Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa
File:                     34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa (raw, json)
Hash identifier:          Dyn15gkT9PQa9M8oUA43S2pNZtK7IZmC47SMMtVy6yg=
Subject key identifier:   55:73:62:73:AC:69:E8:68:CA:7F:05:3B:9A:7E:DD:B9:E7:C2:13:4C
Certificate issuer:       /CN=FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D
Certificate serial:       407274E7BDB921AEDAE7C64FC8AEE69B9DC647FC
Authority key identifier: FA:45:26:A5:B6:F9:4A:3A:0B:F1:9B:48:F8:54:C3:7A:F4:E9:78:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa
Signing time:             Wed 14 Aug 2024 04:55:00 +0000
ROA not before:           Wed 14 Aug 2024 04:50:00 +0000
ROA not after:            Wed 13 Aug 2025 04:55:00 +0000
asID:                     266784
IP address blocks:        45.179.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:72:74:e7:bd:b9:21:ae:da:e7:c6:4f:c8:ae:e6:9b:9d:c6:47:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D
        Validity
            Not Before: Aug 14 04:50:00 2024 GMT
            Not After : Aug 13 04:55:00 2025 GMT
        Subject: CN=55736273AC69E868CA7F053B9A7EDDB9E7C2134C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:d2:6b:2b:18:ff:85:08:88:6f:42:fe:fc:
                    9f:20:13:74:9e:2d:61:82:73:16:54:41:0a:5f:38:
                    48:6b:8f:46:a0:65:77:08:39:1c:57:fa:2d:4a:ea:
                    04:b0:47:3f:56:76:ec:59:b0:8d:2d:99:d4:6a:8c:
                    57:a7:ef:00:db:bb:7a:ff:1d:c8:f0:8d:5e:e9:97:
                    7f:c9:a8:87:1f:5c:bd:97:cb:46:92:15:6b:bf:4f:
                    dd:79:65:1c:d0:55:2f:c7:ca:3b:72:b4:3c:0e:67:
                    5a:c8:d8:57:18:ea:68:7b:41:cc:d4:de:fb:31:00:
                    09:54:b3:b6:39:69:b2:ee:ed:0f:ed:98:f3:6a:f0:
                    87:74:58:03:9d:2a:ec:8c:72:ca:b7:a4:7a:65:e1:
                    c1:e1:b9:6a:b7:ab:45:68:79:80:ea:a8:e1:79:db:
                    ab:32:88:58:f7:eb:ee:ce:11:88:4b:79:df:0f:6c:
                    b9:2e:50:c6:98:cf:9d:67:15:62:69:32:3e:66:6f:
                    52:bc:0c:34:2e:28:00:ba:04:9d:bf:30:5b:95:b7:
                    e9:fa:f9:16:5c:31:b2:f9:e0:b8:ec:ec:f9:a5:49:
                    6d:48:f6:ce:60:4f:09:e9:75:b1:98:99:01:65:02:
                    76:ae:72:3e:d9:7a:2c:81:bd:16:02:e8:15:fd:08:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:73:62:73:AC:69:E8:68:CA:7F:05:3B:9A:7E:DD:B9:E7:C2:13:4C
            X509v3 Authority Key Identifier:
                keyid:FA:45:26:A5:B6:F9:4A:3A:0B:F1:9B:48:F8:54:C3:7A:F4:E9:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA4526A5B6F94A3A0BF19B48F854C37AF4E9788D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF40A7B2FE0C4A9C6A1F449401FA3F64271CCD6FBDF05E956FD69A3039460964/0/34352e3137392e3235342e302f32342d3234203d3e20323636373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:39:b5:72:84:b3:94:e8:16:70:de:d6:ce:59:e1:21:c5:b4:
         f1:22:4d:7c:e9:8a:d7:96:46:9f:d1:97:1b:b5:3d:62:f2:7f:
         8a:dc:d5:93:f6:a4:d6:90:78:7a:c2:8d:bf:c7:39:a5:f7:0b:
         32:8d:a4:17:16:cd:73:4d:ca:2b:f5:9d:20:fa:38:04:e1:e2:
         64:7b:24:8e:74:64:b7:7d:c9:08:df:76:f8:cd:df:8c:26:5e:
         db:8c:9e:9b:05:f5:d9:d2:5a:18:d2:76:f9:24:fb:ce:65:52:
         f7:d1:2c:8e:3e:5f:61:e5:c8:bc:79:fa:69:6a:ec:4f:29:a4:
         1c:ff:15:2d:01:61:87:74:7f:19:7a:82:ef:5b:b4:6c:2e:36:
         4d:0c:73:aa:d6:bf:b7:3e:1f:ee:a6:bc:0f:88:32:3e:3b:53:
         f1:5b:56:5e:97:c4:58:5a:52:dc:c3:87:05:d0:ac:e2:2f:89:
         62:dd:80:b3:f5:f9:47:d8:4d:74:83:5d:54:03:41:f2:c8:7d:
         b1:ed:d0:f6:67:77:71:8c:db:b6:90:f1:7d:5a:a5:eb:a9:9a:
         79:16:9e:1c:be:17:e7:97:9c:35:04:69:52:28:7f:40:ed:52:
         41:86:b8:70:e1:14:df:13:99:8c:af:15:24:2f:60:10:8f:be:
         5f:ce:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:23 2024 by rpki-client on console-fra.rpki-client.org