Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa
File:                     34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa (raw, json)
Hash identifier:          E4SCQvZZZaLbIWn+T+x81EWEdbKqgDsK6jKLWkyi44Q=
Subject key identifier:   6E:4F:35:84:6A:18:B3:84:FE:55:9D:FA:6A:FD:BE:EC:3E:E7:1C:E4
Certificate issuer:       /CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
Certificate serial:       3C7F26D592FE951DA37D3E33732E1F655514B650
Authority key identifier: 69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa
Signing time:             Tue 16 Apr 2024 21:20:00 +0000
ROA not before:           Tue 16 Apr 2024 21:15:00 +0000
ROA not after:            Tue 15 Apr 2025 21:20:00 +0000
asID:                     266737
IP address blocks:        45.231.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7f:26:d5:92:fe:95:1d:a3:7d:3e:33:73:2e:1f:65:55:14:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
        Validity
            Not Before: Apr 16 21:15:00 2024 GMT
            Not After : Apr 15 21:20:00 2025 GMT
        Subject: CN=6E4F35846A18B384FE559DFA6AFDBEEC3EE71CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:9a:e0:11:e4:ee:63:6d:c6:64:bb:8e:fa:
                    05:22:5e:b1:0c:29:cd:35:c7:d0:ef:27:b6:ba:d6:
                    c9:0b:91:aa:a6:63:4f:34:c9:ee:76:c3:76:a0:d3:
                    1a:6a:9d:92:92:dc:d5:e8:35:38:13:86:56:81:d9:
                    3b:c5:d1:cf:58:a9:3f:22:32:66:fa:1e:ea:2f:24:
                    59:d3:2d:79:b1:bf:94:78:c8:25:e3:9a:26:a0:a7:
                    16:40:34:e7:6b:6a:9f:a7:7f:88:3a:9a:6a:86:95:
                    0d:0b:a4:10:17:de:0d:60:b2:16:d2:28:e6:cf:b0:
                    79:ea:41:27:61:b4:87:5d:7a:52:b6:5d:e2:c1:cf:
                    30:c9:eb:83:48:7c:86:16:82:a2:65:0f:bf:63:db:
                    66:95:11:17:c8:a0:bf:8a:88:99:41:b2:af:df:09:
                    90:fc:f7:d0:46:28:c5:9e:e6:6e:3b:bb:b6:1a:02:
                    a0:1d:ac:e0:30:43:0e:ae:53:be:7d:69:95:4e:ec:
                    de:a6:71:52:9c:ab:51:19:61:a6:f8:54:1d:d6:84:
                    e6:58:5e:25:51:0f:1d:e3:c9:fc:f6:1e:40:a2:7d:
                    3a:f2:45:9d:78:9f:b4:75:ab:0e:9b:d4:10:1d:35:
                    2c:23:36:29:a8:97:a9:9f:9a:87:f2:b9:7e:34:2c:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4F:35:84:6A:18:B3:84:FE:55:9D:FA:6A:FD:BE:EC:3E:E7:1C:E4
            X509v3 Authority Key Identifier:
                keyid:69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/34352e3233312e3138342e302f32322d3234203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:52:33:51:0f:3d:1d:11:f8:cf:be:55:c6:d8:8a:54:24:db:
         d8:69:11:59:dd:ff:89:f8:4e:0b:73:c4:97:d5:24:df:8d:7d:
         d3:9d:53:9e:66:91:64:6e:86:54:3c:1b:17:40:b4:54:f1:24:
         ea:c3:63:75:df:b3:0f:38:a8:3a:6a:e0:cc:33:34:d4:3c:33:
         1c:1d:83:12:2b:bb:58:f5:0e:e4:13:7d:b6:16:c0:63:6f:2c:
         40:f9:7c:fb:45:ce:67:ca:92:65:0d:a4:f0:1f:24:8f:79:34:
         c1:95:d4:e9:db:10:e2:79:22:a4:55:7c:eb:cc:91:1b:9e:ca:
         6e:7c:fa:6d:32:5f:d2:d5:2f:8a:4b:1d:62:d8:b6:ee:3b:4f:
         a6:47:55:68:25:da:1a:08:83:67:9d:43:89:b3:cf:98:8c:e4:
         b2:8f:74:15:a4:4c:94:93:8e:71:a4:da:7a:16:29:4f:cf:2c:
         76:6d:c2:41:c2:a1:42:62:26:50:64:27:5a:a6:cd:ac:e8:bb:
         12:3c:0f:f0:aa:8e:6f:c1:b4:5b:60:c2:6e:59:e1:38:c5:43:
         0f:5b:e7:64:9f:6b:6a:65:0e:5a:94:60:f4:fe:99:b4:78:7e:
         e7:fb:79:e6:fc:5a:52:36:2d:ab:20:e1:d1:b3:0d:ba:8e:8b:
         cc:31:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org