Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa
File:                     34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa (raw, json)
Hash identifier:          Q09DWToLdRA/q8HfyQUvqBSknhY7JgtNpt1Qii2PPIY=
Subject key identifier:   79:BD:38:8F:90:46:17:5F:AF:80:5E:08:6C:51:B2:C5:C7:2C:08:E7
Certificate issuer:       /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial:       60E1A789C38BDA7B469FBB734537FE5EFD03EA7E
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa
Signing time:             Tue 05 Mar 2024 18:07:45 +0000
ROA not before:           Tue 05 Mar 2024 18:02:45 +0000
ROA not after:            Tue 04 Mar 2025 18:07:45 +0000
asID:                     266706
IP address blocks:        45.229.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 17:25:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e1:a7:89:c3:8b:da:7b:46:9f:bb:73:45:37:fe:5e:fd:03:ea:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
        Validity
            Not Before: Mar  5 18:02:45 2024 GMT
            Not After : Mar  4 18:07:45 2025 GMT
        Subject: CN=79BD388F9046175FAF805E086C51B2C5C72C08E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:2c:e7:62:24:e1:f2:d3:eb:74:4b:66:f9:
                    be:49:38:b1:70:62:0c:e9:f8:52:17:3f:e8:62:74:
                    07:e1:68:ff:89:86:2d:95:79:3b:6b:d9:3f:66:56:
                    48:d1:d3:57:a1:2c:4f:2e:2d:74:5e:d1:de:22:90:
                    e3:38:59:8f:8f:e7:91:09:b3:08:0f:ce:48:fe:cd:
                    95:4e:14:b5:9a:ef:65:3c:bf:2a:93:82:c3:24:53:
                    d6:68:a2:9e:48:ba:16:cb:fe:bd:5a:f7:69:be:dc:
                    68:89:65:47:03:e8:d2:28:db:bc:51:8a:af:a4:cb:
                    56:71:9f:78:03:f1:8b:68:a8:a1:3f:4c:59:0f:72:
                    cd:06:ad:4c:da:0f:d1:75:29:7f:96:f6:19:50:fa:
                    e9:81:a5:21:25:bd:4f:50:1a:d8:ad:7e:92:8e:20:
                    69:d5:72:cb:ae:ae:73:5e:81:c6:ef:72:8a:da:7d:
                    2d:45:17:eb:ac:a2:4e:69:c5:1d:1e:96:f7:b6:4b:
                    cd:cb:77:16:a8:96:73:43:4a:c5:84:ba:54:97:80:
                    68:bc:dd:3d:cd:75:7d:91:4d:e6:0d:ea:16:3c:e9:
                    f4:59:d8:45:8c:28:ce:8a:16:58:7e:85:b0:a3:13:
                    02:3e:64:5e:73:93:24:44:7d:f3:98:d2:3e:55:a4:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BD:38:8F:90:46:17:5F:AF:80:5E:08:6C:51:B2:C5:C7:2C:08:E7
            X509v3 Authority Key Identifier:
                keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138382e302f32342d3234203d3e20323636373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:b1:d9:11:69:73:fe:44:57:10:52:6d:0c:8d:3a:7d:31:2e:
         62:84:39:f5:6c:c4:0a:bc:4b:e3:22:23:27:f2:b9:9b:c4:cb:
         92:45:3e:1b:c7:93:5a:c7:84:6d:02:b5:f5:fc:2d:46:c2:ce:
         ed:90:e4:06:15:80:e1:d3:33:ad:ad:9a:7d:c9:77:0f:c4:90:
         95:e0:3d:d3:b9:58:d3:cb:43:e6:df:ed:a6:f3:85:24:1d:b2:
         27:be:7f:a1:16:2f:93:41:4a:0d:08:54:d3:30:33:ba:73:37:
         8e:99:41:03:9c:07:b5:58:29:bf:b7:d4:2a:8a:0b:ef:05:46:
         05:2b:d2:72:e7:04:65:80:aa:30:22:49:09:66:df:e2:7b:0e:
         39:dd:c0:df:cf:ac:b8:1e:54:e0:5b:73:53:fc:13:46:95:f1:
         be:43:d0:41:ba:f2:7d:74:7b:20:13:65:ca:7b:e8:46:00:79:
         87:b2:e0:63:b7:3e:d0:2f:e4:5f:40:81:db:e0:b9:f1:40:6d:
         25:0e:b0:c3:4c:91:2f:67:f3:b3:ec:5f:06:8d:16:0a:bb:24:
         ca:64:28:25:b6:f8:b0:09:3e:c8:fa:00:5b:00:eb:f3:2c:46:
         26:dd:03:3c:c4:62:8a:63:8b:a0:51:36:40:97:89:16:3d:59:
         48:2e:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 17:42:31 2024 by rpki-client on console-fra.rpki-client.org