Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa
File:                     34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa (raw, json)
Hash identifier:          sh2/wmPTh8kHCfo3LG/6UCCn7/VZVnNQMZJwfZ5ztQs=
Subject key identifier:   C8:1E:56:B3:8A:8E:8E:A4:59:C2:6F:B9:B9:65:63:D1:AF:52:25:8A
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       0B3396BB3FBB0EC5F940BD3C7AF7A714D41DC1C5
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa
Signing time:             Tue 05 Mar 2024 18:00:05 +0000
ROA not before:           Tue 05 Mar 2024 17:55:05 +0000
ROA not after:            Tue 04 Mar 2025 18:00:05 +0000
asID:                     266819
IP address blocks:        45.237.220.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:33:96:bb:3f:bb:0e:c5:f9:40:bd:3c:7a:f7:a7:14:d4:1d:c1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Mar  5 17:55:05 2024 GMT
            Not After : Mar  4 18:00:05 2025 GMT
        Subject: CN=C81E56B38A8E8EA459C26FB9B96563D1AF52258A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f8:b9:75:2d:e8:50:c7:a6:a6:be:7b:55:c8:
                    52:b1:26:83:3d:7f:a6:a5:36:cd:5c:70:35:46:63:
                    1a:30:2c:c8:a6:1b:72:53:9c:52:a8:3f:0d:bd:fd:
                    e3:37:6d:37:a2:c7:5b:87:53:a5:d5:7c:39:1f:ab:
                    f4:06:e2:b9:c9:c1:aa:57:77:c4:4d:39:08:7e:e0:
                    b4:03:89:bb:4d:41:4f:0a:cb:76:42:97:5f:77:21:
                    aa:5b:2c:30:32:7e:9a:86:41:e9:e3:56:a2:0b:c8:
                    65:21:6e:65:96:29:00:0f:0f:cf:ed:1e:e9:03:d0:
                    23:5c:e0:14:77:03:27:3c:43:a6:c6:ec:1b:fc:55:
                    81:4a:7b:74:a2:7c:f4:09:7f:13:27:3f:8d:e7:0a:
                    e2:bb:ce:7b:84:43:8f:c6:f8:6b:54:b2:a2:31:08:
                    ef:bc:ac:7c:e0:09:50:08:56:b1:5a:fb:73:89:2e:
                    0a:01:c9:6c:11:33:1b:b0:bb:33:56:a0:bb:d0:58:
                    23:6a:2b:f3:43:e9:31:c6:c5:18:d3:6b:10:a4:45:
                    26:e6:da:01:70:78:fe:51:d1:20:54:30:fe:a7:3c:
                    96:e1:83:6c:df:4c:17:8d:39:0d:79:26:99:77:00:
                    24:f9:78:4f:84:ef:f0:53:39:90:ee:4c:17:b5:dc:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:56:B3:8A:8E:8E:A4:59:C2:6F:B9:B9:65:63:D1:AF:52:25:8A
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232302e302f32332d3233203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:c3:2c:d1:53:3d:d2:22:6f:96:15:d8:6b:e2:31:87:fb:b4:
         41:a5:3f:3a:ad:c1:6c:af:0a:d6:e8:6b:36:61:3f:b1:02:b3:
         3f:e0:0a:63:42:69:b0:33:9b:b1:eb:11:6b:53:8c:f1:93:11:
         2c:35:8b:4a:bc:c2:4b:53:bf:b2:fb:e8:72:60:2b:a9:e7:b9:
         ab:7e:65:ef:d7:c2:06:ec:9e:04:2e:d2:33:0f:f1:0c:05:1c:
         df:cf:fb:16:1b:a6:93:41:43:4e:0f:7c:0d:f1:3e:cf:00:b0:
         65:64:b9:2e:18:f9:34:42:29:d3:0a:20:52:d5:f6:fc:2c:f6:
         03:b2:2d:8b:9d:b3:de:a1:63:ee:90:4b:01:1b:bb:1b:01:a6:
         35:a3:6d:35:ac:1f:3b:9f:53:0c:9e:04:f7:ad:ef:da:42:12:
         b2:9c:c4:28:6e:1c:d6:d3:15:51:bf:ac:c2:b4:38:f1:4f:29:
         27:d1:fa:29:a1:c4:f2:92:ad:61:77:01:cd:20:66:9a:2d:a7:
         98:81:03:10:7d:37:ce:26:4a:a5:6f:c5:c0:fe:9a:f6:22:10:
         02:d1:f9:84:b8:15:d7:78:2b:ee:58:df:29:ee:7c:aa:d3:53:
         75:a1:a7:f4:cb:58:fd:58:e2:d2:0f:53:10:a7:c4:e5:cf:85:
         64:ad:fb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:34 2024 by rpki-client on console-fra.rpki-client.org