Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38342e302f32342d3234203d3e20323637363832.roa
File:                     34352e3136322e38342e302f32342d3234203d3e20323637363832.roa (raw, json)
Hash identifier:          iowUSCP6nkypTOfxS6/NXCn4qSq2Lozb7RA2QE+TmLI=
Subject key identifier:   79:C1:06:4B:AB:D1:81:15:7F:86:7E:A9:A4:EF:22:CB:70:78:37:29
Certificate issuer:       /CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2
Certificate serial:       401783CECB35CE2F6A7F7306FB95E6CFA9F108B5
Authority key identifier: 97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38342e302f32342d3234203d3e20323637363832.roa
Signing time:             Tue 04 Feb 2025 18:02:03 +0000
ROA not before:           Tue 04 Feb 2025 17:57:03 +0000
ROA not after:            Tue 03 Feb 2026 18:02:03 +0000
asID:                     267682
IP address blocks:        45.162.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:17:83:ce:cb:35:ce:2f:6a:7f:73:06:fb:95:e6:cf:a9:f1:08:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2
        Validity
            Not Before: Feb  4 17:57:03 2025 GMT
            Not After : Feb  3 18:02:03 2026 GMT
        Subject: CN=79C1064BABD181157F867EA9A4EF22CB70783729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d9:67:38:19:b9:6a:8e:5a:39:cc:02:3d:39:
                    e2:56:5b:6d:a0:5f:95:44:b6:42:26:e3:8d:33:bc:
                    c3:6e:99:0b:b7:96:3e:c2:cc:f9:a1:24:9a:5a:a3:
                    67:03:33:d2:d5:d5:4c:f8:d7:bb:c5:53:d2:6c:b5:
                    60:62:b9:29:92:61:22:41:50:54:cb:c5:ad:3b:16:
                    ea:56:a7:3c:47:6a:54:21:53:b4:f3:b4:12:c5:ca:
                    ad:1a:6e:4a:ee:e5:34:91:c8:71:9e:b6:3c:ce:42:
                    a0:be:d5:b8:c1:34:b8:d0:7f:77:f5:ea:d8:3f:a4:
                    84:59:4a:c5:ea:9f:8b:34:f6:d3:0d:75:95:f1:57:
                    0c:08:92:d1:05:88:1f:de:4b:2f:88:c2:9b:65:37:
                    45:3b:65:84:0c:0f:1b:70:d4:cf:33:94:e5:f2:30:
                    3e:de:39:e5:42:7a:98:3c:19:36:ed:5a:b4:e3:e9:
                    b7:06:bf:2a:ea:ee:2f:10:e3:25:c9:00:54:87:42:
                    ca:4f:5f:d3:4c:2c:c9:96:58:ee:bb:06:8e:67:aa:
                    54:d4:91:e6:63:ad:99:00:a9:c0:a2:b1:dd:d2:93:
                    ae:42:02:bb:56:5b:c3:24:bb:a2:31:39:5e:c2:c4:
                    24:03:e1:ff:6b:71:3b:e0:de:84:44:24:9b:68:6c:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C1:06:4B:AB:D1:81:15:7F:86:7E:A9:A4:EF:22:CB:70:78:37:29
            X509v3 Authority Key Identifier:
                keyid:97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38342e302f32342d3234203d3e20323637363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:21:4d:ef:e6:58:51:65:f3:d9:74:7c:38:85:44:db:08:55:
         d1:6b:f9:3e:2a:54:ef:d1:fd:fe:0d:ea:30:91:0d:c1:06:4b:
         49:c7:5a:f1:cc:a6:b9:08:6b:90:ec:e0:e7:5b:e0:5a:50:27:
         11:fc:38:2f:9c:3a:a5:2b:ea:7b:eb:da:a7:88:0b:fd:cc:53:
         9a:c0:9d:55:42:53:73:e7:9f:f7:7a:fb:21:0e:3a:c9:d1:33:
         2a:37:db:16:e7:7e:60:a8:4a:94:80:6a:c4:15:c8:30:da:50:
         e3:59:d7:aa:de:66:af:aa:d4:ea:ef:9c:78:8a:94:48:83:d1:
         66:2d:ea:13:24:df:b2:50:8b:5e:eb:89:cb:0c:0c:c7:8b:f0:
         9c:6b:df:87:16:bb:cf:08:7a:1b:f4:a0:f4:62:0b:cc:3f:7d:
         1c:ee:57:55:d2:9c:64:84:08:ec:43:f0:d6:56:b2:28:e4:9f:
         06:fe:d9:12:94:62:e2:c9:68:c8:03:61:67:fb:eb:86:34:72:
         35:20:06:65:13:fd:7d:73:22:d4:2a:bf:bd:b7:10:60:da:94:
         0f:08:17:53:e3:72:c2:ca:8f:f8:5f:9f:3e:73:69:51:39:74:
         28:47:05:7a:04:18:04:1d:85:ee:1c:45:de:df:68:ab:d5:5c:
         bf:35:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:03:59 2025 by rpki-client on console.sobornost.net