Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa
File:                     34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa (raw, json)
Hash identifier:          rv9mk6fLUI5jTPxC+eQW0WSR06l3dQb2HVSiSPPar2A=
Subject key identifier:   C0:F1:9D:34:F4:C6:17:3D:3E:8E:F8:35:6E:10:B0:AB:D3:84:18:4A
Certificate issuer:       /CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
Certificate serial:       78E79A86C787069EC7D9E4DB0F16775399E7D31E
Authority key identifier: 44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa
Signing time:             Tue 05 Mar 2024 18:18:22 +0000
ROA not before:           Tue 05 Mar 2024 18:13:22 +0000
ROA not after:            Tue 04 Mar 2025 18:18:22 +0000
asID:                     266768
IP address blocks:        45.233.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e7:9a:86:c7:87:06:9e:c7:d9:e4:db:0f:16:77:53:99:e7:d3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F
        Validity
            Not Before: Mar  5 18:13:22 2024 GMT
            Not After : Mar  4 18:18:22 2025 GMT
        Subject: CN=C0F19D34F4C6173D3E8EF8356E10B0ABD384184A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0c:64:a0:6f:0b:5a:46:da:f1:62:fc:fb:6a:
                    4b:65:bd:d6:c0:47:14:4b:40:5f:6b:9b:cb:e3:5d:
                    78:e5:d6:43:43:51:9b:cb:a4:e8:4e:e6:48:8e:01:
                    24:36:fe:86:94:b6:77:e5:68:e1:2b:bb:8f:08:f5:
                    ac:f8:8e:74:34:ff:a0:e1:a0:28:ce:93:3e:ab:69:
                    5f:56:ab:7f:4c:be:78:b0:e6:17:fe:6c:25:11:c0:
                    93:c7:cc:25:22:6e:30:aa:14:57:a2:f2:0c:06:14:
                    ce:eb:5b:44:5a:f6:44:c0:e8:d0:eb:0f:97:d6:46:
                    e1:69:69:eb:c3:af:a7:a5:1f:86:10:9c:00:9b:23:
                    fe:52:ea:96:47:78:3c:2c:8d:47:55:56:e4:41:af:
                    1e:57:a3:a3:fb:e3:47:c2:d2:70:bf:7c:ff:99:9e:
                    de:81:4e:9d:2e:0e:8e:2c:43:99:7e:91:b1:49:83:
                    38:13:89:4a:8d:01:96:54:93:48:50:da:a3:26:18:
                    9d:ad:2f:8b:b1:d6:62:57:8e:fe:fb:7a:f9:da:b6:
                    b8:ca:59:32:3d:77:20:1b:96:01:54:01:8e:75:ce:
                    bf:46:27:1d:55:23:cd:23:7c:bd:ac:a6:b8:98:46:
                    4a:97:0b:5d:77:74:5f:65:a8:dc:c6:2e:e1:5c:e3:
                    ce:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:9D:34:F4:C6:17:3D:3E:8E:F8:35:6E:10:B0:AB:D3:84:18:4A
            X509v3 Authority Key Identifier:
                keyid:44:5E:B5:AB:EE:7D:EC:22:09:4F:11:C6:A6:DC:E5:68:ED:16:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/445EB5ABEE7DEC22094F11C6A6DCE568ED16D57F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/547446284AAB1A47FD798F7A0737A349B030E55E88E8CCCA6D8A9D7575479BB1/0/34352e3233332e3134332e302f32342d3234203d3e20323636373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:d6:0e:42:88:46:2a:d9:01:1d:ef:ca:e0:22:a6:09:56:e4:
         90:ae:5e:f7:49:78:fb:4c:9e:8a:c4:46:d4:b7:da:97:b8:0f:
         74:c1:27:f0:13:10:73:5f:4e:54:08:ce:24:46:78:c3:9d:a2:
         8c:41:38:6a:19:4d:e2:b6:2c:09:e3:20:24:53:d6:da:0e:d4:
         50:75:3c:c1:83:83:b2:f6:13:a5:a4:58:74:aa:6c:5c:0d:e2:
         c0:cc:61:98:5f:79:44:93:10:45:b9:98:c0:8f:4b:44:18:f8:
         3e:62:f8:90:0d:d3:7d:0c:df:6c:83:36:ff:5d:b4:bc:75:c4:
         9a:af:74:e8:71:49:35:1c:37:fd:45:6a:7a:7a:bf:0f:71:35:
         01:34:33:6e:fb:19:84:1a:b0:db:ea:85:a0:9b:ca:3a:13:c7:
         64:e0:77:04:69:54:8b:41:32:ba:b8:e3:94:dc:97:19:20:31:
         dd:81:d1:b5:8c:a8:3f:31:e0:d0:88:7e:2c:d4:df:ad:71:86:
         03:01:41:aa:36:1c:21:56:3e:1b:bd:17:24:d0:12:0b:5c:5e:
         76:e5:b7:91:17:3f:f3:86:d9:29:a2:54:f4:e0:51:69:9f:f8:
         14:df:17:ee:d6:9b:a9:01:67:f8:ba:b1:2e:9b:ce:61:9e:58:
         48:3a:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org