Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa
File:                     34352e3137382e36392e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          vngITPiM08yW2NBiVnvCw7RVy7MTZjZIH9kRKaqLB8Y=
Subject key identifier:   C9:32:95:DB:96:20:F5:61:C5:46:7C:7F:7D:80:E2:C0:94:CE:4D:69
Certificate issuer:       /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial:       41D5355710CD335BD31CE50D2B7A3B0871013E43
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa
Signing time:             Tue 05 Mar 2024 18:04:40 +0000
ROA not before:           Tue 05 Mar 2024 17:59:40 +0000
ROA not after:            Tue 04 Mar 2025 18:04:40 +0000
asID:                     264758
IP address blocks:        45.178.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d5:35:57:10:cd:33:5b:d3:1c:e5:0d:2b:7a:3b:08:71:01:3e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Validity
            Not Before: Mar  5 17:59:40 2024 GMT
            Not After : Mar  4 18:04:40 2025 GMT
        Subject: CN=C93295DB9620F561C5467C7F7D80E2C094CE4D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:75:5d:b9:57:d2:14:a6:ef:22:64:09:a7:
                    52:47:9f:0e:68:29:8c:6f:71:53:6a:02:85:54:27:
                    58:ab:25:05:34:9f:96:c7:b8:f9:ba:33:db:64:4a:
                    ef:f9:4b:8a:51:9c:86:cd:a7:69:01:81:ad:5b:b2:
                    e2:a6:9d:7b:4f:ca:59:ba:43:3e:41:fe:60:e7:a0:
                    3d:ed:d4:91:cc:13:4a:46:40:51:1b:0c:dd:ea:f2:
                    cc:7c:30:2c:5c:93:00:29:bf:e3:21:f1:17:f0:fc:
                    a4:49:c5:4f:95:93:5e:dd:92:99:ed:12:e5:21:e4:
                    41:f9:eb:0c:38:67:45:ef:e1:3a:60:32:dc:42:8e:
                    d5:e4:15:19:ad:ad:5d:54:0e:40:a6:35:74:40:40:
                    10:19:83:3d:e6:0e:f4:fe:a2:11:3e:d7:f9:26:f4:
                    ae:2b:18:63:3a:0e:eb:eb:dc:ff:b4:40:de:d3:f3:
                    37:56:be:08:e8:ea:95:c7:35:1d:19:35:f9:07:68:
                    d7:01:c8:2d:4d:c3:be:3f:20:f9:79:da:ba:e0:e7:
                    6b:79:1e:34:06:f3:16:70:89:40:c6:85:37:d6:84:
                    3c:51:8b:da:b3:db:bf:ac:28:03:32:29:4e:fc:a2:
                    7c:9e:fa:90:31:37:0c:84:3c:21:6a:b2:9a:00:0a:
                    27:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:32:95:DB:96:20:F5:61:C5:46:7C:7F:7D:80:E2:C0:94:CE:4D:69
            X509v3 Authority Key Identifier:
                keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36392e302f32342d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:93:61:e1:b8:1d:5a:39:31:c0:dd:5f:4a:ba:66:fb:df:26:
         27:ec:79:af:ab:86:b2:12:e4:76:c5:7b:b0:cc:2e:c7:d8:d3:
         11:4a:64:20:c2:f7:00:6c:16:90:b7:90:2a:b3:ac:59:51:c9:
         b8:6c:bb:94:5c:6b:9c:f7:62:8e:c1:e6:c4:9f:f2:af:4c:73:
         b8:b9:ba:0b:43:8f:54:85:a7:31:c5:30:37:99:d7:a6:2a:0c:
         e0:86:7a:2f:01:3e:68:c0:17:33:3f:b0:34:e4:e3:ee:b7:2c:
         50:ad:83:24:0e:a3:69:28:e3:05:e9:ca:48:dd:bf:fc:76:07:
         f4:fe:e5:19:e4:d7:a7:04:f3:89:07:80:79:68:65:28:c0:68:
         5b:4c:5a:ea:a0:fc:ea:1c:61:5e:7e:a6:a3:ad:b6:0c:ad:04:
         f6:9f:ff:82:35:52:46:26:df:f6:19:82:49:ef:39:14:cb:f8:
         58:af:26:00:db:1f:70:93:90:aa:a4:3f:ed:08:2a:5c:43:f2:
         56:dc:0e:3b:86:b0:6b:42:5f:0a:a0:93:55:78:7d:be:b5:06:
         37:8f:f3:38:28:04:d4:7b:d1:28:ad:d3:19:ad:42:00:f9:18:
         8e:c6:6e:47:bf:3e:80:3e:90:c2:e2:78:6d:e4:83:0f:e5:fa:
         05:d9:ea:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:24:11 2024 by rpki-client on console-ams.rpki-client.org