Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
File:                     34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa (raw, json)
Hash identifier:          r3J4iZtEsdssOJ21EAuM8EQB2MWGd45z46MuhqNcHac=
Subject key identifier:   9B:23:94:1E:AD:B4:D2:76:3C:09:30:CF:4F:72:AA:50:DA:82:B1:37
Certificate issuer:       /CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
Certificate serial:       01FF50256B3182A3C47AD127BC60DB597378D313
Authority key identifier: 29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa
Signing time:             Tue 05 Mar 2024 18:10:52 +0000
ROA not before:           Tue 05 Mar 2024 18:05:52 +0000
ROA not after:            Tue 04 Mar 2025 18:10:52 +0000
asID:                     267776
IP address blocks:        45.171.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ff:50:25:6b:31:82:a3:c4:7a:d1:27:bc:60:db:59:73:78:d3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2972ACC0C3AE4707691E50A6D4988851DC5598D4
        Validity
            Not Before: Mar  5 18:05:52 2024 GMT
            Not After : Mar  4 18:10:52 2025 GMT
        Subject: CN=9B23941EADB4D2763C0930CF4F72AA50DA82B137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:70:5d:87:53:a5:58:5e:40:f2:98:be:02:c4:
                    bb:28:6f:55:67:87:04:07:44:4a:e4:4a:de:97:04:
                    42:d9:e2:c8:05:71:e9:ea:7f:0a:09:8e:76:95:c3:
                    7d:f6:7a:af:5e:ba:41:d0:69:94:74:fb:21:ad:ce:
                    02:e4:af:2c:f8:ff:1c:64:3c:d4:35:a3:75:3a:20:
                    61:05:b8:11:d7:c1:ea:2e:42:c2:63:75:cf:af:bf:
                    9b:0b:28:9c:5b:91:b2:20:30:58:f0:f2:34:ee:41:
                    80:e9:05:f6:f3:99:3c:81:9e:19:49:21:ac:09:56:
                    2a:4c:47:88:a9:32:b6:bc:97:ae:83:3b:47:dd:19:
                    68:26:5e:37:d9:51:1d:26:90:14:57:ca:a0:0d:f0:
                    18:b9:bc:9c:9c:3b:76:06:40:b4:7e:8f:46:c2:95:
                    7e:ec:a6:07:6e:11:52:67:df:0d:ab:66:17:db:06:
                    39:23:a4:e1:98:05:ae:38:82:2f:38:bd:94:9b:2a:
                    74:84:a0:61:08:9c:a7:52:f1:2d:8b:0d:71:d7:6e:
                    4d:a1:65:e8:14:46:bd:02:1d:4a:5d:53:d0:ff:f2:
                    b1:aa:60:c3:6a:8d:84:28:a1:94:e7:2f:46:f5:cf:
                    e0:7a:77:6c:3a:08:ff:59:0d:4e:cd:d7:de:e1:0b:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:23:94:1E:AD:B4:D2:76:3C:09:30:CF:4F:72:AA:50:DA:82:B1:37
            X509v3 Authority Key Identifier:
                keyid:29:72:AC:C0:C3:AE:47:07:69:1E:50:A6:D4:98:88:51:DC:55:98:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2972ACC0C3AE4707691E50A6D4988851DC5598D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/089B08DB6E639D01C14FB171FF4338945C62E3EBD2CA588A0C6B00E35C69AAA9/0/34352e3137312e3232302e302f32322d3234203d3e20323637373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:d5:34:1c:d0:76:2a:2c:aa:98:16:fb:91:37:fa:bb:1b:34:
         56:bf:ea:81:86:d0:01:53:10:5a:6e:1d:d5:92:93:05:dd:da:
         b9:51:dd:b2:83:3d:fb:13:f5:8c:bd:e4:70:19:f0:27:1a:9e:
         4b:ad:46:bb:bb:3d:c3:3d:1f:a3:33:a5:1b:77:6c:2f:5d:2b:
         19:fa:99:a9:60:ca:8b:34:dd:09:20:c7:60:cc:0b:b1:e5:5e:
         96:c9:e8:ef:14:76:9b:c7:32:b9:2a:76:01:19:c5:f4:07:ca:
         84:32:8e:fa:04:1d:59:dd:7f:2f:be:00:e3:29:50:ec:8c:d3:
         28:d0:76:ef:5a:74:25:10:93:c5:4e:1d:60:2f:92:4d:4f:5e:
         2f:e2:44:28:3a:90:95:44:df:0a:f4:6f:48:89:6e:19:a3:06:
         80:07:ad:c9:53:32:36:7d:14:ac:29:65:0f:89:9d:1d:d2:33:
         fe:27:be:c1:78:6a:39:23:9d:d8:19:ce:f8:de:07:d1:39:2e:
         4a:4a:11:fd:1f:81:06:01:bc:b9:1c:78:4e:32:aa:4b:f5:f9:
         50:28:d3:d1:62:3c:c3:18:c9:22:e2:86:ad:f9:03:38:a2:cf:
         cc:2e:67:51:e4:ff:37:74:bd:ef:8b:10:b9:1c:a8:6f:21:a4:
         45:ec:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org