Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136352e302f32342d3234203d3e20323637383934.roa
File:                     34352e3137362e3136352e302f32342d3234203d3e20323637383934.roa (raw, json)
Hash identifier:          PTyWBXX0zL8SugJxfr9suk85jlR1Fgybylfa/JhpADc=
Subject key identifier:   79:49:63:5F:D9:D3:06:C3:E3:33:8E:95:CC:D6:C2:93:E7:FC:E5:46
Certificate issuer:       /CN=AF5961CE89F38C3B4D8403327DF504436CE78585
Certificate serial:       38E10007EFA9AF9FF9500277D76162C7E5494312
Authority key identifier: AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136352e302f32342d3234203d3e20323637383934.roa
Signing time:             Tue 05 Mar 2024 18:12:22 +0000
ROA not before:           Tue 05 Mar 2024 18:07:22 +0000
ROA not after:            Tue 04 Mar 2025 18:12:22 +0000
asID:                     267894
IP address blocks:        45.176.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e1:00:07:ef:a9:af:9f:f9:50:02:77:d7:61:62:c7:e5:49:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF5961CE89F38C3B4D8403327DF504436CE78585
        Validity
            Not Before: Mar  5 18:07:22 2024 GMT
            Not After : Mar  4 18:12:22 2025 GMT
        Subject: CN=7949635FD9D306C3E3338E95CCD6C293E7FCE546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:b1:a2:1f:d3:92:e2:7b:5f:81:3d:77:43:
                    b5:7c:2f:46:31:ec:fc:c4:18:48:2f:73:cf:ea:81:
                    62:49:3c:9f:06:f6:b3:ca:ee:95:f4:b0:bd:62:25:
                    c6:63:20:28:ac:7a:d6:a8:00:11:c2:06:59:fe:ce:
                    ce:8d:f9:01:4e:80:64:ab:1c:2f:ec:1e:bf:a2:5f:
                    25:d0:84:8b:8a:ad:4f:af:10:50:91:28:74:81:f3:
                    bc:8e:3d:63:aa:0c:83:8c:e7:d3:e5:22:b7:52:cb:
                    e3:42:a4:d1:51:34:db:70:e8:9b:1e:0d:35:55:90:
                    16:17:a4:ff:dd:93:93:27:ee:f7:9a:05:a8:78:7d:
                    c9:05:53:da:4d:0a:e4:3e:95:a9:11:d4:57:4b:37:
                    64:5c:0e:69:70:6a:44:81:9a:a7:cb:a1:a2:33:24:
                    f3:89:3b:1c:51:7a:f7:84:e0:ac:3f:77:3f:f2:52:
                    e3:d7:26:5b:3e:40:64:aa:72:b5:35:10:44:55:7d:
                    4a:df:d4:09:e7:72:18:1f:6b:4a:d6:2f:08:87:39:
                    12:7d:75:63:30:ab:50:06:d4:c9:6f:cb:e7:e1:13:
                    12:a8:93:13:35:5b:86:27:df:8d:1e:e2:24:61:33:
                    d4:be:ce:95:da:f1:13:4d:12:28:8a:f9:64:1b:94:
                    e7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:49:63:5F:D9:D3:06:C3:E3:33:8E:95:CC:D6:C2:93:E7:FC:E5:46
            X509v3 Authority Key Identifier:
                keyid:AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136352e302f32342d3234203d3e20323637383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:f6:ad:66:91:1c:26:df:1f:79:1e:d5:27:ec:b3:61:83:
         d7:e2:40:21:f2:d1:6f:bf:27:9b:5a:2e:36:ef:43:d0:40:7a:
         ee:d6:20:ea:e1:dd:2e:99:2a:c4:ae:5a:d0:a2:af:8c:c0:5f:
         00:a1:ce:ff:39:22:81:3e:90:91:0a:15:30:d7:6c:90:61:b0:
         d1:94:83:1a:c7:27:da:3a:95:ac:a8:7b:83:a6:a7:0a:9e:f1:
         cf:53:46:99:fb:07:77:b1:62:61:e1:b7:69:59:52:1f:5b:a4:
         be:65:f5:46:65:ee:fb:45:10:fc:43:99:ad:a7:1b:93:43:3e:
         a7:1d:a2:54:33:5d:df:27:75:e0:6c:7a:e6:6c:ee:c1:c4:ee:
         20:9c:1f:5f:81:84:24:db:52:65:02:75:a3:05:d0:57:c4:94:
         8f:df:13:b1:18:7e:fe:36:12:75:c1:c9:37:01:24:30:d6:36:
         3d:c7:cf:89:5b:89:7d:45:fb:72:de:3a:52:d7:b7:b2:65:eb:
         cf:1e:07:5f:0d:28:02:14:40:75:ff:36:ee:bc:c3:94:bc:e6:
         95:4d:b9:2e:50:76:bb:2d:4b:5d:07:a1:81:82:d0:a5:27:57:
         56:6c:53:a8:18:6e:71:06:77:1b:80:68:c1:4d:3b:b6:27:d7:
         f7:d0:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org