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35382e302f32342d3236203d3e20323635353732.roa
Signing time:             Tue 04 Feb 2025 20:08:02 +0000
ROA not before:           Tue 04 Feb 2025 20:03:02 +0000
ROA not after:            Tue 03 Feb 2026 20:08:02 +0000
asID:                     265572
IP address blocks:        45.174.58.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:18:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:96:ff:ee:42:39:9e:17:a0:43:bb:d6:ac:42:46:d1:a6:9d:33:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE4BDD707451C3727A95702AC4ECF246570ADB04
        Validity
            Not Before: Feb  4 20:03:02 2025 GMT
            Not After : Feb  3 20:08:02 2026 GMT
        Subject: CN=D12EAAAF3FD788322C43D948D29DE0478DC81305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:9e:ca:4a:62:15:05:36:2d:d8:ce:16:8c:
                    47:f5:14:86:a5:e5:9b:eb:e2:47:dd:b9:b5:84:03:
                    ba:84:b1:04:21:a9:59:a3:55:b5:57:a4:66:c8:67:
                    77:0c:fa:ea:25:7c:8e:8d:c6:e3:fd:f8:67:0e:a2:
                    14:c6:a8:39:57:22:1a:ed:fb:38:3d:12:7f:de:b2:
                    9f:24:93:12:54:b3:50:3c:10:91:5e:78:1c:b8:f5:
                    09:ae:48:67:bc:a3:10:ff:aa:82:60:24:9f:aa:05:
                    cb:d9:34:ef:4f:0c:80:66:f4:e7:8d:37:2c:29:05:
                    3d:1d:ff:39:c1:64:d7:7e:6d:c2:86:4c:63:0e:1a:
                    83:01:27:69:3b:38:d3:34:10:ef:76:2f:4e:66:a3:
                    53:c5:20:ff:e8:c1:bc:5d:a5:9f:1d:a2:48:b9:8f:
                    9b:5a:03:4f:c7:84:1e:15:82:18:5d:4c:66:b7:37:
                    c1:cf:1e:36:1b:d9:78:63:e4:01:ee:3b:d1:76:aa:
                    62:5b:90:69:f5:61:1b:e3:af:8d:52:68:31:c1:b4:
                    10:9d:18:3b:2f:9d:2b:47:d6:d3:13:29:2f:3f:08:
                    e6:54:0e:06:fb:ac:19:9c:38:81:6e:df:b9:e6:36:
                    4d:fd:dd:c6:99:90:2b:3a:9d:e3:f0:fb:69:1e:93:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:AA:AF:3F:D7:88:32:2C:43:D9:48:D2:9D:E0:47:8D:C8:13:05
            X509v3 Authority Key Identifier:
                keyid:BE:4B:DD:70:74:51:C3:72:7A:95:70:2A:C4:EC:F2:46:57:0A:DB:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE4BDD707451C3727A95702AC4ECF246570ADB04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9D0A9FBAF56F2810CA77633D817EC4AF7BDC80561E220D12216A061C3D2A24B/0/34352e3137342e35382e302f32342d3236203d3e20323635353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:27:da:10:94:76:2c:ca:0e:63:45:41:ff:e2:90:ed:65:
         d8:67:2a:ef:e6:95:0f:83:c5:9f:06:eb:d3:ec:44:83:76:2c:
         58:26:40:fe:99:15:d2:7f:ea:09:bc:20:f9:bc:55:57:c1:37:
         d7:ac:38:c6:23:29:f6:48:69:71:46:38:cf:6f:cd:d4:4e:8a:
         2f:2e:cb:c5:b8:5b:d0:b7:ba:a7:fc:2e:e1:7f:91:e6:2e:b9:
         ab:0d:6f:a9:c5:05:27:c6:cc:8d:1f:41:ff:0f:10:27:56:dc:
         7b:2c:f4:91:e3:9c:af:fe:8b:5c:f5:54:de:5f:95:1a:18:1d:
         20:ea:a9:2c:f3:33:77:12:43:a1:e2:35:49:c6:be:c8:7a:28:
         28:b2:d1:78:25:0c:a6:07:3b:73:fa:91:e2:ba:ff:84:e8:ff:
         8c:20:64:c2:b7:72:0f:6d:a8:4f:65:1e:4b:74:15:c0:fd:ce:
         56:6f:7a:e5:b1:42:de:31:ca:17:d3:21:a1:c8:39:e1:d8:dd:
         2f:8b:aa:22:21:c4:19:9a:72:09:f2:96:23:ac:3e:32:ca:32:
         d8:04:57:c9:f7:94:ac:19:a0:b8:7d:33:91:74:b9:5d:c3:16:
         b9:53:0b:78:e4:cc:53:14:af:21:d6:b8:19:75:67:a5:67:87:
         9d:99:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:00:32 2025 by rpki-client