Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38392e302f32342d3234203d3e203236353036.roa
File:                     34352e3232372e38392e302f32342d3234203d3e203236353036.roa (raw, json)
Hash identifier:          EfllQ5GeLX/q0yYlYavBUVPSX5Yy3wyF1aF1yDeIe24=
Subject key identifier:   66:58:94:F0:A9:0E:2B:A8:33:DB:21:48:94:46:80:8C:BF:0D:D5:FF
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       368F33D0765DB797940022D4A81FC3EF5CF7C98D
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38392e302f32342d3234203d3e203236353036.roa
Signing time:             Tue 05 Mar 2024 18:03:11 +0000
ROA not before:           Tue 05 Mar 2024 17:58:11 +0000
ROA not after:            Tue 04 Mar 2025 18:03:11 +0000
asID:                     26506
IP address blocks:        45.227.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8f:33:d0:76:5d:b7:97:94:00:22:d4:a8:1f:c3:ef:5c:f7:c9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Mar  5 17:58:11 2024 GMT
            Not After : Mar  4 18:03:11 2025 GMT
        Subject: CN=665894F0A90E2BA833DB21489446808CBF0DD5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4e:9b:81:1e:55:c8:a7:f5:f5:09:42:4e:28:
                    21:b8:d4:01:4a:95:cc:3d:c6:93:5a:eb:db:e8:b1:
                    ea:85:7d:76:a8:44:76:2d:3f:75:24:3a:4b:84:e1:
                    b3:e2:a2:ef:4a:dc:cd:d9:b6:b2:1a:67:13:e3:20:
                    58:09:31:0f:f3:29:e2:de:95:ae:8e:33:2f:4b:9b:
                    7a:8e:ba:4e:97:6a:46:7f:6a:07:46:3e:02:69:22:
                    ad:b6:6f:78:d3:b7:de:4d:fa:d0:37:26:aa:52:bd:
                    5e:18:7a:87:3a:b1:af:49:01:de:5c:93:80:48:b1:
                    e5:12:52:62:b3:3e:8b:72:0d:95:8b:ee:b7:44:93:
                    cb:18:0c:2c:92:fb:8c:c9:8b:cd:43:a1:3b:9b:6c:
                    fc:a9:de:94:29:5f:a5:70:d5:01:c8:b8:9a:84:b7:
                    df:e0:7b:32:f8:49:e4:be:69:e3:fd:a0:e5:36:15:
                    1e:b5:72:d0:bc:d6:77:6f:b7:f3:c1:ca:60:95:a1:
                    e0:2d:a8:82:d3:69:46:8b:0e:1f:61:a3:b5:38:6b:
                    0c:36:a2:24:86:cd:2d:5c:9d:68:1d:77:77:fd:80:
                    34:65:94:2e:89:fe:43:5c:74:de:1a:97:1d:60:41:
                    78:ea:ec:8a:38:10:a1:96:5c:da:07:23:c7:98:cd:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:94:F0:A9:0E:2B:A8:33:DB:21:48:94:46:80:8C:BF:0D:D5:FF
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38392e302f32342d3234203d3e203236353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:98:5d:65:5f:08:c4:b7:ec:89:33:6b:47:67:24:bd:1f:13:
         29:b0:dd:58:71:b9:7a:c6:e0:82:24:a2:6b:ad:dc:ae:f3:e1:
         61:96:64:19:58:44:05:74:db:e6:65:b4:ae:bb:d9:b9:a3:be:
         11:96:71:dd:0c:3c:c1:34:d4:20:d4:1c:8f:c0:9b:88:5f:70:
         f3:25:af:94:52:c4:c5:9e:ac:db:4c:55:5f:10:92:60:f3:d4:
         29:5d:19:7f:cb:0a:46:42:ca:84:25:18:43:1a:03:6b:e5:e4:
         f8:a0:09:61:88:c0:d4:6a:27:2d:48:b6:4d:b9:d6:94:96:1e:
         e8:f3:ca:73:5f:7c:19:4c:fb:30:62:d6:8d:ce:3a:fd:09:23:
         26:71:c7:2c:cb:be:f7:c2:40:52:a7:49:51:60:35:01:ef:13:
         64:14:bc:02:49:56:fd:80:13:4b:e0:31:4b:eb:95:23:fd:d2:
         2e:e0:e4:d1:34:bc:33:d2:1c:2f:d9:75:16:fb:0d:3f:4f:8c:
         b9:5c:2c:26:45:d7:8f:fc:50:66:a3:28:53:4f:d5:b3:56:47:
         42:c5:58:5b:75:4d:65:07:23:da:74:f2:d7:5f:31:b5:51:f2:
         b3:15:f8:80:fb:b0:9e:cc:93:34:bf:14:7c:39:7d:db:a9:30:
         3e:eb:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org