Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203233343730.roa
File:                     34352e3137302e3234392e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          QvWkE34DsNgTSKncfBLlsZTB7WJsBSaYZohnaNE8IEY=
Subject key identifier:   D3:CF:E2:63:B1:BE:A8:94:FC:97:88:F2:41:76:D3:76:D8:42:7B:58
Certificate issuer:       /CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
Certificate serial:       36401B0E5612954D1F85AF068A37A87BCD42630C
Authority key identifier: 69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Mar 2024 18:18:41 +0000
ROA not before:           Tue 05 Mar 2024 18:13:41 +0000
ROA not after:            Tue 04 Mar 2025 18:18:41 +0000
asID:                     23470
IP address blocks:        45.170.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:40:1b:0e:56:12:95:4d:1f:85:af:06:8a:37:a8:7b:cd:42:63:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FB064988CC6E77E3A9CF5D423A459765DC4E1B
        Validity
            Not Before: Mar  5 18:13:41 2024 GMT
            Not After : Mar  4 18:18:41 2025 GMT
        Subject: CN=D3CFE263B1BEA894FC9788F24176D376D8427B58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3a:da:9f:f9:f1:35:20:bd:c0:d1:f2:f1:02:
                    ef:c6:ee:45:aa:ee:77:4b:e0:63:f6:c3:56:c2:72:
                    d8:6d:a3:0f:21:4b:05:c0:f8:50:08:e6:75:77:f2:
                    d0:4d:63:0e:fa:bb:a7:7e:91:46:71:8a:50:db:33:
                    1e:f7:76:1b:23:1a:1b:78:39:8d:3f:04:e0:73:a2:
                    e9:fa:46:06:34:ae:4e:d6:de:49:b9:bf:96:78:ef:
                    e7:a8:de:c6:7a:94:ba:c8:a4:8c:3d:7b:0f:be:e8:
                    05:cf:8a:42:a4:d7:ee:18:dd:d0:36:69:d9:00:63:
                    89:22:83:0f:5e:8c:f5:c3:74:a1:5f:d0:41:36:97:
                    02:47:c9:15:8b:c1:a5:1e:e1:9a:f4:18:c0:e7:8a:
                    3f:a1:48:04:ad:4b:e6:a9:1a:b0:2d:47:a6:42:1e:
                    86:b1:ec:a2:0a:fe:e2:c1:6b:31:e2:51:a4:da:95:
                    fb:e9:50:8f:89:09:df:5c:1e:ed:71:5f:8b:05:6b:
                    89:d4:ae:42:73:94:07:63:f2:97:cb:bc:ad:1d:cf:
                    f9:27:db:38:0c:74:2b:9d:57:3b:e5:b1:9d:40:89:
                    fd:c9:8f:d2:5f:22:29:ee:41:70:86:94:ac:e6:d6:
                    4f:ff:45:51:0b:02:ca:55:10:40:f7:2b:d4:70:76:
                    d2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CF:E2:63:B1:BE:A8:94:FC:97:88:F2:41:76:D3:76:D8:42:7B:58
            X509v3 Authority Key Identifier:
                keyid:69:FB:06:49:88:CC:6E:77:E3:A9:CF:5D:42:3A:45:97:65:DC:4E:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69FB064988CC6E77E3A9CF5D423A459765DC4E1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14833F2BFFEA9E2A18C8194640DA219B39EE90CC292CDCEBE367C78EBC52A080/0/34352e3137302e3234392e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:7c:1a:f6:18:d3:e0:ad:82:e0:29:e6:6b:44:53:3f:e6:17:
         0e:e3:77:e8:82:94:62:1f:f4:bf:c4:ff:5f:eb:0f:2d:a1:e7:
         6c:e9:b2:bf:90:ae:60:40:03:4d:26:63:31:86:44:73:45:fe:
         18:d6:2a:ab:1a:ea:a1:8a:74:20:81:f2:e0:68:77:0a:fd:04:
         2f:cf:35:6c:5d:b6:ad:62:06:e1:c7:d7:c6:de:06:af:d7:1f:
         a3:36:5f:72:1a:32:6a:0a:eb:f1:a0:c0:b0:f2:5d:75:e4:19:
         eb:4c:0a:b3:50:e7:9c:69:9e:8c:b8:e2:a5:ca:eb:4e:d9:1f:
         52:5c:1c:3f:35:d3:0d:f5:d5:91:bb:e3:a8:29:66:e3:6a:b2:
         d8:9e:a3:ba:73:e2:f0:76:a0:21:a8:46:82:84:b3:ba:0c:2c:
         f1:2e:98:a3:1f:65:08:0b:ea:b7:55:09:81:da:48:0e:61:75:
         bd:92:eb:a6:41:b1:80:68:43:76:bd:94:9b:b8:fc:4c:56:6c:
         cf:5b:61:ca:43:95:98:b6:8a:1c:2d:19:b4:06:97:c1:6b:3c:
         34:f1:af:98:6f:03:62:3a:52:28:28:c0:9a:8e:44:75:62:d1:
         7b:39:c2:46:d2:c3:cc:6e:80:3a:dc:e8:9c:b5:79:a7:fa:b1:
         c3:73:12:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org