Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234372e302f32342d3234203d3e20323637393239.roa
File:                     34352e3137392e3234372e302f32342d3234203d3e20323637393239.roa (raw, json)
Hash identifier:          0jfkv9FmvEIU5p1R6yoK3cVAghoNOkb79O6Ou9mZQzo=
Subject key identifier:   31:A8:C5:D5:03:DB:1F:7A:DB:14:8A:86:15:4F:49:AA:85:2F:B7:12
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       0CEB98B5F4F5109100760DF6DFD2C94B14F76FD0
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234372e302f32342d3234203d3e20323637393239.roa
Signing time:             Tue 05 Mar 2024 17:52:33 +0000
ROA not before:           Tue 05 Mar 2024 17:47:33 +0000
ROA not after:            Tue 04 Mar 2025 17:52:33 +0000
asID:                     267929
IP address blocks:        45.179.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:eb:98:b5:f4:f5:10:91:00:76:0d:f6:df:d2:c9:4b:14:f7:6f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Mar  5 17:47:33 2024 GMT
            Not After : Mar  4 17:52:33 2025 GMT
        Subject: CN=31A8C5D503DB1F7ADB148A86154F49AA852FB712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:bf:0e:61:0d:42:23:39:b9:f6:10:2e:99:
                    6d:73:29:5b:1b:e8:6d:74:21:fc:24:a3:86:ae:c1:
                    59:0e:b0:91:ad:ca:03:56:30:7e:c8:75:75:db:db:
                    74:d9:c9:79:0e:0b:a4:a3:a6:12:fe:91:93:88:c5:
                    1a:a8:4e:46:30:28:22:65:04:fa:58:d8:6b:2b:81:
                    fd:6a:13:5a:32:00:55:f2:e8:0a:1c:2a:26:2d:11:
                    45:01:e3:2c:95:e4:03:37:45:e6:b4:4c:c1:34:9c:
                    1e:0e:2c:d4:dc:60:07:24:7f:29:ac:79:df:0e:02:
                    9c:3c:85:c9:ed:2e:d1:13:37:59:70:a0:80:74:84:
                    a6:12:9d:63:4e:45:4f:b2:e5:67:f7:ff:ee:01:96:
                    e6:e6:82:7b:a3:ec:c5:97:8d:76:d6:7c:14:e5:12:
                    c7:dd:e6:7b:90:a0:6e:d3:21:95:54:ea:66:c7:b8:
                    58:a4:6d:53:06:bc:87:6f:12:70:21:17:fc:3c:30:
                    b8:b7:55:01:9b:76:a9:cb:7c:fb:1b:38:fe:1f:97:
                    cb:80:bb:ab:4b:ab:5b:b7:26:13:75:74:f5:9a:a2:
                    56:74:c1:35:a5:33:c1:d5:b4:d1:ea:90:6a:a4:b6:
                    5d:98:03:ec:7a:8b:9a:25:4e:34:19:59:f6:7c:42:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A8:C5:D5:03:DB:1F:7A:DB:14:8A:86:15:4F:49:AA:85:2F:B7:12
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234372e302f32342d3234203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:4e:e8:28:a1:62:50:cc:a8:a7:44:f6:d8:a4:dc:ee:df:86:
         4f:1d:6e:62:f2:7a:5f:f8:99:5a:39:38:ff:ab:b0:d5:40:e2:
         18:60:a3:c6:3c:b8:7c:e7:98:43:f7:35:5b:b1:70:b0:ca:96:
         2d:1a:fa:17:c4:c3:99:e3:de:1e:2a:43:c7:1a:8c:0c:a8:2d:
         2d:5d:21:56:cf:d4:f9:18:72:dc:d2:f3:7d:64:63:f3:e5:38:
         60:66:f1:8e:0c:8a:4a:45:91:0c:0d:22:e2:db:61:1e:08:94:
         29:53:6e:6c:30:46:5b:87:1e:8f:7c:bd:23:de:ef:c3:59:09:
         f9:e5:37:74:d6:16:fe:69:5c:e0:41:50:76:aa:d6:a5:4c:6f:
         c7:2b:5a:fd:f5:f0:13:da:88:a6:ff:56:86:75:7a:45:e4:26:
         22:ca:9e:e8:85:eb:c1:33:b3:89:94:ca:0e:39:ce:79:6b:5a:
         d4:50:8b:ac:f5:bf:83:bd:e0:1c:5d:bc:86:44:d9:72:f7:56:
         40:27:b9:71:4b:82:28:e2:67:c6:20:14:f2:c6:a0:6d:cf:3a:
         05:47:44:40:5a:e4:0b:bb:35:8b:33:a8:08:3d:82:bc:c2:cc:
         27:31:00:60:ea:f4:a3:a6:12:7f:7a:26:de:ff:98:46:0f:59:
         02:bd:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:58 2024 by rpki-client on console-ams.rpki-client.org