Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234352e302f32342d3234203d3e203233343730.roa
File:                     34352e3137302e3234352e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          gRXl4zm4KzEhzCsvytlBLbGGk4MgsZrEq2Z5oeHPQr8=
Subject key identifier:   C1:54:D3:3C:E0:44:20:A8:88:C3:A3:B7:BF:46:A3:7D:74:C5:BC:41
Certificate issuer:       /CN=404AF48919442F94B61222A52CBC7E3F459B1B77
Certificate serial:       465F416B3EC7F724FE873C924BDF65009EFD613C
Authority key identifier: 40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234352e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Mar 2024 18:08:22 +0000
ROA not before:           Tue 05 Mar 2024 18:03:22 +0000
ROA not after:            Tue 04 Mar 2025 18:08:22 +0000
asID:                     23470
IP address blocks:        45.170.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5f:41:6b:3e:c7:f7:24:fe:87:3c:92:4b:df:65:00:9e:fd:61:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404AF48919442F94B61222A52CBC7E3F459B1B77
        Validity
            Not Before: Mar  5 18:03:22 2024 GMT
            Not After : Mar  4 18:08:22 2025 GMT
        Subject: CN=C154D33CE04420A888C3A3B7BF46A37D74C5BC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0b:52:ea:c5:51:4b:d7:4e:9d:99:ca:50:fe:
                    0b:cd:c0:eb:9f:ab:4d:ae:40:61:14:6e:3b:2c:3d:
                    2a:a8:26:2b:cd:f9:f2:98:8a:1f:03:59:09:c7:a2:
                    2e:7c:1e:28:2e:70:cc:44:e3:74:64:04:98:57:11:
                    7b:27:29:75:16:0f:54:70:05:c3:6d:71:75:04:67:
                    d4:b2:11:3c:ec:5c:3b:bd:cc:33:f7:0e:2b:b8:82:
                    6b:41:f2:a1:b0:a6:27:89:84:68:f8:76:de:1e:96:
                    d4:fa:68:be:d1:f8:dd:f3:46:68:c3:94:3f:5e:23:
                    0c:f3:45:f8:ab:e4:24:f9:21:24:d8:2d:cf:ec:88:
                    81:ee:70:f3:44:76:b3:87:95:22:ed:05:fe:8b:81:
                    ee:90:b9:89:c0:9a:f9:36:f9:fd:4b:76:93:d1:9a:
                    b4:8f:55:36:9d:ce:3e:8b:95:f5:f3:42:2e:0c:a3:
                    dd:19:f8:f0:58:88:e5:c7:33:57:66:f3:72:5d:83:
                    bc:80:52:ee:86:0f:9d:d2:17:1d:c5:9c:69:4e:5d:
                    06:0f:75:71:69:75:46:75:9d:b0:1d:6d:51:06:a4:
                    3d:0a:51:cb:93:4d:9d:e1:2f:75:96:5c:0b:35:57:
                    7d:01:31:2b:94:9b:1d:ca:8d:82:be:6a:7c:5a:b5:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:D3:3C:E0:44:20:A8:88:C3:A3:B7:BF:46:A3:7D:74:C5:BC:41
            X509v3 Authority Key Identifier:
                keyid:40:4A:F4:89:19:44:2F:94:B6:12:22:A5:2C:BC:7E:3F:45:9B:1B:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/404AF48919442F94B61222A52CBC7E3F459B1B77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69906B3801028B5BBD9266F9457A920FC97F93395DA043912EAA9ED57B81AEC4/0/34352e3137302e3234352e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e4:a5:2e:7e:05:b4:db:51:13:97:c5:ff:a0:2b:0a:9f:17:
         02:69:d2:b4:e8:9a:de:bf:36:c9:ee:7c:59:0e:4a:95:5c:27:
         20:da:16:8c:ce:5f:00:0a:52:0e:c0:53:60:87:38:22:8e:69:
         ef:63:27:86:55:e7:bf:f9:f0:d1:e5:23:d3:09:1b:80:e2:ac:
         47:58:12:e6:68:5a:c1:dc:c9:dd:91:16:09:a9:0c:69:31:eb:
         9b:96:88:4f:33:ce:7b:b7:0c:e3:61:46:32:2a:d7:70:93:a7:
         fe:7b:55:58:48:71:09:09:fd:4c:f8:31:df:6f:99:82:14:ee:
         05:00:57:03:02:23:11:bd:f8:79:ce:0e:11:2b:e6:4b:44:c0:
         d2:a3:3d:53:88:03:eb:e3:23:62:31:5f:00:80:5c:ac:fc:1a:
         ba:1f:20:31:f9:a7:fd:c4:d7:47:4d:f6:57:6c:2e:8b:06:46:
         a4:3c:a2:ed:84:c3:3e:96:f9:bc:08:60:9d:51:76:37:49:c6:
         46:23:6a:92:36:54:94:6e:55:d3:61:a6:10:73:03:32:b0:52:
         26:19:24:51:2d:5c:7c:94:fd:b1:73:ef:01:d6:85:11:6f:28:
         36:ae:40:db:6b:55:ad:3e:d0:2d:c4:31:22:fa:ae:5a:b8:55:
         f3:0c:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:57 2024 by rpki-client on console-ams.rpki-client.org