Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/34352e3137312e38312e302f32342d3234203d3e20323731373736.roa
File:                     34352e3137312e38312e302f32342d3234203d3e20323731373736.roa (raw, json)
Hash identifier:          3kVZSYGrgdnQE6u+7lXFFgI44QuNspNxuTdMbwOhgmM=
Subject key identifier:   AC:23:AE:CE:90:19:23:30:8F:CD:4F:96:FE:0D:4C:DC:F5:21:DA:F6
Certificate issuer:       /CN=FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28
Certificate serial:       3C32F17E2691557131E390701502529BDF2894FA
Authority key identifier: FE:8F:8D:A2:CA:31:F6:36:CF:FA:E2:53:DD:8F:62:F8:4E:08:BE:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/34352e3137312e38312e302f32342d3234203d3e20323731373736.roa
Signing time:             Tue 05 Mar 2024 18:08:24 +0000
ROA not before:           Tue 05 Mar 2024 18:03:24 +0000
ROA not after:            Tue 04 Mar 2025 18:08:24 +0000
asID:                     271776
IP address blocks:        45.171.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.crl
                          rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:32:f1:7e:26:91:55:71:31:e3:90:70:15:02:52:9b:df:28:94:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28
        Validity
            Not Before: Mar  5 18:03:24 2024 GMT
            Not After : Mar  4 18:08:24 2025 GMT
        Subject: CN=AC23AECE901923308FCD4F96FE0D4CDCF521DAF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:c7:5f:83:ea:44:a1:8c:e9:7e:cd:56:64:
                    8e:d5:6c:9d:ac:44:43:34:54:c9:72:6b:e2:1c:83:
                    f0:61:ca:4f:5c:bc:dc:3e:2d:5c:c8:2b:ba:d0:bb:
                    f8:34:4e:07:7f:2f:0a:aa:fb:97:f9:ec:b1:da:58:
                    a7:a7:0d:21:3b:cc:96:c1:34:a4:5f:a7:c5:d2:08:
                    4d:69:e2:46:bd:21:26:0f:0c:61:bc:99:b3:7f:90:
                    56:2f:ff:7f:85:d9:f5:77:6b:6e:f3:ab:25:33:a7:
                    5d:fe:5b:64:4c:28:b0:30:02:3f:68:41:56:49:54:
                    da:a9:d4:08:42:78:48:89:1b:f2:a6:49:6f:89:9c:
                    e5:db:58:4d:e4:3f:1a:0f:68:ff:fa:22:49:3f:90:
                    fb:23:87:ef:3b:74:82:d5:df:04:67:f6:4e:28:ef:
                    f5:4e:23:3d:6c:de:dc:28:53:74:b9:9c:9f:e5:18:
                    e1:fa:9b:46:46:c1:fe:85:15:ef:d9:18:6c:25:55:
                    fd:64:7f:cc:42:39:28:f6:c2:f2:2a:50:f7:8a:be:
                    f4:bb:45:dc:a5:a1:7f:18:5d:2c:4b:de:42:e0:49:
                    e0:c0:8e:f2:23:12:6c:77:2c:a6:ee:b0:df:59:a6:
                    73:22:d0:e8:8e:c0:a6:9f:57:6a:bc:12:ec:48:3d:
                    86:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:23:AE:CE:90:19:23:30:8F:CD:4F:96:FE:0D:4C:DC:F5:21:DA:F6
            X509v3 Authority Key Identifier:
                keyid:FE:8F:8D:A2:CA:31:F6:36:CF:FA:E2:53:DD:8F:62:F8:4E:08:BE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FE8F8DA2CA31F636CFFAE253DD8F62F84E08BE28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/396892F76FAAB3BF5E2DBB2EE31CAFB9B17C4BD6420A6A87E1097F0FD8E13D53/0/34352e3137312e38312e302f32342d3234203d3e20323731373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:dc:d8:c9:d8:02:dc:68:f5:6b:df:aa:09:f2:e6:7c:47:
         f9:76:eb:9a:02:5b:a8:ab:4e:ec:b3:6c:24:0d:17:a7:a0:63:
         f6:f4:83:66:f8:79:c7:9e:c7:ca:bd:34:db:b6:2d:b8:1e:09:
         ba:ec:1c:73:a9:4d:d6:ec:e9:93:f3:33:90:1d:b8:a3:66:e5:
         8e:1f:f5:64:02:3f:da:45:13:75:0c:cd:23:14:92:28:08:c0:
         7b:de:98:21:1b:ee:04:42:13:92:df:3e:44:e8:30:86:da:15:
         c3:60:ac:89:4f:79:c8:b0:40:01:cb:5f:b4:a4:1d:47:fb:62:
         d0:48:d2:c1:dd:43:e5:fc:e0:12:9e:15:01:ff:cb:b5:d5:bd:
         9c:6b:34:09:e1:a3:9c:d7:52:f2:81:2c:93:88:ff:52:8f:0e:
         60:fc:6f:4f:b0:52:31:f4:55:0b:cc:cf:7f:c9:4e:e8:89:3e:
         30:1a:4e:39:7c:f8:ab:8f:83:28:3f:7f:0c:cd:00:e6:bd:72:
         7b:3c:d5:61:10:22:ed:f0:34:1d:d2:a3:6e:66:dc:5a:28:fb:
         f1:12:4f:68:74:95:09:a1:47:3d:30:36:5e:8d:9f:9a:fc:df:
         6f:b5:ea:8c:e7:2f:72:65:a5:13:36:5c:ba:9a:f3:83:9d:09:
         76:23:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org