Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa
File:                     34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa (raw, json)
Hash identifier:          FWsaVWAo5o2Rm/rdJnsPQ98AEseTVU09AFBU6Jw/Aqk=
Subject key identifier:   94:AD:CA:49:1E:CE:5A:BE:A9:B5:C1:A1:23:C8:68:54:09:57:E3:3C
Certificate issuer:       /CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
Certificate serial:       5531522C967F2C69AF782EC4795BFC0BA15C2CEB
Authority key identifier: 6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa
Signing time:             Tue 04 Feb 2025 18:30:51 +0000
ROA not before:           Tue 04 Feb 2025 18:25:51 +0000
ROA not after:            Tue 03 Feb 2026 18:30:51 +0000
asID:                     267778
IP address blocks:        45.171.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:52:2c:96:7f:2c:69:af:78:2e:c4:79:5b:fc:0b:a1:5c:2c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
        Validity
            Not Before: Feb  4 18:25:51 2025 GMT
            Not After : Feb  3 18:30:51 2026 GMT
        Subject: CN=94ADCA491ECE5ABEA9B5C1A123C868540957E33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4c:cd:f8:f7:79:6c:99:b6:c2:a0:64:ae:65:
                    32:4c:33:76:28:64:ab:2c:5b:a1:6c:93:4d:9c:46:
                    af:f2:6c:3a:17:2c:09:4e:62:43:65:a8:4c:2a:30:
                    57:25:27:2e:dc:fa:22:28:f6:c8:92:ec:de:64:36:
                    cb:e2:92:eb:41:78:96:cb:46:10:c2:a2:a5:d6:ae:
                    d4:37:0a:05:cc:cb:89:05:bb:b0:5c:6c:36:2f:22:
                    a1:c6:62:dc:88:82:de:43:01:d7:a3:c0:8e:c0:fc:
                    03:79:19:c6:f1:ef:d9:86:08:e5:65:16:a1:17:06:
                    45:56:1c:63:fe:e9:3f:ab:40:1c:63:37:01:50:1c:
                    26:55:33:aa:1d:42:d8:e0:9c:72:64:e6:b2:58:57:
                    fa:3f:c1:7c:1b:89:ff:87:14:be:36:19:d1:2c:07:
                    21:f8:1e:17:48:90:40:70:78:ff:4c:6b:0f:cb:d8:
                    c2:98:e4:b4:a4:01:55:c1:78:d4:65:63:26:3e:0b:
                    71:28:dc:7d:5c:c0:43:24:7d:3a:da:12:31:f5:91:
                    d7:11:97:ac:eb:d8:47:d1:72:3e:93:c6:df:8e:e9:
                    db:89:23:38:f8:9c:a2:ea:0e:6a:ca:d4:06:3b:78:
                    53:c5:7b:e4:af:6b:ac:e1:a7:3c:df:87:6a:38:78:
                    cf:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:AD:CA:49:1E:CE:5A:BE:A9:B5:C1:A1:23:C8:68:54:09:57:E3:3C
            X509v3 Authority Key Identifier:
                keyid:6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:35:c5:00:11:f7:07:fc:ac:e6:d5:b7:5f:e7:10:53:43:4e:
         7a:b0:d8:55:f2:50:b3:80:ee:32:1f:aa:24:43:fe:04:b6:a6:
         d7:0a:5c:19:61:da:d7:4b:ab:ee:2b:22:5b:fe:93:e7:66:23:
         0c:f6:0f:77:31:fa:6b:3a:e0:a1:86:e0:00:f6:7b:7f:f7:05:
         6d:d1:a0:30:94:05:a2:ca:7e:b5:5b:e3:cc:b7:bc:29:c8:83:
         50:09:54:2c:4e:3a:7e:5d:46:f7:f9:09:b7:b8:08:62:a1:cf:
         05:af:98:51:7e:7a:0f:6e:ad:bb:15:ea:0a:01:55:aa:91:10:
         40:6e:bc:09:37:38:ab:77:0d:61:0f:1e:5c:6c:25:33:4b:5d:
         1f:8b:96:39:33:b8:b6:6a:99:f5:24:60:05:bc:47:55:66:46:
         f6:7b:36:33:4e:01:98:c2:0c:9f:ea:c6:c5:64:a3:19:1b:73:
         eb:10:5b:b8:f3:6a:4c:2e:57:df:78:b6:45:e7:99:3a:7f:78:
         9e:7c:59:19:43:14:2a:60:0c:89:15:f7:c0:ba:61:9e:e6:17:
         af:22:df:16:fe:9b:9c:fc:9a:41:8c:a0:66:af:e2:54:da:6e:
         95:fe:08:1e:d3:85:55:13:15:0e:95:ad:04:4b:6d:17:a8:6b:
         85:56:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:43:02 2025 by rpki-client on console.sobornost.net