Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa
File:                     34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa (raw, json)
Hash identifier:          TyG3+JNoN73LAITQQ88Eh0XwbNPxo3oZxLVEtflG2U8=
Subject key identifier:   E0:B4:B1:69:69:92:E3:2C:B6:DB:1F:13:E6:70:57:67:04:20:4F:FA
Certificate issuer:       /CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
Certificate serial:       2ACCC005259C2CE81FFF7A21DBEB17485210F87F
Authority key identifier: 6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa
Signing time:             Tue 05 Mar 2024 17:46:57 +0000
ROA not before:           Tue 05 Mar 2024 17:41:57 +0000
ROA not after:            Tue 04 Mar 2025 17:46:57 +0000
asID:                     266793
IP address blocks:        45.234.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cc:c0:05:25:9c:2c:e8:1f:ff:7a:21:db:eb:17:48:52:10:f8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
        Validity
            Not Before: Mar  5 17:41:57 2024 GMT
            Not After : Mar  4 17:46:57 2025 GMT
        Subject: CN=E0B4B1696992E32CB6DB1F13E670576704204FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:8c:70:b0:b0:11:d7:4b:5e:65:a2:63:95:
                    a6:14:20:bd:80:67:f4:c7:5f:1c:9a:d7:f7:7c:ce:
                    39:3c:60:c9:01:e8:42:39:62:d2:e9:6e:9c:7b:30:
                    78:9b:e9:45:f5:d5:ce:d3:73:b6:d2:a2:69:dc:c8:
                    2d:4d:47:33:9f:1a:d9:7b:80:53:f9:5c:b5:50:17:
                    b8:41:0f:aa:5b:e2:b1:44:b4:04:22:c3:39:14:9f:
                    95:ff:9d:ec:20:30:65:ec:59:c0:5b:93:c8:32:47:
                    ad:f4:5a:ee:10:94:5b:60:89:19:21:bb:93:9b:dd:
                    b0:29:d4:d9:63:e0:a1:c2:c4:6d:ef:1e:67:67:0d:
                    6b:c8:cb:c9:69:a9:35:41:30:f7:e1:2e:1c:29:d6:
                    83:3a:b2:b0:1f:c6:03:7a:29:df:6a:ea:c8:5c:56:
                    58:31:0e:c0:0e:6f:c1:f8:59:85:33:6d:a5:5a:ae:
                    5e:dd:db:e3:e9:87:15:c1:f8:95:0b:d0:ce:45:0f:
                    6a:c4:ac:82:07:2c:c1:5b:7e:2c:09:42:2c:ea:0c:
                    e4:cb:1f:f8:db:01:a3:b8:34:d7:0c:f7:ba:66:f2:
                    29:4b:d4:60:db:08:b3:40:88:d0:c3:cc:5b:bb:da:
                    43:18:28:e7:91:5e:9a:bb:db:4e:2f:47:cc:ba:c1:
                    5b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B4:B1:69:69:92:E3:2C:B6:DB:1F:13:E6:70:57:67:04:20:4F:FA
            X509v3 Authority Key Identifier:
                keyid:6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:48:c3:9b:8d:71:5b:7c:af:5d:80:06:9c:2a:5d:a4:65:42:
         89:2d:4d:6e:ac:e8:95:14:b4:ae:81:84:54:a7:5c:6c:83:67:
         bb:d8:02:13:ee:9d:17:59:16:63:4f:f8:c8:95:c9:cb:fd:b4:
         37:a2:19:57:2f:3b:44:75:08:c8:44:46:0a:dd:f6:50:6e:34:
         af:5e:a0:9b:34:2c:2e:4b:10:a1:c2:27:99:55:12:53:0d:ad:
         7c:b9:8d:b5:e3:e9:3b:a5:96:0f:ec:b2:ef:b0:89:7b:0d:73:
         66:67:e9:7e:cf:98:95:1c:0a:fa:a3:c4:b7:4e:2d:5c:d6:c6:
         ac:d2:47:f9:a3:7a:35:de:fc:ed:22:49:06:64:d6:80:00:3f:
         11:22:51:c4:18:e6:4a:76:eb:dd:99:67:81:18:07:c8:d4:57:
         b1:9a:4f:76:6c:7b:7c:f8:80:a0:7f:71:7d:7b:12:f2:ea:6c:
         23:4e:4a:2e:54:6b:d5:24:55:2a:d3:be:04:fb:4b:2a:15:fa:
         a4:c4:d7:8d:56:b4:04:fd:6c:61:21:e3:6c:fe:e8:22:ae:e3:
         ae:30:75:7f:66:7c:dd:fc:f3:7b:2e:97:5f:29:53:c6:65:f8:
         b8:4e:8a:b0:7f:af:ca:25:75:a2:e5:bf:dc:e5:18:a3:41:75:
         08:d9:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:00:07 2024 by rpki-client on console-ams.rpki-client.org