Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33382e302f32332d3234203d3e20323632313931.roa
File:                     34352e3136392e33382e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          322a9BsqijXbsApQg0hUQDgJC/IXBTsF6uuEfht952w=
Subject key identifier:   73:7A:AE:F1:57:F2:26:08:71:C0:CC:E0:C2:DE:2E:D1:77:F9:9E:BE
Certificate issuer:       /CN=99A57CEBEE8726CF20BD670F637543047A024742
Certificate serial:       5AD11AFB2615B1B7B9CA439AD2E83EC1F711B5DB
Authority key identifier: 99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33382e302f32332d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 17:42:37 +0000
ROA not before:           Tue 05 Mar 2024 17:37:37 +0000
ROA not after:            Tue 04 Mar 2025 17:42:37 +0000
asID:                     262191
IP address blocks:        45.169.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl
                          rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d1:1a:fb:26:15:b1:b7:b9:ca:43:9a:d2:e8:3e:c1:f7:11:b5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A57CEBEE8726CF20BD670F637543047A024742
        Validity
            Not Before: Mar  5 17:37:37 2024 GMT
            Not After : Mar  4 17:42:37 2025 GMT
        Subject: CN=737AAEF157F2260871C0CCE0C2DE2ED177F99EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:dc:64:52:cc:72:c2:23:e9:7c:5c:12:64:
                    aa:63:11:84:3d:60:67:3e:77:36:57:33:3e:75:19:
                    26:30:5a:3b:78:9e:ab:4b:d6:78:42:ae:65:79:f1:
                    71:ba:ec:4d:3a:07:d2:05:cd:94:27:e7:53:d8:62:
                    72:4f:5a:fe:06:51:a9:53:ef:9a:30:f8:fd:83:29:
                    1b:91:d6:01:c0:57:01:53:6e:c2:b2:a5:7f:e0:9b:
                    b9:6f:72:31:bf:a3:0f:14:c5:40:eb:e4:4e:01:fa:
                    24:fd:83:8e:52:21:40:b7:81:0a:d1:9a:0c:a1:e0:
                    17:25:c1:1f:80:d0:6e:ee:6f:3e:50:92:55:03:5b:
                    0d:46:8d:2e:4a:25:4d:26:7d:d2:9e:cc:8d:96:21:
                    ee:2e:68:92:94:f0:09:6d:e0:38:ec:3d:ee:a5:12:
                    c7:55:b4:51:40:4a:a7:a3:61:66:4f:80:dd:79:d3:
                    58:17:41:7f:e2:be:08:b9:de:82:f0:91:4a:c0:1e:
                    1c:5b:c4:5e:6b:0a:3e:f9:ec:55:69:ef:d4:98:0b:
                    db:73:e7:b4:f8:10:8a:08:61:24:98:37:02:d9:f6:
                    3e:cc:9e:d5:cb:24:b1:e5:0b:66:68:f2:07:d8:55:
                    00:00:d4:79:f6:86:aa:62:11:d2:26:0f:a8:4a:00:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7A:AE:F1:57:F2:26:08:71:C0:CC:E0:C2:DE:2E:D1:77:F9:9E:BE
            X509v3 Authority Key Identifier:
                keyid:99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33382e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:93:59:6e:37:82:04:6b:4b:14:2e:4c:ad:ed:a5:36:5e:1c:
         8d:cd:6b:ab:8a:f7:db:ef:16:60:b8:86:82:a0:60:0b:9d:70:
         20:ca:02:fe:34:e5:8b:c9:8b:05:7e:52:6b:b4:5e:51:8d:5f:
         cf:39:8f:c4:f2:6b:ed:76:5a:ba:fd:87:31:a7:f2:16:ac:01:
         15:1a:a4:8d:7d:2a:7c:1d:77:81:d4:a1:4a:17:6d:44:91:fd:
         29:ed:be:68:a7:e6:24:82:74:ed:d6:b6:df:af:25:21:e2:db:
         8a:90:2a:25:ea:22:3d:e3:9a:be:6b:e6:38:8f:b4:e6:e1:ef:
         9d:e6:5a:11:bb:05:44:95:ce:36:e4:04:7b:11:7d:53:60:40:
         2f:24:e7:72:90:de:a6:38:2c:e3:3b:c6:8d:cc:9c:86:37:a5:
         bb:95:c8:da:6c:86:0e:36:d6:cb:ea:e5:bb:19:fc:8b:3f:32:
         61:00:6f:ed:d9:95:4e:96:75:61:84:62:db:5a:7f:00:02:ec:
         f0:6d:68:bf:6f:48:9e:0f:22:59:25:3f:bf:6e:e4:71:61:97:
         9b:cc:7a:6f:d0:d7:d5:6c:cd:8c:93:95:34:94:59:71:e8:7e:
         e5:a0:98:63:21:ba:8a:65:6f:20:b8:79:b9:c1:2b:7d:a9:68:
         da:3a:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org