Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e322e302f32342d3234203d3e20323635363632.roa
File:                     34352e342e322e302f32342d3234203d3e20323635363632.roa (raw, json)
Hash identifier:          T2Y7Gz4AcFpCA1u3aS/RIBk/E20T6iiZFMo4oVQ/2nQ=
Subject key identifier:   C8:F7:DE:C7:01:A3:85:F1:56:17:54:9E:4E:0B:8B:56:29:40:E8:A9
Certificate issuer:       /CN=80D3550CF73B167B6F22E20047A686FB2D761E88
Certificate serial:       64D80387B53F99E6061B3C8409F048700BF85464
Authority key identifier: 80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e322e302f32342d3234203d3e20323635363632.roa
Signing time:             Tue 05 Mar 2024 18:11:34 +0000
ROA not before:           Tue 05 Mar 2024 18:06:34 +0000
ROA not after:            Tue 04 Mar 2025 18:11:34 +0000
asID:                     265662
IP address blocks:        45.4.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d8:03:87:b5:3f:99:e6:06:1b:3c:84:09:f0:48:70:0b:f8:54:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D3550CF73B167B6F22E20047A686FB2D761E88
        Validity
            Not Before: Mar  5 18:06:34 2024 GMT
            Not After : Mar  4 18:11:34 2025 GMT
        Subject: CN=C8F7DEC701A385F15617549E4E0B8B562940E8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:c4:65:1e:c0:01:55:58:f9:7a:d1:fe:08:
                    fd:b9:89:1e:78:8d:49:f0:d3:99:b3:ea:41:63:0c:
                    88:ad:2a:5d:5d:59:6e:d0:ad:eb:63:2c:e5:3e:aa:
                    45:c4:9f:d6:11:42:bb:52:e0:54:de:54:04:d6:31:
                    c6:21:cd:5e:cc:3c:d7:e0:e1:c9:22:63:2f:ed:72:
                    bd:59:4e:f7:d6:1e:27:43:6c:42:f8:cf:7e:78:68:
                    89:c2:2d:a6:f7:00:b5:9c:1b:b2:2b:24:60:fb:b5:
                    c6:f7:48:39:65:84:0c:80:d2:1f:a7:c3:f3:82:0e:
                    cc:e2:d4:34:e3:16:65:47:8e:9c:fa:43:79:b6:28:
                    f9:2b:7b:2f:60:ef:51:cc:a8:17:92:17:e5:eb:eb:
                    cb:68:2e:d1:aa:b1:49:8e:f2:d7:c9:e9:14:17:f4:
                    11:70:82:ed:94:8e:42:90:a6:88:11:08:82:0f:ba:
                    d1:60:0e:d0:22:f7:61:4f:97:97:5f:f3:3c:a7:3e:
                    ee:87:38:7d:8a:19:23:3e:06:9e:92:1b:f3:77:63:
                    7b:48:72:f1:c8:b1:43:a2:31:51:23:2a:07:54:a7:
                    6c:c5:e0:44:da:01:23:c1:73:1e:72:1e:fa:22:33:
                    9f:53:bd:a7:5d:47:25:7f:0a:3e:3a:01:1a:3a:95:
                    a1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:DE:C7:01:A3:85:F1:56:17:54:9E:4E:0B:8B:56:29:40:E8:A9
            X509v3 Authority Key Identifier:
                keyid:80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e322e302f32342d3234203d3e20323635363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:7c:e7:b5:f9:7d:b3:41:1a:23:02:25:86:55:64:48:53:
         9e:5e:15:0b:f6:8c:bf:d8:de:c8:f6:a2:16:9a:80:c2:d9:2c:
         e1:c7:e8:b5:4a:e2:d2:12:38:d2:c5:08:21:7b:d8:80:f7:3f:
         7a:c4:aa:79:e4:15:62:da:c9:87:ee:e6:f0:36:75:7b:1b:36:
         32:70:97:d9:03:ec:05:5b:ff:16:53:27:1d:fb:e7:b4:91:24:
         ee:4e:e9:2a:04:3d:ef:8b:c7:fd:0f:7e:e1:ac:f7:23:4e:05:
         c8:c8:cb:fd:9d:ee:c7:fb:15:ed:b0:37:49:08:19:b7:df:54:
         4c:e0:36:b2:d5:12:68:02:b0:d8:5b:c7:fa:51:c4:45:db:01:
         9a:ae:80:d0:55:9d:1a:b4:43:73:c6:54:0b:ac:dc:41:29:d7:
         a6:2f:82:77:33:5e:65:c5:40:30:ac:ff:5e:74:8f:f3:7c:6b:
         99:1a:b7:39:7c:52:18:7a:35:3c:38:a5:fe:a5:db:99:af:d7:
         18:0b:17:50:ac:90:d3:21:3e:91:96:a1:e0:4c:03:32:10:e8:
         a8:22:bc:d4:28:4e:31:4a:e1:e7:c4:f4:44:54:78:90:60:d0:
         fd:bc:aa:09:85:a8:14:19:7e:d3:f2:1f:0f:3b:82:01:22:52:
         71:69:4f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org