Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa
File:                     34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa (raw, json)
Hash identifier:          7pXnUbNFh6KgqX+BT9Qv6Z4knH1FyJgweJKxWbZqkLI=
Subject key identifier:   D8:EF:75:2E:35:F2:33:98:C2:3B:DF:E7:EC:8D:0E:9E:1A:A8:17:1E
Certificate issuer:       /CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
Certificate serial:       295CB128F73EA8EF8C4DACD3A095AEA1B240BC3D
Authority key identifier: E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa
Signing time:             Tue 05 Mar 2024 17:57:38 +0000
ROA not before:           Tue 05 Mar 2024 17:52:38 +0000
ROA not after:            Tue 04 Mar 2025 17:57:38 +0000
asID:                     271843
IP address blocks:        45.162.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5c:b1:28:f7:3e:a8:ef:8c:4d:ac:d3:a0:95:ae:a1:b2:40:bc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
        Validity
            Not Before: Mar  5 17:52:38 2024 GMT
            Not After : Mar  4 17:57:38 2025 GMT
        Subject: CN=D8EF752E35F23398C23BDFE7EC8D0E9E1AA8171E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8f:2a:a3:1f:39:e0:9c:2d:42:f8:ca:20:1f:
                    15:79:79:4a:6b:12:da:07:93:ae:5d:06:ca:18:7d:
                    9b:eb:81:96:e5:9d:19:ba:95:eb:f5:9b:cf:b6:e1:
                    20:e3:50:26:6b:26:39:71:fa:d4:63:1c:10:c9:46:
                    26:9e:d7:bf:2d:fd:c4:24:f9:52:65:48:60:1e:06:
                    1a:65:2d:14:e0:c0:a6:2b:a4:8c:4c:b2:25:6b:9a:
                    9e:6c:3c:cd:7f:7f:df:ce:b8:c8:80:49:ac:50:f1:
                    fd:a9:58:a1:7a:ff:c4:a8:7b:f5:6a:0d:31:12:71:
                    45:64:fa:08:f6:45:b5:fb:66:ce:fb:09:79:bb:2e:
                    f6:bd:98:25:a8:cf:82:25:3b:28:08:ba:f0:8c:68:
                    e9:c7:f5:dd:60:1b:b3:3e:6a:ae:b7:de:43:b3:ec:
                    b9:cd:16:ba:28:db:75:2f:ca:e0:a2:fe:54:17:2a:
                    a2:50:ca:4d:9a:34:f8:8e:68:c9:05:48:be:2c:be:
                    74:1e:b5:20:e4:8e:25:9b:27:70:75:c2:e3:b9:72:
                    40:c5:fc:99:24:02:09:3c:91:96:0c:4c:3d:ea:11:
                    ff:41:85:9c:0d:96:89:f1:0a:c5:48:bd:ae:24:7c:
                    1e:be:ef:94:a4:fb:be:b5:79:14:e4:cf:27:1e:2f:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:EF:75:2E:35:F2:33:98:C2:3B:DF:E7:EC:8D:0E:9E:1A:A8:17:1E
            X509v3 Authority Key Identifier:
                keyid:E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:07:2f:8b:e0:11:48:84:fa:4a:33:61:43:ff:5b:6d:d8:c6:
         69:48:f6:e0:3d:a1:15:29:2d:bf:6b:25:ac:c6:77:25:e2:33:
         ce:6e:ef:85:00:e3:c9:0d:f0:57:c9:22:ec:f5:96:01:c2:e0:
         38:86:57:1a:56:5f:60:2e:bb:8e:1d:b7:da:c9:fc:54:64:84:
         43:34:b5:0a:b0:00:93:e6:92:f4:2c:0b:4d:76:dc:27:a0:83:
         0e:85:0b:00:71:83:c1:2a:8d:e2:3a:e9:91:16:34:e5:ea:cd:
         9e:d2:0e:80:67:74:54:a6:90:52:3b:cd:80:78:47:42:c7:93:
         d4:90:b3:86:f7:b7:48:65:64:f6:4f:67:78:8e:12:86:c3:b2:
         2e:00:9f:77:61:84:f6:d4:f0:22:7d:a4:7d:dc:18:45:c8:ed:
         e7:e0:5b:38:0a:09:e3:bb:f2:32:60:6e:f9:a4:97:08:f7:06:
         68:b0:0b:a9:39:4e:54:59:fe:54:2c:c4:57:76:6b:57:33:57:
         30:01:e3:d7:aa:9a:77:f9:f2:3e:ce:70:b4:5c:5b:b2:e4:f1:
         03:c7:83:bb:fa:a0:cb:a8:f0:96:17:5f:a0:0d:56:79:f5:28:
         f6:9a:88:aa:23:a4:d1:75:dd:ba:2d:f7:83:65:10:b7:44:7e:
         d7:af:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:31 2024 by rpki-client on console-fra.rpki-client.org