Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e3233392e36342e302f32322d3234203d3e20323636383533.roa
File:                     34352e3233392e36342e302f32322d3234203d3e20323636383533.roa (raw, json)
Hash identifier:          i2sG0h3ufPRtz4XeXIvMyZ7XlPKhK2GzlyqAxjoUMeE=
Subject key identifier:   9C:F7:DE:DD:4A:46:D9:F3:3D:EC:23:D3:01:1A:0D:92:BB:95:81:10
Certificate issuer:       /CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
Certificate serial:       3FF215A3FBEC995B21117871A8ACC4D30688B93E
Authority key identifier: AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e3233392e36342e302f32322d3234203d3e20323636383533.roa
Signing time:             Tue 05 Mar 2024 18:11:37 +0000
ROA not before:           Tue 05 Mar 2024 18:06:37 +0000
ROA not after:            Tue 04 Mar 2025 18:11:37 +0000
asID:                     266853
IP address blocks:        45.239.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 01:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f2:15:a3:fb:ec:99:5b:21:11:78:71:a8:ac:c4:d3:06:88:b9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B
        Validity
            Not Before: Mar  5 18:06:37 2024 GMT
            Not After : Mar  4 18:11:37 2025 GMT
        Subject: CN=9CF7DEDD4A46D9F33DEC23D3011A0D92BB958110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:59:55:d6:2b:1c:29:e8:ee:d2:b8:13:64:
                    25:23:04:ee:57:40:64:96:4d:ca:78:21:04:3b:8c:
                    89:1b:55:22:2c:6d:6f:e9:4a:56:d1:ae:33:77:b9:
                    a4:38:de:39:6e:66:74:45:a1:f1:fb:84:ab:8e:c3:
                    0d:4f:bc:1f:16:c2:3e:a2:17:9a:9a:3f:37:c9:da:
                    0c:e0:f0:f6:a3:41:e9:fa:93:31:73:44:ee:25:c3:
                    39:e2:11:40:ed:37:3e:dc:62:55:25:b9:a0:ea:8a:
                    78:da:d5:52:f2:33:ad:cc:39:84:c1:12:4e:ba:87:
                    d6:1a:49:8b:63:88:07:86:35:4b:54:ae:73:ff:a8:
                    45:e3:da:d7:4d:72:eb:0b:11:6d:21:a9:45:17:c1:
                    30:4b:2f:2b:54:99:a1:f2:d3:27:5f:d8:f5:74:f9:
                    aa:c4:13:2e:c0:6d:39:79:99:ac:14:8d:f3:95:75:
                    b3:89:7d:e9:ee:30:98:6e:d1:f9:33:40:fc:8b:f9:
                    2f:dd:56:f0:12:d8:2d:a8:18:28:69:23:45:fb:7e:
                    b2:5e:0c:c8:53:a7:ce:c6:21:f3:f8:f4:9f:84:7c:
                    0e:e5:66:18:7c:fa:cf:8f:64:ee:8a:29:d2:2f:e7:
                    61:4d:d6:b8:da:c7:a0:a3:7c:8a:a2:7c:d3:b0:2c:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F7:DE:DD:4A:46:D9:F3:3D:EC:23:D3:01:1A:0D:92:BB:95:81:10
            X509v3 Authority Key Identifier:
                keyid:AB:80:66:3E:BC:1B:B5:44:C5:5B:4C:E0:0C:58:BC:03:8F:2B:BB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB80663EBC1BB544C55B4CE00C58BC038F2BBB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/432DC8C67B653D26A04A97340B984E283B51B64882644561B47515706F499970/0/34352e3233392e36342e302f32322d3234203d3e20323636383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:23:43:9f:db:48:9a:b2:b8:ed:ee:69:9f:2c:51:3f:89:dc:
         86:e4:4d:98:27:81:1d:43:da:e6:c8:c5:1f:1c:05:26:5c:a1:
         ba:63:41:fe:bf:78:99:ac:de:28:eb:2b:87:88:95:a6:07:84:
         cb:1c:bd:f5:46:20:8f:ce:46:57:5a:6e:39:28:1e:da:ff:56:
         ef:43:3a:bd:a5:f0:1e:0c:5c:f4:3c:ec:7e:25:60:e4:60:54:
         76:9a:bf:48:ac:bf:5f:d9:da:23:9e:e2:24:75:e5:ed:13:6a:
         1a:51:f2:72:1c:0b:b2:4d:7d:4a:03:16:40:71:19:4c:54:d9:
         0c:f7:a4:a2:4b:83:14:4f:b4:9d:0f:13:f5:93:06:7d:2e:70:
         41:58:10:a8:95:0a:ff:9a:26:a3:fc:c5:bf:a3:f6:d2:37:fe:
         d5:96:5b:17:18:3a:5b:7b:ef:70:07:81:f3:8a:12:18:0f:fe:
         72:76:a7:79:50:db:ab:01:22:29:60:71:05:b5:5d:35:91:9b:
         89:a7:e9:85:28:92:a2:a3:36:9d:a9:2e:19:8f:0c:55:2b:80:
         6b:b9:65:93:ce:a2:7b:a4:c8:dc:af:39:1c:5c:ae:80:35:51:
         43:47:af:bf:f1:9b:2b:4e:da:57:78:95:7f:15:33:3e:3a:19:
         f4:c6:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:12 2024 by rpki-client on console-ams.rpki-client.org