Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa
File:                     34352e3232392e34332e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          CAWwHQLZVgzT/NL6Y8UbOlMO/J5SHT2ptiglHq0EqBQ=
Subject key identifier:   14:73:E4:E6:47:E5:F0:FF:7D:34:55:60:95:74:D4:A2:1D:BF:10:8D
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       739A8A93EAB06E39A4F9F5FC38E8DFBC224F0DB0
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:08 +0000
ROA not before:           Tue 05 Mar 2024 17:51:08 +0000
ROA not after:            Tue 04 Mar 2025 17:56:08 +0000
asID:                     23243
IP address blocks:        45.229.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9a:8a:93:ea:b0:6e:39:a4:f9:f5:fc:38:e8:df:bc:22:4f:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:08 2024 GMT
            Not After : Mar  4 17:56:08 2025 GMT
        Subject: CN=1473E4E647E5F0FF7D3455609574D4A21DBF108D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:d1:dd:6b:2b:e3:df:df:e9:70:ad:07:1e:
                    33:99:50:46:f0:71:4c:9e:3d:41:0b:47:da:0a:c7:
                    e7:83:ad:8e:67:d4:4c:ff:bd:8d:7f:24:c0:05:4f:
                    29:64:b6:9d:94:37:b9:6c:bc:df:8d:aa:80:58:e0:
                    58:a0:e8:d7:7a:43:57:c9:9d:ca:27:8f:6b:b9:ad:
                    2e:95:9b:3b:aa:2f:e0:8c:b7:db:63:b0:aa:85:42:
                    9f:6a:34:df:fb:51:44:04:be:62:ac:f5:48:61:13:
                    52:28:be:18:0e:be:34:89:37:09:12:25:6a:72:22:
                    7d:a8:9c:c4:9b:ef:20:d5:1e:d2:3b:af:c7:aa:37:
                    74:70:46:be:99:42:19:4f:5f:f0:2c:fd:54:b8:2c:
                    eb:d4:a0:dc:a1:0f:93:d2:54:03:fe:ef:0c:41:a5:
                    2e:65:d2:88:94:b7:ff:e8:95:c7:09:c1:d7:57:a7:
                    bf:58:8c:53:fb:e6:6b:dd:57:a8:e4:5f:63:f0:8c:
                    45:58:63:8d:66:b9:80:d1:e4:f1:c4:90:f1:e5:d4:
                    32:20:39:bc:bc:8d:43:44:c1:e3:2d:df:bb:50:96:
                    81:12:59:2e:50:87:51:a8:29:92:c1:88:b8:fc:da:
                    bd:f1:9a:90:a2:81:b0:eb:12:d9:44:96:39:0d:02:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:73:E4:E6:47:E5:F0:FF:7D:34:55:60:95:74:D4:A2:1D:BF:10:8D
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34332e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:98:b8:bf:49:21:23:66:af:f7:f1:16:ea:76:d9:9a:7d:ac:
         3a:30:32:32:83:2a:97:6e:a5:9e:82:c7:91:c7:df:89:8e:2d:
         67:4b:0b:e5:9e:d8:64:1d:70:b0:93:52:b6:df:84:a8:26:5c:
         2e:d6:49:0b:12:dc:9f:51:df:a1:35:49:95:7b:99:93:40:c8:
         bf:33:72:2f:14:e3:5e:7d:37:7f:6d:10:e7:d2:bc:b0:1c:4a:
         db:7e:13:35:0c:15:c6:25:15:44:2d:a3:cb:2e:cf:94:5c:06:
         a5:64:10:3d:62:94:67:66:ac:df:bd:5d:d0:55:bc:4d:90:6b:
         50:a6:b5:10:9b:0a:d0:20:b6:d9:f8:33:90:88:b7:84:13:6f:
         0d:ad:99:f8:ab:e4:cc:92:77:0c:4a:63:57:d5:ac:f3:5e:a5:
         fb:db:dd:d2:c7:6d:cb:ad:86:35:7a:fb:67:65:22:18:a4:b6:
         22:a4:bd:2b:cc:72:0a:52:84:8e:6c:65:5a:a5:54:35:18:da:
         be:d4:85:bc:0e:9d:0f:34:0f:18:35:9a:50:67:26:ba:d9:ca:
         8b:5d:14:88:35:d0:c6:2e:07:97:f3:8a:5b:59:fe:63:de:4d:
         68:53:8a:aa:17:c3:4b:8a:16:7f:2c:72:07:1b:23:29:b5:d3:
         5d:54:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org