Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa
File:                     34352e3233382e3231362e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          RelEbRiDcGZPsk3Qm63OuTgAv/BLY0mdjHx6rXr40vM=
Subject key identifier:   EE:5B:16:B2:83:4C:D3:E7:F1:E5:EE:AB:CB:78:A6:71:76:FD:5F:70
Certificate issuer:       /CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Certificate serial:       113341CAFC96635EF77A3BFB1E27EFE32A4C66E5
Authority key identifier: 46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:04:01 +0000
ROA not before:           Tue 05 Mar 2024 17:59:01 +0000
ROA not after:            Tue 04 Mar 2025 18:04:01 +0000
asID:                     27947
IP address blocks:        45.238.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:33:41:ca:fc:96:63:5e:f7:7a:3b:fb:1e:27:ef:e3:2a:4c:66:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
        Validity
            Not Before: Mar  5 17:59:01 2024 GMT
            Not After : Mar  4 18:04:01 2025 GMT
        Subject: CN=EE5B16B2834CD3E7F1E5EEABCB78A67176FD5F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:fc:ff:8f:98:45:aa:af:a3:5c:b3:66:0c:
                    16:bc:75:e6:77:2b:b4:59:e2:83:36:63:56:ef:43:
                    14:dd:c5:43:bd:dc:23:94:b3:1d:1f:0d:75:40:aa:
                    32:30:8a:18:bc:43:5a:b7:55:4f:84:dc:ae:56:64:
                    fb:dd:25:33:64:90:15:4f:0d:9f:87:57:f0:bd:43:
                    c3:1f:5d:7b:82:01:b8:d0:44:43:e2:9e:97:aa:38:
                    d5:4c:db:ec:8e:38:f4:35:b2:85:9f:26:31:f0:53:
                    86:09:57:06:6c:c0:00:57:2c:a5:b3:13:25:4e:1e:
                    70:d3:90:fc:81:8e:64:50:d0:d4:4a:35:8d:ea:f8:
                    6b:8e:6e:84:ce:8b:ca:c0:4d:52:da:42:95:2f:d6:
                    b6:79:39:23:b2:a7:8f:06:91:32:a7:0e:7c:6e:4b:
                    71:3e:5a:21:75:aa:7d:09:c4:a1:63:aa:78:80:3f:
                    c8:16:ab:d6:3e:96:07:ca:f4:25:c1:72:ad:af:51:
                    c8:12:e8:38:bb:f9:51:a2:05:3b:b3:ce:b7:f0:42:
                    e8:8c:6e:e2:16:22:df:cb:0a:dc:f4:b7:a7:34:54:
                    9d:d4:3c:8e:7c:69:5d:ea:41:c4:57:6d:49:8c:0a:
                    4b:33:fc:d3:cb:46:34:bb:7d:63:4f:d2:37:ad:06:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5B:16:B2:83:4C:D3:E7:F1:E5:EE:AB:CB:78:A6:71:76:FD:5F:70
            X509v3 Authority Key Identifier:
                keyid:46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:cc:95:04:e4:0c:e3:9a:bb:ed:ac:88:ef:b4:40:fe:67:37:
         02:50:29:d1:79:a2:9d:bf:be:0e:a9:fa:ba:6b:4d:b9:d7:40:
         40:67:85:86:2b:b7:9d:2d:2e:42:91:b4:b3:2e:cb:20:1d:08:
         60:c9:46:7f:17:46:d1:9e:68:2a:1f:d8:e3:cb:d6:9d:8c:00:
         fe:97:2d:be:2c:2f:83:8d:22:8f:67:81:d3:51:07:57:2a:d6:
         ed:79:85:0e:b4:d1:b4:f4:fa:e5:1a:b9:22:30:ee:fe:32:37:
         59:09:2c:91:48:7a:9f:e3:70:16:1b:ce:b3:2f:71:94:bf:b2:
         16:06:d8:4b:59:4a:f2:ae:98:4b:6f:ca:02:ed:1d:0a:c4:9e:
         3d:7f:29:60:bd:9c:4f:f2:96:e0:29:28:49:d7:35:92:d1:28:
         f9:7c:8a:1e:ad:6f:16:27:4b:7b:d4:c9:b5:69:27:f4:63:8c:
         df:b9:55:7f:23:8c:ea:7b:4c:bb:ac:47:aa:28:a2:cb:95:40:
         0c:88:20:e4:53:96:d2:4f:4f:d8:e8:79:6c:ef:48:f2:a0:0d:
         b0:c6:44:7e:69:f9:e0:34:de:30:1b:03:38:98:a2:67:ac:3d:
         5d:5c:f1:19:11:54:33:21:33:dd:8a:7f:da:61:c5:4e:a0:d4:
         aa:cc:58:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org