Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135302e302f32332d3233203d3e20323635373135.roa
File:                     34352e36352e3135302e302f32332d3233203d3e20323635373135.roa (raw, json)
Hash identifier:          UoUadQk/accOKWbwOpzf2mZHjYFo6u0NTGkKFi2tPCc=
Subject key identifier:   F3:67:ED:CC:93:D6:E6:D6:46:7C:61:7A:E3:60:3B:37:F0:45:05:76
Certificate issuer:       /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial:       62D9EF96FD8FE0AEC2598DE7AFB973576FE1B6DB
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135302e302f32332d3233203d3e20323635373135.roa
Signing time:             Tue 05 Mar 2024 18:02:44 +0000
ROA not before:           Tue 05 Mar 2024 17:57:44 +0000
ROA not after:            Tue 04 Mar 2025 18:02:44 +0000
asID:                     265715
IP address blocks:        45.65.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d9:ef:96:fd:8f:e0:ae:c2:59:8d:e7:af:b9:73:57:6f:e1:b6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
        Validity
            Not Before: Mar  5 17:57:44 2024 GMT
            Not After : Mar  4 18:02:44 2025 GMT
        Subject: CN=F367EDCC93D6E6D6467C617AE3603B37F0450576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:b8:01:0d:46:9c:7c:9d:9c:75:72:ae:21:
                    46:0d:33:f0:22:c4:b9:3c:61:d9:ab:c3:4f:65:73:
                    d4:90:90:f2:43:63:e1:31:4a:1f:ea:5d:12:ab:64:
                    26:ee:8e:c7:a4:57:a7:ff:3d:8e:99:f9:81:9d:c4:
                    fe:d0:27:51:de:32:9e:9c:9a:b1:7f:ad:e3:24:fb:
                    79:49:e4:c6:d6:9f:9f:51:83:0a:2b:4e:c1:b1:e0:
                    44:44:c9:9c:6b:8a:20:43:0e:76:5d:c0:f0:87:3c:
                    9b:e1:75:ac:bc:8f:42:01:8d:5e:01:ac:a3:d2:4e:
                    18:fe:ea:fa:8a:2f:91:92:86:66:bb:d1:cc:e0:1d:
                    3c:3a:46:6a:73:3a:fe:86:66:5e:5b:09:8c:99:dd:
                    c8:b9:23:dd:59:f6:db:b7:8a:94:df:64:62:79:f8:
                    40:2c:a2:b9:c0:a4:f3:94:86:31:4f:86:9d:e5:55:
                    2c:df:d4:3d:ba:01:0a:88:45:91:a9:54:33:3f:0f:
                    69:3a:7d:a8:8d:45:98:ec:39:30:29:9f:5d:1e:2d:
                    5b:fc:5d:51:f9:9f:41:1c:42:43:03:37:c9:f1:09:
                    84:53:c9:3d:b6:8a:63:78:35:25:b5:ee:da:8e:c5:
                    55:c5:86:02:86:53:e7:54:d9:7a:31:64:ed:87:c1:
                    1f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:67:ED:CC:93:D6:E6:D6:46:7C:61:7A:E3:60:3B:37:F0:45:05:76
            X509v3 Authority Key Identifier:
                keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135302e302f32332d3233203d3e20323635373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:5f:b7:a2:af:9d:10:eb:b3:c0:38:c7:13:2d:1c:fd:93:72:
         d8:53:6a:e1:97:db:07:1f:07:1a:5e:76:05:41:43:01:2b:c7:
         c4:2f:fc:34:7b:a2:91:74:09:b7:c4:76:9a:f3:ca:47:35:32:
         37:9f:ed:dc:ae:ba:42:a1:05:2a:39:f6:72:20:bf:b2:fe:45:
         ea:e8:ac:75:42:95:ec:12:bf:43:13:04:02:85:61:01:13:7f:
         7f:e6:d1:4e:c5:57:7c:47:a8:17:c7:6d:0e:c8:c5:fe:da:d9:
         89:19:92:5f:89:6a:53:d9:de:a6:6e:c4:58:9c:c9:c5:ed:79:
         d8:ce:70:45:e8:b8:91:28:06:2f:f1:49:e0:e5:98:f2:03:c4:
         a5:94:bc:a8:39:16:4f:20:a4:0e:3f:09:35:33:0e:5d:26:46:
         cc:41:69:e0:0a:5f:ac:14:7c:8d:47:08:09:7d:4b:be:d3:ae:
         4b:26:88:ad:70:ec:fd:2b:95:ab:fa:ab:ca:48:52:5f:c2:4f:
         6d:77:54:2e:1a:fa:42:7e:8f:85:5c:ea:0f:48:7f:fb:e9:28:
         ed:88:ca:b7:d1:89:0c:c8:8a:f4:65:cf:2c:33:6d:65:3f:35:
         84:3b:09:0a:d2:53:a1:70:be:29:63:64:d1:38:e3:cb:41:3f:
         23:ed:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 15:35:15 2024 by rpki-client on console-fra.rpki-client.org