Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323634363638.roa
File:                     34352e3233362e3136382e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          Q8kxnvKd7xAjQ4NHmB6n6svqhdkiCNO5AYLWZqJcjb0=
Subject key identifier:   B7:43:C3:68:69:86:EA:CC:53:2B:83:45:13:7D:BE:C7:0F:F9:C1:99
Certificate issuer:       /CN=9DDF7010D9766829525CC44FC34F3B14225EB013
Certificate serial:       6D97319539E933F0B9D3CF35F2A6FAC5A97805C5
Authority key identifier: 9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:18:01 +0000
ROA not before:           Tue 05 Mar 2024 18:13:01 +0000
ROA not after:            Tue 04 Mar 2025 18:18:01 +0000
asID:                     264668
IP address blocks:        45.236.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:97:31:95:39:e9:33:f0:b9:d3:cf:35:f2:a6:fa:c5:a9:78:05:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DDF7010D9766829525CC44FC34F3B14225EB013
        Validity
            Not Before: Mar  5 18:13:01 2024 GMT
            Not After : Mar  4 18:18:01 2025 GMT
        Subject: CN=B743C3686986EACC532B8345137DBEC70FF9C199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:29:16:61:2f:df:a3:ae:bd:de:87:71:1e:ef:
                    c4:25:b9:e4:b9:70:b4:b8:6e:5b:5c:5b:ee:86:e6:
                    94:a7:1f:8b:6c:a7:95:64:9c:48:99:75:27:1e:28:
                    62:86:f2:c3:b0:87:92:46:a0:8f:2c:84:3f:59:72:
                    85:6a:fb:38:23:66:8a:a8:95:82:10:f7:29:aa:4d:
                    36:8d:36:2a:5d:84:9c:20:6b:86:32:e1:b8:a1:1e:
                    9b:55:f8:33:c0:97:e6:7c:34:1b:fc:a3:c2:c8:1a:
                    54:cb:01:17:ee:57:5c:cc:38:7b:89:6e:ff:b9:e6:
                    02:bc:e2:a7:f3:0f:f7:e0:d1:2d:7f:be:1a:a3:84:
                    40:c6:f9:e1:3f:bf:63:7a:c1:9b:2b:ee:f3:b5:2a:
                    ca:e0:9f:cf:08:7b:63:0b:9e:66:c6:56:2d:ce:bb:
                    ab:e2:42:60:ff:6e:e3:b9:16:7d:8e:7a:0a:95:4e:
                    6f:16:c6:fe:a0:0d:26:e0:26:3b:99:8b:8d:d3:76:
                    d8:91:da:18:c6:44:74:5d:a2:0f:ba:f4:f3:56:24:
                    ab:34:d6:f4:27:90:ba:7f:32:b7:5f:10:69:b2:30:
                    c1:a6:81:00:fd:08:b8:c6:7a:7b:2d:3b:7d:5a:c2:
                    1d:f1:f1:f4:ea:32:e1:91:7e:1e:aa:aa:62:b5:22:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:43:C3:68:69:86:EA:CC:53:2B:83:45:13:7D:BE:C7:0F:F9:C1:99
            X509v3 Authority Key Identifier:
                keyid:9D:DF:70:10:D9:76:68:29:52:5C:C4:4F:C3:4F:3B:14:22:5E:B0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/9DDF7010D9766829525CC44FC34F3B14225EB013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9DDF7010D9766829525CC44FC34F3B14225EB013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B54750A0D80A3259C6D7C94912CBB4F7736CCA9796F75C3EF97ADDA81AE72ECE/0/34352e3233362e3136382e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:d5:a3:34:82:0c:49:70:a2:af:5f:78:0c:92:43:0a:47:f1:
         56:ed:ea:14:03:f0:47:d6:4a:30:1c:1d:c6:72:a1:ba:e8:8c:
         0d:fd:a4:51:1a:ba:79:b4:3b:ca:98:68:d8:08:7e:de:dc:af:
         a6:c6:9a:12:ee:c7:46:17:02:13:51:9a:d4:67:9d:79:bf:8e:
         96:5a:73:42:00:a1:62:e5:15:9c:df:8c:d8:0e:15:06:6f:b9:
         bf:88:9a:4b:2e:a2:f7:75:70:43:d5:81:fc:d2:ce:21:4e:83:
         02:54:e5:bf:46:44:e8:e9:af:1a:83:03:57:a8:22:90:61:29:
         7a:aa:90:29:64:08:6f:69:f0:d2:7c:4e:09:f5:ee:aa:5d:ec:
         6f:3a:a5:05:d9:ea:b8:f5:c5:46:4f:0b:1c:f9:5a:cc:22:13:
         2a:e5:5a:d3:fd:6c:a5:a4:d6:7c:df:02:8f:68:e2:1a:39:6b:
         52:39:68:7e:52:7e:2f:b9:01:66:5a:28:7d:19:31:e2:92:db:
         97:59:b1:b3:bb:23:db:36:32:74:4f:c9:32:1d:8d:1a:c1:b0:
         c9:11:f4:3b:8f:aa:0d:8b:1f:6a:56:ff:95:90:1d:29:e8:1d:
         73:f7:ae:fe:81:58:e5:a9:94:61:28:28:04:04:87:8b:23:01:
         ba:f7:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:04:23 2024 by rpki-client on console-fra.rpki-client.org