Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e2033333536.roa
File:                     34352e3233322e3131362e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          GoC71+CMxyXInqatEvBjY4b8YwxoowxB5Z7v0sQga6I=
Subject key identifier:   91:B0:AF:90:4C:D4:71:FA:97:83:54:00:1D:A8:51:77:45:9C:48:FC
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       32668301357BB0A51158C263B9EBD864B5FC0663
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 18:02:43 +0000
ROA not before:           Tue 05 Mar 2024 17:57:43 +0000
ROA not after:            Tue 04 Mar 2025 18:02:43 +0000
asID:                     3356
IP address blocks:        45.232.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:66:83:01:35:7b:b0:a5:11:58:c2:63:b9:eb:d8:64:b5:fc:06:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:43 2024 GMT
            Not After : Mar  4 18:02:43 2025 GMT
        Subject: CN=91B0AF904CD471FA978354001DA85177459C48FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bf:65:2a:ac:ad:5c:d7:a3:2e:ae:e6:72:67:
                    ff:f8:a3:f7:e9:ec:2d:cb:69:6d:9c:79:f2:26:88:
                    f5:72:ca:e9:70:b5:5b:d3:3b:46:7c:a7:9d:fa:0a:
                    34:c2:e4:32:c0:ed:31:6a:ae:d2:f6:7c:eb:77:6b:
                    a9:7f:bb:cf:ad:94:04:0c:cf:c0:08:54:a5:f7:6d:
                    9e:28:b8:b8:1e:7f:9f:18:1b:6c:85:ae:99:ee:b5:
                    d5:34:55:31:7b:3a:be:d3:17:0f:e3:96:9b:1e:65:
                    f1:94:08:25:0a:b9:a8:03:d6:00:be:15:a1:6a:cb:
                    db:f8:4c:09:df:83:16:3c:9e:4c:f6:23:45:d5:a3:
                    e2:ab:b1:f4:1d:f9:77:16:9f:0f:51:35:50:39:12:
                    ff:bd:0c:d4:d4:f4:5e:5a:a7:f3:07:4b:cc:55:39:
                    7e:32:18:ac:67:0d:db:06:2e:bb:24:26:bc:3f:18:
                    c2:18:6f:87:b6:ad:78:cc:af:8d:04:dc:2c:3e:c8:
                    3d:9d:8c:7a:5b:d4:ac:91:b8:b3:38:32:72:c3:f0:
                    cb:98:1f:d5:0c:6a:14:dc:57:dd:91:7b:95:40:a7:
                    f5:e1:51:f3:17:7a:02:45:5c:34:30:5e:32:b9:ca:
                    53:7b:42:3c:7f:ef:7c:09:fe:21:06:27:5d:80:96:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B0:AF:90:4C:D4:71:FA:97:83:54:00:1D:A8:51:77:45:9C:48:FC
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:7f:fa:e3:3c:8c:b5:c0:86:4f:2f:95:88:9d:50:5d:3e:
         fe:ac:98:d6:6d:92:81:e8:7f:2e:f5:71:99:a0:e2:21:17:82:
         4a:ff:c5:32:bd:06:01:97:22:0a:55:66:99:51:b4:56:63:e1:
         e8:74:6e:38:bc:09:9f:4a:4d:8d:49:75:b1:38:e8:0d:06:ea:
         a2:f9:5c:34:e8:fd:3f:c4:a0:a0:8c:c5:48:b9:ad:4e:0e:04:
         cf:13:de:e2:c2:19:6d:2a:fa:28:4c:3b:19:87:bc:7f:f2:dd:
         c3:19:b7:02:8d:35:5c:c4:d7:28:ab:db:cb:bb:a2:f6:9b:aa:
         24:bc:ca:4d:d9:e8:a7:42:e7:19:b3:52:bc:98:b5:9f:3b:1a:
         6a:5d:63:f5:11:e1:b0:85:cf:ed:72:90:96:fa:68:da:db:9f:
         36:b7:ed:59:09:89:64:cc:a2:16:57:aa:58:7a:a7:f1:9b:4e:
         c1:1c:a6:06:7a:40:a5:a8:36:4b:e7:6a:6a:af:5c:f6:57:c8:
         35:d5:01:82:b9:d2:72:32:d9:f6:c3:21:cb:0a:1f:d2:78:ca:
         1a:47:e4:ed:b0:2b:84:68:2b:ab:41:76:dc:63:37:f7:d9:6d:
         0f:b9:07:0c:71:8c:b7:4f:6b:66:26:6e:b7:70:1a:7d:a8:29:
         e7:3b:9f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:22:14 2024 by rpki-client on console-ams.rpki-client.org