Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/171F9FCCA88F4E5912C51706B07DC3F480427A77CFB6A758B18D73B2192ACEAB/0/34352e3138332e3130302e302f32322d3234203d3e20323639373631.roa
File:                     34352e3138332e3130302e302f32322d3234203d3e20323639373631.roa (raw, json)
Hash identifier:          Pc5CFV/QBSO8MpnkXu9JtytJDEQqrxWbXDi0tH7FIhU=
Subject key identifier:   F2:81:44:72:9D:0C:84:F6:1B:C7:41:0A:D1:68:0C:65:DA:41:1B:C2
Certificate issuer:       /CN=39337CE76B8AB3559629BDC18A425979B4C1CAF1
Certificate serial:       606E31C050BD6B83AE07E8F2F07F967E93E5C968
Authority key identifier: 39:33:7C:E7:6B:8A:B3:55:96:29:BD:C1:8A:42:59:79:B4:C1:CA:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39337CE76B8AB3559629BDC18A425979B4C1CAF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/171F9FCCA88F4E5912C51706B07DC3F480427A77CFB6A758B18D73B2192ACEAB/0/34352e3138332e3130302e302f32322d3234203d3e20323639373631.roa
Signing time:             Tue 05 Mar 2024 17:45:53 +0000
ROA not before:           Tue 05 Mar 2024 17:40:53 +0000
ROA not after:            Tue 04 Mar 2025 17:45:53 +0000
asID:                     269761
IP address blocks:        45.183.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/171F9FCCA88F4E5912C51706B07DC3F480427A77CFB6A758B18D73B2192ACEAB/0/39337CE76B8AB3559629BDC18A425979B4C1CAF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/171F9FCCA88F4E5912C51706B07DC3F480427A77CFB6A758B18D73B2192ACEAB/0/39337CE76B8AB3559629BDC18A425979B4C1CAF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39337CE76B8AB3559629BDC18A425979B4C1CAF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6e:31:c0:50:bd:6b:83:ae:07:e8:f2:f0:7f:96:7e:93:e5:c9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39337CE76B8AB3559629BDC18A425979B4C1CAF1
        Validity
            Not Before: Mar  5 17:40:53 2024 GMT
            Not After : Mar  4 17:45:53 2025 GMT
        Subject: CN=F28144729D0C84F61BC7410AD1680C65DA411BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:4a:7d:e0:7d:37:89:a5:6d:23:86:02:eb:
                    5b:78:1b:e3:08:14:6d:3f:8b:6f:22:a6:54:75:cb:
                    47:0b:a7:e8:02:d1:32:a6:87:de:b4:1c:72:24:3a:
                    89:9c:32:e1:b8:83:fb:6c:73:5d:c1:00:0c:14:10:
                    e8:b8:d6:12:9c:88:de:83:39:e7:36:e3:07:3b:1a:
                    d5:f0:33:b9:f7:ce:36:fa:42:a3:2e:d5:e6:1f:a5:
                    6e:dc:91:a0:d7:f0:9a:2b:96:04:3f:74:0f:d5:16:
                    bb:e7:43:1e:ab:3a:00:de:fe:da:aa:19:7a:5c:46:
                    78:85:51:5f:68:79:56:8b:d2:da:d9:7f:cb:74:14:
                    07:db:8d:0f:dd:f3:7a:93:b2:f8:9b:7b:30:6d:af:
                    1f:63:86:60:26:53:db:95:a0:e6:3f:38:2b:20:02:
                    eb:ce:2b:8c:d8:cf:e2:9a:cb:cb:00:a0:6a:af:77:
                    07:20:32:20:b5:d1:21:c2:50:7c:a4:fb:9a:76:15:
                    17:c1:1b:c6:c1:84:c0:7d:0f:8d:9f:f2:51:3d:70:
                    1b:15:48:f6:ee:69:fd:e8:0a:a5:36:47:fd:90:33:
                    e1:41:fc:86:4f:49:1b:71:72:eb:e9:d8:ba:a5:34:
                    1a:bf:85:fc:ec:09:e6:27:64:cc:3e:73:29:9a:49:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:44:72:9D:0C:84:F6:1B:C7:41:0A:D1:68:0C:65:DA:41:1B:C2
            X509v3 Authority Key Identifier:
                keyid:39:33:7C:E7:6B:8A:B3:55:96:29:BD:C1:8A:42:59:79:B4:C1:CA:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/171F9FCCA88F4E5912C51706B07DC3F480427A77CFB6A758B18D73B2192ACEAB/0/39337CE76B8AB3559629BDC18A425979B4C1CAF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/39337CE76B8AB3559629BDC18A425979B4C1CAF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/171F9FCCA88F4E5912C51706B07DC3F480427A77CFB6A758B18D73B2192ACEAB/0/34352e3138332e3130302e302f32322d3234203d3e20323639373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:98:02:6f:dc:d6:1a:97:72:40:65:42:d7:25:fd:5b:d9:35:
         10:ae:91:20:8b:fc:b8:fb:3f:2d:4f:fa:e1:97:15:69:56:a8:
         f8:ce:3b:ab:5b:79:6d:90:d8:7d:33:f6:46:8d:2c:7b:31:8d:
         a3:f4:84:23:c5:a1:00:22:5f:9b:90:02:a1:71:38:69:c7:c7:
         ce:9d:9d:d7:f5:38:93:a9:87:51:13:98:c5:88:16:d8:51:71:
         40:09:e1:82:c3:0f:96:6e:80:e3:82:ba:21:c5:05:1f:ed:8a:
         67:45:75:85:f1:3b:8a:c4:9e:bd:86:47:5e:88:2a:17:2d:2b:
         97:4c:50:93:67:e2:06:e6:1a:e1:30:53:56:87:e7:a8:0f:55:
         bd:73:da:18:ba:80:e2:07:c2:04:7f:7c:e6:0b:de:92:d6:75:
         d8:3a:07:af:3c:80:b4:ca:20:e0:76:b8:ee:2a:94:66:cc:80:
         3c:00:72:95:b2:47:28:b2:e8:34:d3:a4:34:fa:03:c2:cb:51:
         ab:e6:b6:c7:98:ec:10:86:37:16:0c:b9:62:e5:8b:64:0e:01:
         90:f0:1e:54:93:08:d3:ea:5a:0b:e5:38:24:52:6c:c1:36:e3:
         d7:ba:18:9b:95:26:df:72:80:1a:fd:82:a1:e8:9b:f2:d6:1b:
         a9:2a:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org