Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa
File:                     34352e3139312e34382e302f32322d3234203d3e20323632323133.roa (raw, json)
Hash identifier:          /k6eFtjkWqmTF/Qmqffm4SD419bGtRx4XzWn/TOsc6M=
Subject key identifier:   45:DB:68:89:6F:52:FB:4E:6E:70:67:CB:82:64:A1:3A:9E:9F:95:4B
Certificate issuer:       /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial:       3BAAC1538749370524A5BE6A576B8D1BA39019EA
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa
Signing time:             Tue 05 Mar 2024 18:06:27 +0000
ROA not before:           Tue 05 Mar 2024 18:01:27 +0000
ROA not after:            Tue 04 Mar 2025 18:06:27 +0000
asID:                     262213
IP address blocks:        45.191.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:aa:c1:53:87:49:37:05:24:a5:be:6a:57:6b:8d:1b:a3:90:19:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
        Validity
            Not Before: Mar  5 18:01:27 2024 GMT
            Not After : Mar  4 18:06:27 2025 GMT
        Subject: CN=45DB68896F52FB4E6E7067CB8264A13A9E9F954B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:21:04:33:5d:a5:44:5c:23:46:2f:96:4e:
                    8f:e3:12:72:72:01:9f:37:36:83:ef:70:29:78:de:
                    7e:55:74:6a:91:01:13:0d:c4:4a:d7:db:b0:41:fb:
                    8b:82:b3:cf:07:8c:80:80:5e:04:53:dd:b8:80:76:
                    c1:0c:e3:56:5e:d8:aa:52:f8:1b:ab:a3:64:a2:96:
                    f8:80:16:64:32:fa:90:bf:86:75:24:49:96:74:39:
                    2a:78:ae:2b:b7:13:da:14:25:26:0e:da:ad:d2:86:
                    cb:2a:76:16:27:d4:ea:bb:52:c7:9a:3d:fb:c7:52:
                    e7:bd:7c:ee:7e:b8:5a:f9:ac:ef:20:f0:34:0f:91:
                    8d:a4:d6:13:66:19:a3:56:17:6d:b5:a7:56:67:f2:
                    66:af:e1:cd:c8:31:bc:44:ed:36:e5:df:e4:8d:c7:
                    24:e4:ee:e2:36:1d:9d:06:f6:d3:d0:11:32:42:ee:
                    58:26:57:17:a0:70:a2:79:a4:7b:51:49:71:4d:e6:
                    61:61:17:9f:3d:46:a0:95:08:31:98:e9:a6:2f:bd:
                    0e:22:8b:a0:4d:76:04:0a:98:9b:0f:f6:ff:0d:3d:
                    65:0b:b7:61:1e:87:d0:19:9b:92:a1:de:0c:b2:a4:
                    34:6e:24:ce:e2:67:84:6d:db:c3:96:1e:cc:b1:c1:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:68:89:6F:52:FB:4E:6E:70:67:CB:82:64:A1:3A:9E:9F:95:4B
            X509v3 Authority Key Identifier:
                keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e34382e302f32322d3234203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:de:cb:11:d9:21:90:de:ef:b5:22:53:84:95:b9:5c:0b:b5:
         14:b7:af:a0:f9:0b:28:a2:52:79:29:4a:c2:a2:2d:b0:ad:65:
         94:e1:c0:53:13:33:de:cf:31:1e:a2:d0:4f:a8:a4:77:e0:06:
         34:98:32:94:51:0a:fe:12:c4:8e:43:fc:d7:64:c9:3b:d3:db:
         fa:3d:93:bb:d6:e3:db:3d:b1:29:05:72:6c:f7:2e:d9:43:8d:
         3b:c7:6e:85:be:b0:7b:b0:81:2c:ea:32:db:8f:ef:56:81:6f:
         01:e2:13:54:bf:fa:0c:76:82:c9:8e:3d:72:6b:c7:19:b3:cf:
         37:a7:cc:07:e4:e3:df:4f:74:ac:e8:04:1b:ab:37:b6:2b:09:
         42:d9:03:a6:0e:2c:e5:7c:90:bf:d4:eb:fe:07:d7:7c:ea:0c:
         48:ce:0d:8d:00:da:86:69:2d:2c:8d:b5:8b:fd:af:bd:3d:f2:
         d6:a6:36:88:f3:bc:16:9f:b2:3d:6f:5d:97:de:06:9c:7c:0f:
         0c:a6:e7:5f:9e:70:6b:94:bc:6f:1c:da:71:73:de:2c:bb:51:
         95:4f:3e:ca:74:da:e8:b6:b0:66:f1:35:40:b7:4d:72:23:32:
         6b:99:00:ca:0d:10:cb:e4:91:d6:9b:d1:ab:b0:29:64:97:73:
         1d:7d:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org