Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa
File:                     34352e3138342e38342e302f32322d3234203d3e20323639373933.roa (raw, json)
Hash identifier:          yrsWlV0EYOuD/BXR+09MxiBbzwsI2YQMnZsn7RrY5FY=
Subject key identifier:   94:C7:27:24:82:A7:FA:CE:37:D7:4F:6E:1C:D5:2C:D0:F9:A7:27:E8
Certificate issuer:       /CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
Certificate serial:       04EEF3CCFE7C42697922D5654FEFB10848923132
Authority key identifier: 09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa
Signing time:             Tue 05 Mar 2024 17:47:50 +0000
ROA not before:           Tue 05 Mar 2024 17:42:50 +0000
ROA not after:            Tue 04 Mar 2025 17:47:50 +0000
asID:                     269793
IP address blocks:        45.184.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ee:f3:cc:fe:7c:42:69:79:22:d5:65:4f:ef:b1:08:48:92:31:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A3AC3476BC01A1345B72745540D0D3983BC32E
        Validity
            Not Before: Mar  5 17:42:50 2024 GMT
            Not After : Mar  4 17:47:50 2025 GMT
        Subject: CN=94C7272482A7FACE37D74F6E1CD52CD0F9A727E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:bc:81:9e:cc:c8:d4:37:3a:fb:19:07:0b:
                    e7:18:93:04:96:da:53:35:56:a9:81:d6:ac:1f:b2:
                    84:43:0c:6a:1d:c8:43:44:24:6b:53:21:f9:d8:9b:
                    ff:ef:8a:c5:c9:5d:46:af:a9:c5:5b:7c:0d:7b:6a:
                    39:9a:02:b2:3e:4d:a5:2b:62:6e:bf:1c:21:bc:d1:
                    0f:be:d7:27:0e:73:d8:b0:50:46:eb:0e:da:63:10:
                    cc:6d:f9:f8:17:15:e3:2d:51:ab:65:eb:a7:09:70:
                    cb:7f:2b:0c:6e:ea:9a:41:97:0d:9d:53:98:9f:5e:
                    f2:14:2a:49:02:22:5a:25:d4:40:25:2f:32:8e:92:
                    fb:c9:4d:d6:b3:ea:5d:e4:a7:4b:e1:4d:32:62:c7:
                    5c:ef:73:9d:2b:20:d4:a6:48:c7:18:7a:74:0e:cc:
                    8f:7a:b5:cc:1e:80:46:70:9e:6d:1e:d7:23:b7:33:
                    dc:61:59:6f:ab:c8:55:c5:87:e3:a1:2a:46:87:d9:
                    ee:2a:b4:fa:9d:7f:13:55:30:8b:58:ae:91:c7:e0:
                    24:df:ce:2d:d8:40:63:e2:69:b6:67:89:e7:d8:d5:
                    d9:77:cc:82:bd:14:59:9c:fe:3d:aa:f3:ff:44:53:
                    66:e6:35:6d:9b:88:bb:fa:e7:2c:87:95:cb:2b:9d:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:27:24:82:A7:FA:CE:37:D7:4F:6E:1C:D5:2C:D0:F9:A7:27:E8
            X509v3 Authority Key Identifier:
                keyid:09:A3:AC:34:76:BC:01:A1:34:5B:72:74:55:40:D0:D3:98:3B:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09A3AC3476BC01A1345B72745540D0D3983BC32E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3149D26B42C9CCA8587A04375787311229944D0472ABF7587C329DC8E6B25F86/0/34352e3138342e38342e302f32322d3234203d3e20323639373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:58:5e:ba:46:0d:ba:7e:a6:d0:06:1e:03:72:df:36:11:
         7f:85:43:da:ec:f9:2d:f5:43:9c:d4:ae:eb:c5:fc:07:c0:08:
         ca:f7:0a:58:8b:a6:71:da:a4:71:87:4b:d3:de:cd:87:1c:93:
         1e:6d:7a:69:52:19:d5:07:8c:ce:2f:1a:da:9b:43:9b:ff:8d:
         fe:bc:90:16:85:85:63:22:05:68:ba:9d:1e:87:f0:a2:14:8a:
         72:50:17:23:db:d7:84:46:c8:c3:e3:98:16:0d:3a:be:84:76:
         b0:2e:40:bb:8b:ea:3d:ed:df:73:cb:2d:01:a6:7e:5a:e6:ea:
         a6:76:88:8d:c4:9a:53:5b:82:43:b4:f8:de:82:08:fa:ee:cc:
         30:50:13:c3:65:31:6e:97:1b:91:02:66:63:ed:52:64:d1:38:
         2d:7c:1d:f4:9a:da:f0:33:31:ca:a5:01:f4:ba:3e:ef:d4:9f:
         5e:bf:da:48:89:12:52:79:83:87:11:01:63:a3:48:88:3f:1b:
         31:7c:c1:90:b7:1b:31:c5:66:81:ae:74:4e:69:f2:cb:fc:b3:
         52:b3:e3:ff:45:61:c3:8b:2c:ac:a3:30:10:6a:78:06:52:63:
         97:4c:ac:6f:bb:90:c0:d1:7e:ab:7f:df:12:59:80:61:d2:2e:
         fa:93:a9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 16:42:41 2024 by rpki-client on console-ams.rpki-client.org