Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa
File:                     34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          dgbK57m2NaJOGxA+myu0iHi0pni1250ao5ht95JtplQ=
Subject key identifier:   29:F2:1B:70:43:99:D6:B6:2A:48:FF:07:8A:AF:EE:1D:AD:BB:92:05
Certificate issuer:       /CN=B3AA883DF802251B99A42D7F578AD8768A729025
Certificate serial:       0C6EAC4A5E9EE4197ADD40BC792926CC014E0A91
Authority key identifier: B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 17:46:36 +0000
ROA not before:           Tue 05 Mar 2024 17:41:36 +0000
ROA not after:            Tue 04 Mar 2025 17:46:36 +0000
asID:                     262191
IP address blocks:        45.171.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 22:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:6e:ac:4a:5e:9e:e4:19:7a:dd:40:bc:79:29:26:cc:01:4e:0a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AA883DF802251B99A42D7F578AD8768A729025
        Validity
            Not Before: Mar  5 17:41:36 2024 GMT
            Not After : Mar  4 17:46:36 2025 GMT
        Subject: CN=29F21B704399D6B62A48FF078AAFEE1DADBB9205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:33:60:fd:2b:5b:d3:f6:79:53:f4:63:20:
                    ff:12:80:9b:04:20:89:9a:36:0c:37:c9:f4:03:ca:
                    d4:78:10:6f:ed:fc:19:07:1e:1d:b5:57:f6:20:68:
                    17:1a:60:a1:a7:01:cd:eb:5e:3b:5a:5d:82:d1:11:
                    9d:cd:d5:0a:c6:7b:45:9a:7a:39:94:0a:91:18:9d:
                    c4:90:2b:c9:7f:ad:94:e3:3b:0f:e6:3f:66:65:e6:
                    51:6e:66:7f:a7:01:35:53:a7:cc:a0:a0:6c:57:75:
                    1e:19:de:4f:e2:a7:e3:9a:a8:e3:aa:2e:75:0b:44:
                    d4:d6:93:e5:32:d5:fa:27:ea:7c:e8:be:b6:d3:e9:
                    5d:8f:70:60:34:ee:2d:77:45:2d:87:ca:78:d7:6a:
                    25:82:64:ea:8b:df:d9:81:b3:81:31:bb:79:e2:55:
                    74:5d:fc:f9:22:b7:21:53:a1:76:7b:86:25:11:12:
                    50:d4:5b:d5:b6:1f:23:29:5b:39:be:3f:95:9a:9d:
                    b4:41:7a:75:ee:89:a5:d6:22:ac:ab:aa:ba:53:38:
                    be:84:b8:76:fe:22:07:d1:a6:f9:09:37:8e:39:54:
                    12:67:31:25:a6:74:2d:b2:19:b1:78:88:ae:ec:4b:
                    9d:4c:4c:2d:2c:ea:e7:12:9e:b5:78:ce:44:7b:15:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F2:1B:70:43:99:D6:B6:2A:48:FF:07:8A:AF:EE:1D:AD:BB:92:05
            X509v3 Authority Key Identifier:
                keyid:B3:AA:88:3D:F8:02:25:1B:99:A4:2D:7F:57:8A:D8:76:8A:72:90:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/B3AA883DF802251B99A42D7F578AD8768A729025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AA883DF802251B99A42D7F578AD8768A729025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AAD381D56BB1246F9A08210B02C7D0414BC98C8CD7F9A62687DF7BFCCA5F4AE/0/34352e3137312e3131382e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:78:ec:c8:7b:61:05:53:97:bf:ec:73:6f:13:1e:0f:d6:98:
         12:35:42:7c:40:b7:72:b6:3a:7e:74:b9:62:30:6e:d8:d2:a8:
         04:bf:24:99:37:9f:a5:df:27:32:2b:9a:a5:f9:a7:de:d2:04:
         9b:55:78:8f:c2:2f:ed:a8:45:33:4f:e5:b0:3d:65:61:a8:9c:
         e6:4c:e8:c2:bb:11:ed:7f:0f:15:b8:bb:30:a3:d2:3f:03:81:
         a5:f8:8b:15:f7:6c:27:63:78:a4:a0:e2:48:68:ec:18:16:c3:
         5f:1e:84:c2:37:99:93:50:51:8f:bb:e4:a3:12:10:cc:15:c6:
         36:38:b8:9c:e3:a0:0c:b0:ea:26:9e:65:70:d0:db:da:db:4a:
         95:e3:f7:c5:1a:62:83:57:44:10:da:b7:5f:56:31:fc:82:55:
         9c:02:5c:33:7f:24:cd:44:40:4a:c0:6d:53:90:9e:74:c0:54:
         cc:8e:ed:84:e8:4a:10:fd:97:e7:99:84:ba:48:4d:a1:72:d9:
         95:48:d9:a4:1f:d3:15:44:33:cd:1d:9e:cc:e4:c0:97:f1:36:
         95:9c:56:31:95:06:98:d7:cb:5c:65:1c:dd:c3:03:24:0b:32:
         b0:3a:7b:4a:f2:7d:3a:d8:78:56:81:55:5b:f9:41:ac:9e:e2:
         ab:f2:c4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:04 2024 by rpki-client on console-fra.rpki-client.org