Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234362e302f32342d3234203d3e20323637393239.roa
File:                     34352e3137392e3234362e302f32342d3234203d3e20323637393239.roa (raw, json)
Hash identifier:          YXQkFlxZLao6kqunOcMzC1ZaBGd7j0+UVyiwXFKqBWs=
Subject key identifier:   B3:5D:03:06:34:0B:5A:F3:04:EB:CB:A8:B0:DC:B1:3D:89:81:0F:83
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       3584CE935D6A3DC5685FD67E333F61E31F85261C
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234362e302f32342d3234203d3e20323637393239.roa
Signing time:             Tue 05 Mar 2024 17:52:33 +0000
ROA not before:           Tue 05 Mar 2024 17:47:33 +0000
ROA not after:            Tue 04 Mar 2025 17:52:33 +0000
asID:                     267929
IP address blocks:        45.179.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:84:ce:93:5d:6a:3d:c5:68:5f:d6:7e:33:3f:61:e3:1f:85:26:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Mar  5 17:47:33 2024 GMT
            Not After : Mar  4 17:52:33 2025 GMT
        Subject: CN=B35D0306340B5AF304EBCBA8B0DCB13D89810F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:fe:44:04:93:2a:1b:03:7d:68:89:4d:28:
                    43:54:4e:12:f5:ad:8f:a0:a5:47:e7:d3:c5:d1:21:
                    e4:40:88:90:cb:cb:0b:7e:7f:d7:b1:0f:3f:0a:40:
                    5e:26:10:df:f8:28:41:1d:d9:b7:7a:97:c0:21:2d:
                    db:e9:3d:b8:63:70:75:45:bb:3e:a3:b2:d4:f0:06:
                    76:9d:8c:87:c8:9e:02:9b:e5:0a:75:dc:7c:8b:f1:
                    89:80:82:ad:eb:b2:1e:45:2f:92:15:e3:0d:d0:66:
                    dc:6b:32:d1:17:14:03:a7:f4:fc:38:fc:3c:66:33:
                    7c:29:e9:c2:4a:e8:b9:22:74:51:9c:d4:c5:eb:b7:
                    ec:ad:6b:5e:6a:00:d8:b2:f0:2d:70:51:a6:cb:27:
                    4e:04:c0:2e:76:36:2b:fa:f9:79:c4:09:fa:5b:bd:
                    67:88:73:e7:98:f5:3f:2e:86:6e:82:96:ff:69:35:
                    42:ce:2a:e7:7c:24:e4:6b:f0:c7:ff:e7:bb:08:c5:
                    c5:2f:86:cb:15:b5:6a:4e:df:1c:25:d6:77:b5:f4:
                    ff:5d:a6:94:83:3e:cf:bc:57:1a:e1:f0:c4:e4:0e:
                    d2:fd:d5:c1:36:99:44:9e:57:30:b7:c8:c4:5e:b1:
                    7e:7b:54:cb:a3:2c:67:3b:0a:9f:2e:35:d2:be:74:
                    ba:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5D:03:06:34:0B:5A:F3:04:EB:CB:A8:B0:DC:B1:3D:89:81:0F:83
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234362e302f32342d3234203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:87:8d:a6:15:cc:35:ca:13:5f:91:79:99:39:0a:22:4d:
         51:e1:60:a1:2f:63:9e:12:94:cf:08:73:ba:82:ed:9f:32:6d:
         07:99:37:30:7c:9f:64:1d:38:94:79:f9:80:7a:c7:21:6a:4f:
         03:65:ca:87:eb:17:1d:da:6f:11:66:a4:d6:86:64:50:b7:77:
         97:65:4b:85:67:44:89:ac:a4:d1:c4:a8:84:57:db:71:dc:f8:
         f9:7a:fc:0d:f5:c9:45:89:7c:aa:5a:b5:da:81:d2:e9:63:3d:
         50:f4:04:36:58:48:87:5e:ef:7a:24:bf:a6:ba:7c:10:ef:56:
         61:3a:0b:e5:95:9b:aa:a9:00:b0:76:a8:3d:74:10:32:5c:f9:
         2d:79:de:17:8c:20:ca:71:57:f8:2f:1e:a6:3f:e9:32:4c:01:
         0d:c5:02:b4:48:0b:e4:2a:aa:b4:bc:25:8c:4e:6c:03:e2:9c:
         e8:ab:ad:24:fd:f7:2d:96:d7:44:94:12:b6:42:eb:8e:4d:2c:
         7d:88:c0:4e:d1:5a:80:c6:a6:80:30:89:6b:af:4a:09:9d:bf:
         98:d4:e3:16:0a:20:a7:02:80:f3:92:07:f0:eb:89:8a:34:3d:
         02:e4:5d:63:2f:c1:f1:c7:a4:ce:da:fd:fa:db:4c:9a:fa:0c:
         cf:be:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org