Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa
File:                     34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa (raw, json)
Hash identifier:          bwLeDCVZrOBPFuxlIm/vPBjt9+zFgXxX4uuOmaXKB9Y=
Subject key identifier:   62:AA:7D:8B:9D:C9:F8:A6:E5:8F:BB:3E:1A:1D:65:77:4F:4E:6E:16
Certificate issuer:       /CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
Certificate serial:       57B24D9FD4B086FFCCBD2D9A80CF73E279BF15B0
Authority key identifier: B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa
Signing time:             Tue 05 Mar 2024 17:47:00 +0000
ROA not before:           Tue 05 Mar 2024 17:42:00 +0000
ROA not after:            Tue 04 Mar 2025 17:47:00 +0000
asID:                     269768
IP address blocks:        45.182.220.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b2:4d:9f:d4:b0:86:ff:cc:bd:2d:9a:80:cf:73:e2:79:bf:15:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
        Validity
            Not Before: Mar  5 17:42:00 2024 GMT
            Not After : Mar  4 17:47:00 2025 GMT
        Subject: CN=62AA7D8B9DC9F8A6E58FBB3E1A1D65774F4E6E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:1c:5d:4c:87:e3:85:58:dc:b3:c1:15:69:
                    ee:4c:2c:9d:14:db:37:c2:bd:cd:0a:e5:a6:bc:4e:
                    ac:c3:cd:e1:8a:7a:62:8d:6d:d9:1a:51:06:e1:cb:
                    31:f6:b4:a5:d8:6d:0a:84:bf:11:73:a9:e4:cd:36:
                    a5:52:66:a1:fb:dc:ef:b0:8f:80:d0:02:46:02:0a:
                    b7:0d:dd:4c:8f:2d:17:52:d0:30:7c:3f:10:18:ee:
                    21:c5:00:3c:8b:c3:47:be:18:72:35:d8:4c:e1:87:
                    1e:6d:d1:27:e8:6b:d6:81:ad:2e:3f:fa:f7:be:2a:
                    02:f0:ed:0c:25:a1:e3:4d:f3:d4:95:03:23:79:cb:
                    38:bd:04:6b:86:d0:8c:1c:19:2d:95:24:de:e7:47:
                    24:be:ff:53:19:58:6d:5e:64:50:1a:96:ad:91:7d:
                    e9:02:9a:47:12:7f:95:15:fc:96:3f:78:0a:48:1a:
                    62:92:3a:d4:49:28:aa:0b:ae:9c:e7:9b:46:b5:bd:
                    cd:bf:13:bd:c3:66:0a:1e:cc:8e:51:ee:cd:5a:00:
                    54:aa:d2:ec:d2:a3:cf:b5:dd:bb:bc:2c:8e:73:3b:
                    49:04:5a:38:4e:ca:4d:51:53:cd:09:7f:0b:af:3b:
                    0c:28:12:e7:d7:56:65:0e:ae:ad:46:d8:b1:e3:21:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AA:7D:8B:9D:C9:F8:A6:E5:8F:BB:3E:1A:1D:65:77:4F:4E:6E:16
            X509v3 Authority Key Identifier:
                keyid:B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:73:82:43:7b:c3:1c:75:cc:76:c4:6f:75:24:04:b3:ff:c5:
         58:73:5f:f6:90:cc:9c:69:64:a7:62:d2:74:b5:45:07:12:46:
         d9:ce:1f:87:35:49:73:45:3b:b8:3a:9b:f3:e6:b0:85:88:4c:
         d2:5a:b8:ac:8e:8b:bb:e4:20:eb:ae:83:46:4f:88:69:2a:a8:
         1b:30:bc:92:a9:25:97:55:99:e7:19:80:1f:25:73:14:3e:21:
         99:4b:5f:08:d9:ee:f5:28:ae:c1:d4:8c:3b:50:0a:09:55:4c:
         44:5c:00:99:e4:a9:89:fb:e2:be:66:9f:e4:af:f7:67:37:9f:
         b1:09:7b:4f:db:e1:d1:c2:a6:10:4d:30:15:27:39:9f:0d:40:
         36:29:1a:a9:2e:00:2c:26:25:f6:2e:ea:77:9f:5b:41:e6:34:
         e4:33:b9:07:f2:d2:cc:9e:16:38:c1:2f:5d:f9:9e:6b:d6:9f:
         c3:96:a5:78:76:d0:a3:4b:36:5d:02:dd:5b:9d:df:c7:c4:f5:
         a7:03:0e:db:fc:ca:ae:4e:64:2a:e5:f5:4d:c3:76:08:04:c7:
         59:a6:b8:ea:e7:97:10:d1:49:b0:4a:48:59:4a:13:e4:14:c3:
         03:22:de:eb:b9:24:79:37:2a:12:ca:4e:35:9d:d1:4c:04:c8:
         cd:2d:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org