Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/34352e3137382e3234342e302f32322d3232203d3e20323637393135.roa
File:                     34352e3137382e3234342e302f32322d3232203d3e20323637393135.roa (raw, json)
Hash identifier:          i4cbStubdWPrphc5OHQjsi3CD6culr+Pa7Li76uuApc=
Subject key identifier:   DD:8E:09:D0:D5:9F:C7:58:56:84:DB:85:F8:27:D4:46:C9:70:B7:21
Certificate issuer:       /CN=DA085929B0421040BCF292D3D0AEC6BFDDB269AE
Certificate serial:       5B94656B94DA1BB750BF3FD6D7D374B32EA3C6B4
Authority key identifier: DA:08:59:29:B0:42:10:40:BC:F2:92:D3:D0:AE:C6:BF:DD:B2:69:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/34352e3137382e3234342e302f32322d3232203d3e20323637393135.roa
Signing time:             Tue 05 Mar 2024 17:50:27 +0000
ROA not before:           Tue 05 Mar 2024 17:45:27 +0000
ROA not after:            Tue 04 Mar 2025 17:50:27 +0000
asID:                     267915
IP address blocks:        45.178.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:94:65:6b:94:da:1b:b7:50:bf:3f:d6:d7:d3:74:b3:2e:a3:c6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA085929B0421040BCF292D3D0AEC6BFDDB269AE
        Validity
            Not Before: Mar  5 17:45:27 2024 GMT
            Not After : Mar  4 17:50:27 2025 GMT
        Subject: CN=DD8E09D0D59FC7585684DB85F827D446C970B721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:1a:1d:8f:69:52:8a:50:b1:4c:3d:19:ec:
                    24:e4:74:99:c7:88:57:30:70:62:35:5b:56:82:09:
                    7f:9c:d6:16:f8:e8:1a:e1:eb:07:df:28:d6:6b:50:
                    23:6d:ae:e7:c3:38:78:3b:96:77:68:96:de:05:04:
                    95:f8:a7:24:e6:3f:ad:dd:19:cb:62:72:71:d9:ab:
                    06:d0:a4:53:2f:e0:d4:70:13:0c:aa:5b:49:f3:2e:
                    f3:03:a2:56:30:d8:31:15:85:14:5f:33:eb:27:32:
                    e5:5b:0c:f9:f6:58:cf:13:5d:b1:56:0d:d1:40:d9:
                    f0:8c:20:07:80:fc:e3:ac:88:4a:4d:cc:ec:e4:9c:
                    8f:4e:17:fa:4f:4c:cd:04:68:0e:36:c5:12:01:76:
                    9c:7f:bb:b9:14:09:20:de:6c:61:6c:57:28:82:80:
                    14:4d:12:bc:2b:7c:ce:51:aa:e0:93:83:00:51:19:
                    d0:6a:b5:09:f5:7c:99:69:81:c9:ec:7c:3c:63:b4:
                    1e:3a:21:78:d7:71:a4:38:f7:39:f5:e8:c3:59:ed:
                    5d:3d:95:5d:aa:91:9b:57:d6:81:e0:b4:3e:be:bd:
                    ba:49:c3:94:35:de:a6:0a:41:92:5a:3d:39:d5:df:
                    01:de:bd:29:40:90:a0:49:d5:42:d1:4e:01:1a:a4:
                    73:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:09:D0:D5:9F:C7:58:56:84:DB:85:F8:27:D4:46:C9:70:B7:21
            X509v3 Authority Key Identifier:
                keyid:DA:08:59:29:B0:42:10:40:BC:F2:92:D3:D0:AE:C6:BF:DD:B2:69:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA085929B0421040BCF292D3D0AEC6BFDDB269AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3559DF36E18791AC0990BEA00E9DBA4598C15D94B519273E14632D7C1AB3E491/0/34352e3137382e3234342e302f32322d3232203d3e20323637393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:88:a5:ff:5f:99:2c:df:2c:ce:fa:f1:fa:b8:d7:36:85:30:
         83:e2:8a:cc:57:9c:5a:43:33:de:c1:fe:3b:80:53:0d:2a:e7:
         92:4c:13:ce:af:25:03:4c:f5:ec:1d:28:5f:a2:15:cc:42:4c:
         9b:b1:2e:de:54:cd:d3:82:ed:34:f7:b2:cc:76:76:62:a0:61:
         e5:17:1a:9d:e2:bc:1f:a9:6f:e2:d1:1f:f0:9a:0d:68:3e:1f:
         9b:be:b3:59:93:2a:30:43:5c:6a:a4:67:a9:1c:c0:4c:f2:0a:
         b1:d7:eb:e9:54:87:61:64:e0:ca:60:be:1f:91:24:c0:04:c3:
         a6:20:8e:3e:e7:f0:ae:98:c2:48:10:50:65:52:4e:ce:f8:c1:
         56:53:53:c1:43:e9:82:15:50:7d:5c:97:c2:63:d1:89:19:b4:
         ba:5c:30:95:05:3c:3e:d0:f9:fd:ca:c9:38:9d:68:51:77:8b:
         62:80:55:ab:14:b3:98:87:fd:b4:48:f2:9c:90:75:44:9d:ce:
         6a:02:60:2c:50:9c:96:ca:b9:2c:39:59:ef:70:17:be:6e:2f:
         9a:ea:c3:84:82:5d:9e:47:98:35:81:05:4f:26:4d:04:af:7e:
         a1:53:c3:38:65:6a:b8:e2:0e:bc:4e:96:df:f9:79:6d:98:db:
         68:59:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:14 2024 by rpki-client on console-ams.rpki-client.org