Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38342e302f32322d3232203d3e20323636383733.roa
File:                     34352e3233392e38342e302f32322d3232203d3e20323636383733.roa (raw, json)
Hash identifier:          z8FqOzPqmiJrSRsLTt3lT1HVJp27R0DEl9QDbHRcUmk=
Subject key identifier:   A7:3D:B7:E3:5B:70:15:5F:82:58:01:16:55:53:12:AC:E5:FA:AC:D3
Certificate issuer:       /CN=792FCE054FD71DD6FC1999AD96B878769A102C50
Certificate serial:       7795806450C26A451BEC75FF6D273297F64C0C32
Authority key identifier: 79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38342e302f32322d3232203d3e20323636383733.roa
Signing time:             Tue 12 Nov 2024 12:30:02 +0000
ROA not before:           Tue 12 Nov 2024 12:25:02 +0000
ROA not after:            Tue 11 Nov 2025 12:30:02 +0000
asID:                     266873
IP address blocks:        45.239.84.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:95:80:64:50:c2:6a:45:1b:ec:75:ff:6d:27:32:97:f6:4c:0c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792FCE054FD71DD6FC1999AD96B878769A102C50
        Validity
            Not Before: Nov 12 12:25:02 2024 GMT
            Not After : Nov 11 12:30:02 2025 GMT
        Subject: CN=A73DB7E35B70155F82580116555312ACE5FAACD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:c5:6d:5b:2b:94:3f:a4:1d:72:be:08:f9:
                    5d:d5:2d:97:3a:3a:07:ea:d8:97:6e:db:69:19:7d:
                    0f:83:2e:a7:ef:df:e9:e4:b5:a6:40:6b:b9:d2:23:
                    5c:c4:bd:61:be:3e:47:43:36:0a:d9:dc:d3:f2:e6:
                    5b:6d:58:1a:83:87:3d:8f:55:42:e7:75:3b:ca:c8:
                    63:f4:0d:66:b6:a8:d1:2c:51:c9:0e:71:05:d0:b5:
                    17:c4:24:af:f2:e9:71:a9:1d:2f:71:c1:cc:ea:ad:
                    e3:b3:f3:51:38:31:a3:fd:6e:50:57:a6:f9:dd:48:
                    02:7c:3a:00:b7:69:9e:55:d9:96:60:27:d7:58:25:
                    93:da:38:c3:47:e0:41:c3:5d:81:26:f1:98:b8:fb:
                    80:27:f5:a9:ca:6c:8c:83:6e:0e:00:b2:fa:c0:b9:
                    3b:43:f8:82:30:0d:66:3f:6a:3a:69:f5:7c:96:5e:
                    91:93:bd:c7:13:97:98:71:76:fd:1b:4d:40:f2:4e:
                    00:74:0b:5e:5d:bd:77:5e:2d:fa:fd:da:6b:c6:c0:
                    22:ec:39:24:05:ce:b2:5f:0a:7c:de:f8:ff:66:18:
                    2a:8e:5c:29:63:05:7d:4e:85:54:ce:5c:d9:6c:dd:
                    a2:82:8e:53:89:50:3b:ab:a0:ba:2c:2e:06:0e:96:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:3D:B7:E3:5B:70:15:5F:82:58:01:16:55:53:12:AC:E5:FA:AC:D3
            X509v3 Authority Key Identifier:
                keyid:79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/34352e3233392e38342e302f32322d3232203d3e20323636383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:c0:31:a5:f9:23:ca:d7:b3:c2:3e:a5:76:2b:32:f2:d7:
         14:98:fd:34:8b:b9:e7:be:1f:41:95:c9:81:0d:3e:2b:f2:f6:
         00:0e:d0:55:0b:c6:6b:59:60:f5:1c:c2:53:3c:73:80:2a:c2:
         17:23:91:1c:72:50:e6:84:0d:b8:b9:4a:e3:89:59:12:7c:0d:
         70:ad:cb:9c:31:06:34:6e:37:91:8d:f2:d0:f4:42:b4:b1:ee:
         f4:d8:cf:e5:9e:86:68:6f:25:5d:69:8b:08:4d:b1:2f:f8:e3:
         f9:70:aa:c4:e2:ce:9e:f0:09:1a:f1:a2:2f:78:a7:60:51:e7:
         09:01:cf:e8:2b:7e:5d:8c:53:ce:69:dc:55:06:30:d1:e4:0f:
         50:ea:d8:22:c3:13:9e:d1:17:69:fc:b6:18:63:bc:a4:01:24:
         09:c3:0e:6f:07:3a:2b:f6:0c:1b:ab:ef:1a:34:ba:86:49:5d:
         99:69:f5:02:17:6f:ea:1e:ba:42:53:a2:41:0a:e3:a0:5e:8c:
         7f:a6:08:2a:5e:08:8c:af:eb:a1:4d:7f:ad:f7:2a:14:77:d7:
         c9:ec:d9:45:3d:7b:34:97:bd:59:82:ea:50:0f:45:f5:e1:61:
         48:43:55:69:68:08:0b:54:8a:66:e9:68:34:c2:1a:aa:99:cd:
         92:4c:f2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org