Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203532343039.roa
File:                     34352e3139312e38342e302f32322d3234203d3e203532343039.roa (raw, json)
Hash identifier:          Gj1z21VVukws289pzHEmNS6VCxM0eUydqjStCDQxv/I=
Subject key identifier:   67:B3:89:A0:30:16:51:BB:06:82:27:18:D1:46:4E:84:39:FA:09:0F
Certificate issuer:       /CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
Certificate serial:       1F459C931EEF717C4085C37939666D206BD5426D
Authority key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203532343039.roa
Signing time:             Tue 05 Mar 2024 18:23:19 +0000
ROA not before:           Tue 05 Mar 2024 18:18:19 +0000
ROA not after:            Tue 04 Mar 2025 18:23:19 +0000
asID:                     52409
IP address blocks:        45.191.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:45:9c:93:1e:ef:71:7c:40:85:c3:79:39:66:6d:20:6b:d5:42:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C
        Validity
            Not Before: Mar  5 18:18:19 2024 GMT
            Not After : Mar  4 18:23:19 2025 GMT
        Subject: CN=67B389A0301651BB06822718D1464E8439FA090F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:5b:6d:4a:05:e8:0d:dd:74:aa:5c:0c:e3:
                    d1:ec:6e:22:fa:ee:c5:08:1c:ac:fb:c6:7a:41:5b:
                    c6:7b:6e:10:d5:2c:e0:8f:64:33:10:49:6f:aa:a3:
                    14:f4:6c:2d:10:2e:e5:7d:29:ec:b3:02:2d:a8:40:
                    f3:9a:86:16:80:03:50:86:4b:99:d8:49:50:8b:e0:
                    c9:67:84:d6:7a:4a:2b:6c:8e:60:9a:df:52:8d:38:
                    9f:a7:04:0e:3e:1b:c1:64:30:00:df:1c:ea:d9:df:
                    40:5c:9c:89:60:f8:fb:ab:55:7b:a0:d9:78:5d:81:
                    bb:6b:b1:4b:fa:08:4e:4e:5d:ab:12:2d:22:e8:5d:
                    8c:6c:e6:0a:d1:18:f8:57:7b:ed:33:f9:11:0e:d1:
                    57:8f:a6:4c:7f:1e:16:35:99:14:a9:7e:65:b6:11:
                    ed:e3:95:1a:36:24:26:75:86:f8:2a:7e:73:ba:8c:
                    64:52:b7:c0:23:3b:b0:34:b1:a8:af:87:0d:a6:d5:
                    93:9b:c9:e8:99:99:35:63:ae:44:b3:dd:42:1c:fc:
                    c0:dd:fa:f7:ef:ae:00:c1:0f:64:79:d3:79:3e:dc:
                    4e:03:c5:bd:4a:48:42:bf:b7:1e:5c:f6:11:30:2b:
                    53:3e:dc:39:f9:0a:a3:d0:c3:a7:67:b9:85:98:4e:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:89:A0:30:16:51:BB:06:82:27:18:D1:46:4E:84:39:FA:09:0F
            X509v3 Authority Key Identifier:
                keyid:91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/34352e3139312e38342e302f32322d3234203d3e203532343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:b2:e5:92:e7:22:33:87:c7:78:44:84:c9:fe:6d:5c:53:e1:
         36:ab:1e:31:f6:a6:97:44:38:6a:a7:60:77:2a:26:6b:44:9b:
         5a:f6:c2:21:69:c2:ff:4c:74:e2:c8:f4:cd:5b:10:af:21:55:
         65:2f:62:52:79:57:be:df:30:89:58:a9:b3:d3:72:97:a9:44:
         4b:69:0b:5f:25:c8:97:e2:8a:e9:1a:27:04:fe:72:61:4e:74:
         3d:23:dc:0c:a3:a2:0a:a1:96:3e:73:5f:74:8b:10:c0:4d:f9:
         05:6c:8a:9b:d6:ae:eb:8e:ef:ac:61:19:6e:0a:06:31:34:dd:
         4a:85:d8:4a:0f:a7:1b:0b:3d:ad:22:57:9f:a6:c4:ae:96:59:
         7c:c5:11:56:1e:64:f5:5e:85:5a:fe:1c:65:a7:43:a2:0a:6d:
         ef:18:b7:84:fa:cc:41:42:71:23:04:1b:ca:1e:80:bf:8d:e3:
         43:63:f3:19:04:42:2f:76:42:e6:52:5f:26:fb:b0:0e:f2:a1:
         22:8b:72:47:1e:ad:03:b3:e1:b6:6e:71:c9:71:30:02:fa:5c:
         87:8a:31:6b:65:b7:96:ca:00:9d:77:85:9d:5c:fd:c4:02:f7:
         d0:e1:d6:f7:60:78:b4:cc:c2:a3:d1:b0:e8:77:50:7f:3a:e7:
         77:91:f8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:16:07 2024 by rpki-client on console-ams.rpki-client.org