Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa
File:                     34352e3138352e31362e302f32322d3232203d3e20323733303339.roa (raw, json)
Hash identifier:          OAPNaFOFV85ReC8kn3yiqX7TVZzik+RcI6GbhAZ/kRE=
Subject key identifier:   8B:8D:32:75:25:7D:D9:FD:10:C3:E9:88:02:92:22:EE:88:17:0A:C1
Certificate issuer:       /CN=F31886AD8E83200541E6D67B21D86C3BF4D2DA60
Certificate serial:       14FA375F2BA1FFA2A868F8E6B24F4BFAEF21E67D
Authority key identifier: F3:18:86:AD:8E:83:20:05:41:E6:D6:7B:21:D8:6C:3B:F4:D2:DA:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa
Signing time:             Tue 05 Mar 2024 17:58:30 +0000
ROA not before:           Tue 05 Mar 2024 17:53:30 +0000
ROA not after:            Tue 04 Mar 2025 17:58:30 +0000
asID:                     273039
IP address blocks:        45.185.16.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fa:37:5f:2b:a1:ff:a2:a8:68:f8:e6:b2:4f:4b:fa:ef:21:e6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F31886AD8E83200541E6D67B21D86C3BF4D2DA60
        Validity
            Not Before: Mar  5 17:53:30 2024 GMT
            Not After : Mar  4 17:58:30 2025 GMT
        Subject: CN=8B8D3275257DD9FD10C3E988029222EE88170AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fb:d2:17:bc:dd:d8:77:70:8f:14:db:df:fd:
                    d2:0f:b3:ec:ea:34:8f:64:b5:2e:2d:43:73:bb:51:
                    d3:f7:77:f7:0a:e8:9d:a5:7f:96:fe:f4:9e:d0:35:
                    44:a6:0c:3c:06:b6:dd:80:0e:49:d4:57:4f:fa:b5:
                    07:2b:0e:65:da:6d:97:70:ea:63:5b:90:d7:71:b8:
                    4d:42:0a:8f:a8:b3:bd:36:24:81:e1:c7:3f:68:01:
                    e3:78:7f:8b:11:9e:30:11:98:3a:82:32:e5:b7:71:
                    85:e5:d6:55:a4:85:7a:e9:84:95:38:3c:30:aa:10:
                    21:8a:0a:8f:5b:76:f0:03:54:11:8e:8e:49:27:ff:
                    ba:ae:3c:66:27:f3:09:67:91:cc:a7:a8:d8:08:ec:
                    70:d8:c4:24:60:54:41:ce:d3:ef:8d:29:3e:7f:d0:
                    c4:6a:46:ca:98:b8:59:e1:78:01:18:d5:78:f9:ff:
                    51:6a:de:05:f1:d8:43:7e:57:2a:c1:f2:93:77:71:
                    6a:c1:d9:b9:2c:ae:a2:36:b1:0f:3e:07:d5:26:3f:
                    eb:72:e4:bf:17:e8:ce:28:c5:39:f3:de:fb:f5:77:
                    31:01:16:8f:8e:6c:74:67:9b:f5:bc:63:41:0a:2a:
                    af:fe:32:ef:b6:d1:45:55:d6:2b:bb:b2:ca:ad:22:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:32:75:25:7D:D9:FD:10:C3:E9:88:02:92:22:EE:88:17:0A:C1
            X509v3 Authority Key Identifier:
                keyid:F3:18:86:AD:8E:83:20:05:41:E6:D6:7B:21:D8:6C:3B:F4:D2:DA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:a4:24:42:ce:7e:39:6e:0b:06:ca:16:77:34:40:16:76:ca:
         63:96:18:fd:28:72:97:d3:a8:d4:02:58:1c:b6:04:95:45:c3:
         a7:b9:79:6e:f9:7c:e0:9f:7b:71:41:bb:fc:64:5e:83:65:65:
         81:b6:ad:aa:a1:9f:b3:a0:5a:c4:55:da:98:12:02:61:7a:05:
         60:11:7d:47:87:d8:9d:2d:11:ef:37:ac:94:1f:a2:3e:aa:4d:
         57:8e:b7:49:63:ee:23:d3:a2:2a:43:99:c1:1d:fa:32:dd:d4:
         fd:ee:52:da:8a:11:73:c6:a8:93:84:49:0e:50:3a:cc:f0:b7:
         b0:28:c7:b7:01:c7:71:7a:db:7b:43:2d:05:09:f9:ab:10:1b:
         1e:b2:02:40:90:0b:9b:af:12:45:35:4a:dc:77:9b:c2:3f:53:
         03:c3:0b:7b:c3:66:dc:c6:d6:0a:95:03:f1:69:d6:0a:f4:89:
         9b:ee:3f:ad:77:22:05:e4:aa:38:e4:a4:8f:f8:7a:82:0f:69:
         6d:41:5f:89:17:00:42:60:59:96:25:ed:f1:90:cb:0b:31:82:
         03:a4:8c:b8:38:cd:7b:9d:66:63:fd:b7:88:be:03:97:83:df:
         3d:5b:21:78:df:05:a9:00:91:48:92:93:df:26:73:7b:eb:cb:
         39:06:1f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org