Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa
File:                     34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa (raw, json)
Hash identifier:          jlt54fO/9aBBOsHIWv/R8dmr5ixevZBr4rSbk9odBaI=
Subject key identifier:   85:50:7C:12:3F:BA:45:D8:08:14:AE:DA:CA:DB:06:4A:EA:9C:AF:A1
Certificate issuer:       /CN=F2D984797761DD64A44525AE66E4144A283AF5A1
Certificate serial:       5E6256CE9BEB5FEB305895D8EC0B662C7C4765E6
Authority key identifier: F2:D9:84:79:77:61:DD:64:A4:45:25:AE:66:E4:14:4A:28:3A:F5:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D984797761DD64A44525AE66E4144A283AF5A1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa
Signing time:             Tue 05 Mar 2024 17:45:24 +0000
ROA not before:           Tue 05 Mar 2024 17:40:24 +0000
ROA not after:            Tue 04 Mar 2025 17:45:24 +0000
asID:                     269747
IP address blocks:        45.182.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/F2D984797761DD64A44525AE66E4144A283AF5A1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/F2D984797761DD64A44525AE66E4144A283AF5A1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D984797761DD64A44525AE66E4144A283AF5A1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:62:56:ce:9b:eb:5f:eb:30:58:95:d8:ec:0b:66:2c:7c:47:65:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D984797761DD64A44525AE66E4144A283AF5A1
        Validity
            Not Before: Mar  5 17:40:24 2024 GMT
            Not After : Mar  4 17:45:24 2025 GMT
        Subject: CN=85507C123FBA45D80814AEDACADB064AEA9CAFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:59:47:33:5e:b7:00:60:36:cf:f2:0b:27:
                    51:16:a6:ee:fa:46:4b:3c:1f:4a:bc:52:88:3d:46:
                    ae:23:5e:a5:6c:9e:a8:2c:c9:9c:d3:8e:42:24:6d:
                    da:5a:c5:77:4d:f0:dd:5d:c7:d3:9b:e1:59:7e:06:
                    c7:47:4f:17:2f:17:7a:be:16:d0:4c:43:2d:1d:8c:
                    41:19:a6:96:b9:46:d6:92:be:8e:57:38:63:2d:52:
                    a7:2e:3b:72:88:3c:98:ca:10:dc:53:4b:0c:4e:57:
                    b8:b5:4d:c8:ce:e0:b6:15:b7:5b:ba:a3:33:9e:2a:
                    8e:85:fd:6a:b0:58:1c:7c:a5:b7:19:e9:1a:1d:66:
                    71:c1:87:9a:8c:fe:c8:81:3c:3f:b9:e9:72:73:b9:
                    e8:c7:d3:8e:69:96:64:4d:7a:21:40:81:c6:b2:31:
                    f9:b1:63:3c:ab:5c:4a:ee:78:b1:2d:59:36:36:7e:
                    2c:93:23:5e:6d:6b:47:a3:47:6f:fe:02:b7:44:b6:
                    33:45:93:01:4e:ee:54:c9:9f:07:74:37:ee:39:3f:
                    59:b6:b5:8c:f6:d5:61:f1:22:f8:6a:1f:4f:6e:50:
                    cc:d0:88:83:83:ac:fd:a2:91:e5:11:d0:99:e4:26:
                    92:61:59:df:62:a1:61:6c:09:5c:72:65:57:0a:73:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:50:7C:12:3F:BA:45:D8:08:14:AE:DA:CA:DB:06:4A:EA:9C:AF:A1
            X509v3 Authority Key Identifier:
                keyid:F2:D9:84:79:77:61:DD:64:A4:45:25:AE:66:E4:14:4A:28:3A:F5:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/F2D984797761DD64A44525AE66E4144A283AF5A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D984797761DD64A44525AE66E4144A283AF5A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/433FB3A872F6F4E5D686E852926250433617413E9CEA226D3CB1BCB52FE04B08/0/34352e3138322e3132342e302f32322d3234203d3e20323639373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:85:2a:af:9a:2c:4c:f3:59:42:86:67:a1:28:5f:76:f8:
         a8:de:1a:50:02:cb:73:a2:8b:e3:a4:18:4b:af:83:1d:d8:16:
         5a:bc:32:1f:6c:d8:ce:bf:d6:9b:fb:9e:c7:ca:a9:e1:c8:0c:
         fb:cb:1c:c0:06:19:8d:57:bf:f3:34:78:3c:5c:c0:d5:29:e5:
         46:61:93:6e:78:e2:b2:78:79:d7:39:38:6b:3f:fc:01:f9:14:
         bf:57:6a:4f:95:c4:ff:5d:20:1f:ed:77:18:78:8f:f1:4d:1c:
         86:ef:50:12:5d:4a:82:8d:d4:45:c2:cc:7b:cd:f4:05:c6:11:
         df:f1:1c:9b:c6:3f:62:20:35:41:a0:2c:76:d8:86:a6:8d:8e:
         00:57:ae:a4:eb:ba:45:73:fc:4f:ad:8d:90:be:e1:f9:c6:5d:
         f7:c1:48:7b:c6:60:8e:93:55:f9:95:44:0f:eb:50:2a:24:5d:
         0e:86:7c:ad:fc:32:f3:a3:74:7b:8e:80:0b:57:ca:fa:2c:a1:
         49:5d:30:62:84:cf:79:04:88:c7:97:7d:32:2d:3c:cf:5d:c8:
         f2:36:b5:fb:a0:cc:69:f5:1c:38:10:82:37:d8:15:58:ee:b3:
         8b:cc:20:6c:49:34:c0:6d:19:95:ea:03:15:cb:39:1c:dc:03:
         a5:7c:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:18 2024 by rpki-client on console-fra.rpki-client.org