Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3232203d3e20323636383438.roa
File:                     34352e3233382e3139362e302f32322d3232203d3e20323636383438.roa (raw, json)
Hash identifier:          RH8hagXcaB1vRvtYr1v3zP4v9KqxWbEuVxkH8AYBnYU=
Subject key identifier:   1C:00:0D:D4:0D:88:32:C9:74:E9:91:A9:A7:00:C4:04:D6:00:52:10
Certificate issuer:       /CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
Certificate serial:       34746080FD1611534BB052D268959E47DC4702FB
Authority key identifier: CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3232203d3e20323636383438.roa
Signing time:             Tue 05 Mar 2024 17:52:16 +0000
ROA not before:           Tue 05 Mar 2024 17:47:16 +0000
ROA not after:            Tue 04 Mar 2025 17:52:16 +0000
asID:                     266848
IP address blocks:        45.238.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:74:60:80:fd:16:11:53:4b:b0:52:d2:68:95:9e:47:dc:47:02:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8
        Validity
            Not Before: Mar  5 17:47:16 2024 GMT
            Not After : Mar  4 17:52:16 2025 GMT
        Subject: CN=1C000DD40D8832C974E991A9A700C404D6005210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e0:f7:2f:5b:ad:a0:f5:bb:e7:52:be:58:69:
                    03:60:5c:5a:ee:06:a8:f6:9b:9b:51:40:4c:35:b7:
                    4c:9c:35:95:cf:8d:9e:39:ee:83:52:b0:4c:84:d2:
                    0d:32:f9:45:bf:74:08:38:cb:5a:a0:6c:60:9e:90:
                    14:a1:3d:36:12:a0:3b:ee:e7:e4:40:a6:af:f5:45:
                    f5:26:ac:2f:5c:d3:b6:3c:da:ea:57:80:00:51:f4:
                    74:d3:c3:9b:f9:7b:66:4b:c3:67:13:cc:8f:25:d5:
                    2a:9f:c2:8d:27:bd:57:cb:9b:7c:7b:ca:8d:17:92:
                    6a:0e:8f:17:45:e4:a4:c8:b5:c4:84:3f:33:c1:1a:
                    ec:3e:f7:cb:b6:73:39:be:b4:ee:fb:da:9a:ce:ef:
                    6c:c6:ab:0c:7a:ae:9a:76:5e:b0:df:0b:6a:a1:02:
                    df:5d:18:da:6f:09:32:2c:55:0d:a2:4d:5a:f4:29:
                    0d:d8:8a:73:7d:12:03:6a:42:01:7a:c6:12:d9:ee:
                    64:89:60:a5:2e:e5:10:ab:72:7a:62:6a:01:22:b4:
                    84:ce:29:2c:2b:13:3e:db:36:20:e6:ee:32:d6:70:
                    c6:83:cd:b4:99:a1:0c:fd:0a:e9:da:df:4e:33:e4:
                    b9:7d:f4:63:70:45:00:64:11:b3:3a:73:0b:ac:96:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:00:0D:D4:0D:88:32:C9:74:E9:91:A9:A7:00:C4:04:D6:00:52:10
            X509v3 Authority Key Identifier:
                keyid:CD:E5:36:D5:F0:A9:19:DD:F1:AD:2A:0D:6D:F3:76:08:F7:89:A4:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDE536D5F0A919DDF1AD2A0D6DF37608F789A4E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/233AD49F73560C2B37D27E413F61E80F38E6EC17B906D03C20F0DFB891EE99BC/0/34352e3233382e3139362e302f32322d3232203d3e20323636383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:84:a2:c3:67:a6:6c:7f:7c:60:44:9b:e9:98:fd:98:53:32:
         4e:f0:d1:eb:b6:ac:e6:db:90:ca:39:c7:f3:fb:c2:e8:d3:fb:
         23:ff:5a:5e:42:7c:2f:04:88:81:fc:ae:fb:9a:06:93:5a:66:
         92:b1:69:01:d4:17:1b:54:62:ec:d4:2e:a3:54:39:29:92:85:
         e1:6f:cc:82:1d:af:b2:5f:1d:70:ce:52:3e:b8:21:34:5a:57:
         19:f2:cb:4c:db:67:64:c4:48:d0:66:77:ea:7c:91:28:f6:23:
         48:1e:08:ed:d2:95:a8:88:5f:ae:bf:d2:98:e4:95:35:4d:1b:
         ce:0c:a2:99:e9:ad:80:0a:e4:09:ed:e5:5a:81:db:90:31:c9:
         33:6f:d6:fa:d0:45:61:f5:79:3a:bc:78:98:60:70:34:60:52:
         49:f7:05:1f:90:92:0d:21:54:8c:43:6c:7c:10:0b:07:83:a1:
         7e:4c:3b:5f:40:07:9e:35:73:a1:f0:bf:ef:0a:01:a7:4d:fb:
         2f:b3:1d:04:64:5d:f5:9f:96:26:16:1b:fb:87:ff:39:fb:8e:
         1b:51:ef:38:b9:08:02:23:63:6f:30:4e:4c:62:ff:5b:66:9c:
         ac:69:69:d4:08:4e:f4:fb:10:39:03:d1:2c:af:eb:35:16:87:
         98:1f:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 11:24:37 2024 by rpki-client on console-fra.rpki-client.org