Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa
File:                     34352e372e36372e302f32342d3234203d3e20323730313433.roa (raw, json)
Hash identifier:          rClsk2HOQSeYQuz207q9gco5oRSFGOUMVKtwpVhsuJE=
Subject key identifier:   D8:F0:45:8A:5E:54:CE:BB:45:F4:D0:74:87:B7:97:20:B7:77:73:CB
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       480A074AF2C1ED5F04B2C49A6A40C0D1103D73E1
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa
Signing time:             Tue 05 Mar 2024 18:05:02 +0000
ROA not before:           Tue 05 Mar 2024 18:00:02 +0000
ROA not after:            Tue 04 Mar 2025 18:05:02 +0000
asID:                     270143
IP address blocks:        45.7.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0a:07:4a:f2:c1:ed:5f:04:b2:c4:9a:6a:40:c0:d1:10:3d:73:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Mar  5 18:00:02 2024 GMT
            Not After : Mar  4 18:05:02 2025 GMT
        Subject: CN=D8F0458A5E54CEBB45F4D07487B79720B77773CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:a5:ff:a2:45:a6:cb:03:ee:3f:e0:29:a2:
                    1d:b5:a8:13:a8:52:ae:8c:b5:fc:4b:80:5d:a1:d9:
                    d0:10:56:37:62:d3:60:ac:ed:76:1d:55:16:1a:b5:
                    9d:c3:9f:ea:b6:83:21:49:f3:d0:42:28:0d:75:eb:
                    09:48:6d:71:39:67:c6:85:72:c6:e4:08:31:2d:cf:
                    68:6c:3c:19:c3:de:a7:70:f8:d4:26:b8:80:72:ab:
                    20:ad:12:58:52:96:de:02:00:4e:52:8f:b4:f0:2a:
                    13:53:cc:83:d4:cb:7b:e7:b4:be:3d:1a:37:8c:3d:
                    3b:81:9b:6e:a6:5f:12:e1:fe:3f:04:fe:92:46:db:
                    6d:09:a0:a1:30:a1:40:84:96:1b:0a:a2:c1:e3:6b:
                    3e:77:6e:f3:97:23:03:16:bb:93:86:20:e2:43:b7:
                    0e:10:8c:fc:bf:bc:fd:77:ef:3e:9d:ac:6c:96:b6:
                    8d:10:ff:74:24:45:de:48:7c:b4:8c:6d:43:fd:86:
                    fe:82:6f:14:1b:9e:3a:94:b5:35:b1:ba:07:75:c2:
                    64:35:94:be:52:12:cd:2b:ef:89:5d:2d:13:d6:d3:
                    f1:36:b2:36:f6:a9:92:1e:f5:73:78:e4:b9:02:d1:
                    52:fa:99:7a:c8:c6:86:6f:29:1e:6b:f8:8d:a4:3f:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F0:45:8A:5E:54:CE:BB:45:F4:D0:74:87:B7:97:20:B7:77:73:CB
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36372e302f32342d3234203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d1:15:b4:9a:75:3d:dc:1e:3c:af:21:64:94:43:f2:e3:f4:
         aa:14:b4:41:62:0b:ff:84:e1:1f:6b:0c:ae:64:27:3c:a7:91:
         20:83:6c:5d:ae:b4:2d:1e:95:24:6a:66:ae:4f:db:f4:85:c4:
         68:5c:8e:79:82:ee:3c:10:15:7a:96:7e:5e:17:38:13:2d:88:
         02:33:70:96:30:cd:b0:4c:3a:0d:0e:78:a1:55:fb:a9:94:07:
         8c:b9:86:42:cb:23:31:35:7d:0c:70:e9:21:61:5e:9d:5c:90:
         7f:4f:53:b8:d5:69:26:b0:78:4f:b5:00:64:a6:61:bc:aa:4d:
         91:e0:72:7b:fe:e4:15:ea:0e:3e:af:0b:f4:50:e2:10:5e:74:
         ef:70:b2:b0:8b:64:2f:73:31:0a:71:66:4d:9c:08:17:1d:f5:
         be:2f:d7:45:1e:12:f5:e6:e6:7b:67:ef:87:c8:3c:4d:23:78:
         24:7d:30:7e:09:d4:74:be:63:56:da:67:36:af:16:78:6f:b2:
         38:c5:58:e9:da:eb:77:78:de:38:bf:36:d6:21:e0:01:eb:3f:
         11:73:f2:bf:78:ac:e4:bc:50:66:b2:71:c8:83:fa:a3:2a:48:
         fb:e7:25:0d:58:c5:b8:76:60:dd:e8:95:07:b5:5a:80:6f:49:
         a6:3a:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org