Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa
File:                     34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa (raw, json)
Hash identifier:          gAobh+OrDGrakrqnWdgIhl44jSToPpoJvBlh3+2aoac=
Subject key identifier:   C3:21:56:22:59:73:AA:7E:BC:EF:14:4C:43:BA:DD:78:32:AB:24:1F
Certificate issuer:       /CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
Certificate serial:       25FEE069B7D4C8B1FEF698A5435DB2665B855088
Authority key identifier: 21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa
Signing time:             Tue 05 Mar 2024 17:58:09 +0000
ROA not before:           Tue 05 Mar 2024 17:53:09 +0000
ROA not after:            Tue 04 Mar 2025 17:58:09 +0000
asID:                     265556
IP address blocks:        45.164.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fe:e0:69:b7:d4:c8:b1:fe:f6:98:a5:43:5d:b2:66:5b:85:50:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3
        Validity
            Not Before: Mar  5 17:53:09 2024 GMT
            Not After : Mar  4 17:58:09 2025 GMT
        Subject: CN=C32156225973AA7EBCEF144C43BADD7832AB241F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d2:0d:c8:db:fd:1e:7b:3e:29:31:d1:9d:9b:
                    8e:3e:14:35:18:cb:de:27:94:6c:d4:22:9d:96:8d:
                    bd:f9:0a:e6:2d:45:46:fb:77:43:fa:c8:97:a9:3a:
                    22:59:bd:98:55:1d:e0:a9:5f:7b:36:6f:2b:7e:b8:
                    3b:a4:3b:c8:d3:72:c3:56:69:dd:c5:2e:a5:49:a2:
                    c7:67:a1:60:e0:8a:49:3c:db:57:af:28:d3:38:0e:
                    1e:ea:f2:9c:6c:a1:e1:17:2d:e2:05:bc:ac:cf:b9:
                    be:cd:7c:1b:2b:3d:04:bd:64:c0:85:98:4a:39:0c:
                    83:1f:2e:98:be:85:7f:14:28:4c:e8:45:51:fd:0e:
                    49:89:f6:b1:c0:6f:ad:51:37:80:a0:cf:23:d2:dd:
                    3d:ac:b8:3c:f7:44:1c:4b:3e:b2:7e:e7:1b:f3:c5:
                    53:b7:4f:54:73:cc:a8:7f:c3:68:39:8e:99:42:81:
                    f1:34:5c:15:44:50:99:d3:45:4c:e0:e6:76:9e:bc:
                    4c:d7:df:fb:14:26:b6:21:79:24:90:b0:3d:9b:92:
                    32:56:b6:d8:a4:90:57:39:98:c2:92:f3:10:5c:ac:
                    c2:b3:cb:c3:f9:f1:f3:ba:98:6a:cb:bd:a2:e4:3d:
                    ca:c5:33:24:9b:4c:ea:9e:b0:b5:16:dc:27:d7:42:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:21:56:22:59:73:AA:7E:BC:EF:14:4C:43:BA:DD:78:32:AB:24:1F
            X509v3 Authority Key Identifier:
                keyid:21:55:D8:99:F5:71:21:56:D0:B4:E8:7A:3F:DF:C6:A0:E1:A3:FA:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2155D899F5712156D0B4E87A3FDFC6A0E1A3FAC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1461E5AD2AB915F037980A843DCE399F0922361D71F157AF862F3E39E028D366/0/34352e3136342e3133362e302f32332d3233203d3e20323635353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:28:cf:32:0b:e9:46:3b:a6:57:74:17:f8:3f:ad:28:5b:d7:
         9f:1d:1a:0a:7d:09:b5:ba:5f:f7:11:8c:3b:5b:1d:5c:19:57:
         a0:40:95:bb:4f:ec:43:d4:f7:07:3a:b0:e6:8f:ab:6a:bb:b8:
         ab:34:bf:6b:43:e2:3c:d7:e7:30:bd:85:6f:a7:b9:6c:0d:04:
         72:e9:f9:d8:34:cc:9e:d6:4d:b6:08:f1:ac:d9:ae:e3:d8:1a:
         5b:f5:a6:93:32:08:83:47:76:e8:bd:8b:38:6f:f3:ed:81:86:
         f3:e8:f6:7a:9e:bc:64:fa:2b:f6:87:ca:ee:15:9d:91:65:33:
         18:42:63:9d:1e:4a:1c:75:a2:ba:27:72:5d:fa:50:5c:2d:ab:
         09:27:31:24:97:d9:0f:fa:b2:ef:71:9f:32:04:d6:3f:df:4c:
         99:95:97:5e:e1:fe:b3:8d:30:c5:71:a9:72:36:64:6e:55:92:
         82:84:00:95:5f:05:21:cf:77:e0:c7:6d:63:fa:4a:7f:5d:21:
         01:cd:5f:44:ef:e2:e0:10:06:98:cf:ab:31:68:bd:57:fd:16:
         e7:c0:4a:79:f0:01:5a:ad:69:0e:82:47:30:ce:d1:9d:8e:33:
         81:3c:fe:4a:42:70:8d:61:e0:7b:b1:74:d0:48:9d:8b:ab:30:
         e3:9f:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 02:50:00 2024 by rpki-client on console-fra.rpki-client.org