Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa
File:                     34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa (raw, json)
Hash identifier:          tprJhtyvW9rHt1qsAke5srFRbkdjykJNle4/0SSKa54=
Subject key identifier:   22:BF:D6:31:98:5F:5C:D5:83:77:10:7C:7C:1A:89:07:30:4B:42:33
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       35B9E9957397EA376A9859ADC965AFACADED43E2
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa
Signing time:             Tue 05 Mar 2024 17:54:24 +0000
ROA not before:           Tue 05 Mar 2024 17:49:24 +0000
ROA not after:            Tue 04 Mar 2025 17:54:24 +0000
asID:                     266832
IP address blocks:        45.238.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b9:e9:95:73:97:ea:37:6a:98:59:ad:c9:65:af:ac:ad:ed:43:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Mar  5 17:49:24 2024 GMT
            Not After : Mar  4 17:54:24 2025 GMT
        Subject: CN=22BFD631985F5CD58377107C7C1A8907304B4233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:dc:99:cb:68:e2:b8:91:5f:57:81:e4:aa:
                    6e:4c:9c:3f:94:de:8f:fb:a8:e1:4c:fe:fa:40:6d:
                    74:b2:0d:77:36:33:80:ad:fc:cd:1d:72:41:ff:02:
                    b5:e1:37:6d:20:ee:14:ed:ae:a4:ab:e6:48:c6:f1:
                    e0:a8:48:fc:2f:12:00:fe:05:74:3f:5a:59:11:61:
                    f5:2f:54:35:ac:75:bc:96:65:84:1a:6e:5b:58:51:
                    1d:b5:ef:1b:01:7b:95:88:c0:e1:b4:0e:c3:15:8d:
                    f5:06:34:fc:b9:51:cb:9a:47:1b:cf:c4:61:94:c8:
                    34:3b:6f:0a:a1:30:a2:e9:10:05:f0:60:e7:3c:75:
                    ee:50:1f:84:9f:03:fe:07:1a:5a:a9:ea:e4:22:7f:
                    81:d8:fb:6f:73:24:21:4a:17:58:ec:aa:b1:d1:d5:
                    6e:cf:f2:72:25:e0:41:47:d8:3c:c5:0a:36:d3:56:
                    3f:cf:cc:77:12:15:6a:a6:17:f0:85:4e:3c:58:37:
                    5e:33:ee:2f:2d:c7:5a:5b:ae:e6:98:5e:90:21:fe:
                    c8:38:b2:65:65:1d:35:4b:44:f2:d8:d6:89:f6:aa:
                    b0:b0:47:89:d0:44:f8:87:9e:f0:dd:64:3a:92:73:
                    f6:5a:f7:53:4f:16:01:1e:0f:fb:2d:7a:1d:b4:7b:
                    f6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BF:D6:31:98:5F:5C:D5:83:77:10:7C:7C:1A:89:07:30:4B:42:33
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/34352e3233382e3134372e302f32342d3234203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:c2:df:72:87:1e:30:b4:02:25:e2:f7:bd:be:62:58:cc:
         16:e2:7a:63:b9:e6:40:1e:12:f2:b4:ef:d4:98:1c:63:34:a8:
         75:1f:03:02:8b:d3:09:1a:37:03:3d:48:35:1f:62:87:13:43:
         2f:e6:57:dd:67:48:53:91:19:21:03:44:94:4f:f4:80:6a:ee:
         ae:1a:98:6a:8e:5a:d9:da:34:0a:1b:01:4e:54:9c:ac:1b:37:
         cd:5a:0e:0c:8e:e4:ac:6f:1d:f0:f0:d6:3c:ff:8c:55:b4:47:
         b5:4c:99:e4:42:56:31:29:ec:86:74:01:49:21:89:dd:3c:62:
         db:03:fe:80:15:91:87:68:8e:c3:5f:fe:33:7a:f0:ba:63:40:
         e3:65:a6:69:af:68:90:e6:83:97:b8:e0:01:20:01:ac:0c:51:
         55:8e:46:ce:d8:4c:1a:5f:cd:9a:1a:f5:56:9c:5a:81:20:4c:
         d3:8b:bd:c5:a1:1d:10:45:d8:2c:c1:85:36:9e:37:22:0e:e6:
         65:85:69:e3:59:13:76:47:fd:22:c7:c6:44:ae:e9:7c:bf:73:
         a7:8e:08:45:6c:6d:b1:26:fd:c9:24:63:ee:ec:dc:55:03:37:
         32:6f:b5:ea:36:52:da:03:8d:61:5e:10:6c:36:c4:60:96:e6:
         a9:78:1f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 00:29:32 2024 by rpki-client on console-ams.rpki-client.org