Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/34352e3137312e34382e302f32332d3234203d3e20323635363735.roa
File:                     34352e3137312e34382e302f32332d3234203d3e20323635363735.roa (raw, json)
Hash identifier:          ckM85uJkgieP1gk7pR2LoTwZ76RKGJHMR89cSNx1SXY=
Subject key identifier:   74:14:E3:77:ED:1A:53:93:AE:F0:94:40:A2:92:0C:31:F3:36:70:5C
Certificate issuer:       /CN=9BA0AE71B8F72C164479BAC088253D5E8C918F46
Certificate serial:       7718E15F051EE3A638B476FB5690379482B05B1B
Authority key identifier: 9B:A0:AE:71:B8:F7:2C:16:44:79:BA:C0:88:25:3D:5E:8C:91:8F:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/34352e3137312e34382e302f32332d3234203d3e20323635363735.roa
Signing time:             Tue 05 Mar 2024 18:10:30 +0000
ROA not before:           Tue 05 Mar 2024 18:05:30 +0000
ROA not after:            Tue 04 Mar 2025 18:10:30 +0000
asID:                     265675
IP address blocks:        45.171.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:18:e1:5f:05:1e:e3:a6:38:b4:76:fb:56:90:37:94:82:b0:5b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BA0AE71B8F72C164479BAC088253D5E8C918F46
        Validity
            Not Before: Mar  5 18:05:30 2024 GMT
            Not After : Mar  4 18:10:30 2025 GMT
        Subject: CN=7414E377ED1A5393AEF09440A2920C31F336705C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:28:51:39:e7:99:8f:9a:a9:71:67:b9:fb:
                    de:bb:8f:16:7f:4d:05:ef:81:0e:93:8d:55:50:9f:
                    02:18:ee:ab:bd:cd:5a:dc:aa:6c:86:6e:b0:0e:a9:
                    4c:e3:74:9d:a3:c7:ce:5a:80:00:8e:cb:d5:2e:79:
                    14:66:ce:8f:40:fd:6f:70:d2:65:39:2f:d0:28:62:
                    4e:83:2a:69:d1:af:f7:47:3d:14:de:59:bd:1f:f6:
                    48:93:75:78:88:7b:a1:26:41:12:bb:a1:75:3a:ae:
                    64:2e:62:1e:d3:34:be:21:77:76:cc:42:d3:66:cb:
                    5b:0f:75:1d:52:d2:5d:5d:23:ee:f1:ff:11:f2:5f:
                    09:8a:a9:97:f8:74:d3:fe:0e:33:f4:c3:50:4a:dc:
                    63:c7:01:5a:5b:8a:d9:70:b9:dd:b4:52:57:7b:fe:
                    79:2a:f3:fc:ea:72:9e:ff:34:3c:b6:7f:85:73:33:
                    66:f5:44:f7:d6:91:14:b8:e8:06:8a:e6:6f:74:7f:
                    67:81:40:6a:12:29:a7:7f:f2:25:ad:72:11:83:54:
                    52:2c:cc:dc:db:99:5b:33:0b:c4:e9:c7:ec:9f:57:
                    4c:60:e8:a8:14:fd:04:8b:28:74:f9:b1:30:30:57:
                    6d:b0:30:fe:51:d9:bf:7b:19:5f:30:d4:d3:c3:05:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:14:E3:77:ED:1A:53:93:AE:F0:94:40:A2:92:0C:31:F3:36:70:5C
            X509v3 Authority Key Identifier:
                keyid:9B:A0:AE:71:B8:F7:2C:16:44:79:BA:C0:88:25:3D:5E:8C:91:8F:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BA0AE71B8F72C164479BAC088253D5E8C918F46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14B0D2E9E63B0401B3DA49460C54C7F7C27C997D4DDFEBBDEB44507F5AB4C26B/0/34352e3137312e34382e302f32332d3234203d3e20323635363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:99:bf:3a:78:55:b8:44:46:a8:d7:54:e0:17:2f:75:17:d2:
         a3:3d:a6:81:31:a7:48:3e:9c:39:96:60:f1:67:5a:75:a1:f7:
         50:87:7e:12:25:94:f1:b4:4f:a6:34:45:77:cf:6c:52:1a:ca:
         df:70:f5:77:8e:9a:b6:84:01:c3:5c:eb:fb:30:76:75:5f:dc:
         3c:f2:ea:10:51:fa:1e:3e:6e:13:47:dc:9e:32:b0:2a:d9:17:
         81:c6:86:87:70:8c:8a:f8:c3:77:72:80:d3:4b:97:14:f5:7a:
         b7:cf:05:06:b9:26:f3:6d:bc:fc:06:db:15:fe:b8:9c:8c:bc:
         80:a3:d5:98:9d:7c:cc:ee:bf:5b:66:28:02:a7:86:c4:5d:81:
         46:2c:c2:f0:7c:d0:0a:9d:27:22:21:06:76:70:8c:bb:10:df:
         82:bb:93:a0:c7:9f:35:e0:1f:de:af:7f:1b:35:73:c9:b0:95:
         4f:90:c2:b2:02:00:35:de:67:c2:74:d5:bd:13:1c:dc:6b:fa:
         4d:6e:ed:2d:35:20:6a:12:3a:c8:83:4b:a4:28:03:98:5d:4b:
         f0:41:1f:76:90:8e:f6:03:34:8e:35:4c:9b:d0:7c:ef:41:19:
         d2:03:48:ea:c0:dc:62:51:de:e8:f5:e4:48:c9:93:40:7f:21:
         d1:b7:55:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org