Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa
File:                     34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa (raw, json)
Hash identifier:          qMru1Fw3Y5Sl3AhlLcxU18yK0vCNpfkl3VQSYA9pk04=
Subject key identifier:   3D:60:AF:B2:79:EB:CA:E4:35:32:5E:24:D0:75:E7:3F:BE:6F:3E:18
Certificate issuer:       /CN=9F2857C840DE891C3C4CE0EE86756147DDB65ABF
Certificate serial:       53F6C8296B4AF2584719042B6FC5DC0DC4C158D8
Authority key identifier: 9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa
Signing time:             Tue 04 Feb 2025 18:10:32 +0000
ROA not before:           Tue 04 Feb 2025 18:05:32 +0000
ROA not after:            Tue 03 Feb 2026 18:10:32 +0000
asID:                     267865
IP address blocks:        45.174.178.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f6:c8:29:6b:4a:f2:58:47:19:04:2b:6f:c5:dc:0d:c4:c1:58:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F2857C840DE891C3C4CE0EE86756147DDB65ABF
        Validity
            Not Before: Feb  4 18:05:32 2025 GMT
            Not After : Feb  3 18:10:32 2026 GMT
        Subject: CN=3D60AFB279EBCAE435325E24D075E73FBE6F3E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:29:bc:72:62:6e:cc:cc:28:01:7e:0c:cd:
                    68:8c:c3:dc:89:f4:9c:da:17:7e:34:aa:4d:84:38:
                    ca:1d:44:c2:d1:73:10:7e:36:b5:fd:ab:94:04:fe:
                    9e:5e:2c:44:44:bc:ed:b7:fb:29:35:84:4b:f3:bf:
                    00:10:a4:20:5f:f2:1f:d4:12:59:be:69:d7:78:9a:
                    21:46:f5:b5:08:e1:37:5f:16:b9:b6:9b:9d:ce:d3:
                    b1:29:21:ff:f8:af:62:fa:6c:19:54:82:89:88:84:
                    05:97:ad:cb:20:9c:3f:1d:92:37:67:38:e9:66:c6:
                    14:b1:77:ec:fa:71:0e:93:a7:8a:2a:7c:d6:b9:fa:
                    a1:07:1b:e7:ce:cc:52:f4:c6:f8:b7:89:ff:1c:1b:
                    24:d2:fb:1f:be:66:c1:bb:88:cd:cc:fb:28:7b:5a:
                    25:53:e3:c8:62:33:f6:7a:03:f2:ff:a5:79:8d:17:
                    76:39:a1:af:cf:a2:37:1c:73:ee:b1:35:a0:61:3e:
                    b6:bf:93:68:2f:ad:af:47:aa:66:5e:f6:17:b6:60:
                    21:14:3d:50:7a:ee:df:15:c4:34:29:4e:4d:c7:6b:
                    fb:2d:1c:c8:3a:83:e4:58:4d:54:76:9b:fb:b8:eb:
                    42:dc:19:ec:11:3c:73:f2:b9:95:dd:bb:c2:94:89:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:60:AF:B2:79:EB:CA:E4:35:32:5E:24:D0:75:E7:3F:BE:6F:3E:18
            X509v3 Authority Key Identifier:
                keyid:9F:28:57:C8:40:DE:89:1C:3C:4C:E0:EE:86:75:61:47:DD:B6:5A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F2857C840DE891C3C4CE0EE86756147DDB65ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C647EFE819BF56A509D7DA4842E1AB6ED7241E8019AC15726B4EF0C698CF9C7E/0/34352e3137342e3137382e302f32332d3234203d3e20323637383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:6c:88:9f:a4:1f:64:4a:7b:61:4a:92:e8:94:8c:89:97:43:
         59:8f:a9:26:ba:04:35:c6:45:68:b4:d2:10:30:3a:f5:99:3f:
         c3:0b:61:94:ba:51:2f:57:6d:a0:e2:fa:df:6b:33:df:78:60:
         59:27:dd:64:10:2c:38:ad:aa:eb:88:69:79:75:20:81:5a:ea:
         6f:7c:e0:d3:4b:e2:a1:f8:9d:7f:de:37:0a:03:8b:4c:be:7f:
         12:10:29:24:6a:03:81:c4:17:a0:a5:bf:51:2f:c4:54:28:2a:
         a3:f7:54:87:8c:48:9a:be:40:1e:68:fc:de:07:fe:ad:73:25:
         8c:62:24:fd:f2:f0:47:5d:ab:c8:46:c2:9b:7f:b0:ab:df:12:
         72:b6:03:aa:de:be:0e:8e:fe:11:cb:ec:54:9f:4b:d6:a8:e6:
         25:5a:63:f4:5f:29:0f:84:23:8e:3b:cb:49:1d:ce:99:33:7b:
         68:26:f5:f9:c5:89:20:e2:8e:04:89:fa:75:3e:98:66:09:61:
         b7:4d:e5:b3:fb:3b:ed:64:48:2f:9c:92:81:1d:15:4b:a9:6a:
         25:22:1b:7e:23:b9:8a:b8:a3:34:de:fe:9d:f3:49:4c:41:30:
         9d:f8:0a:9b:80:74:88:04:8f:90:d2:35:47:9a:10:eb:49:f2:
         eb:93:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:58 2025 by rpki-client on console.sobornost.net