Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232352e302f32342d3234203d3e20323636373635.roa
File:                     34352e3233342e3232352e302f32342d3234203d3e20323636373635.roa (raw, json)
Hash identifier:          wKCa7wdb+Jih+aoTBLby3vLNEL8Yq1bSdPSvqvIgxqQ=
Subject key identifier:   F4:7E:0D:7A:0E:19:B4:32:E4:70:DA:77:4A:65:66:2F:79:9C:07:4D
Certificate issuer:       /CN=C097077D00F9B394156695ADC73EFDCF74721DB1
Certificate serial:       5BA61B76791900A6736905F21100D31EBEF2E16B
Authority key identifier: C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232352e302f32342d3234203d3e20323636373635.roa
Signing time:             Tue 05 Mar 2024 18:19:41 +0000
ROA not before:           Tue 05 Mar 2024 18:14:41 +0000
ROA not after:            Tue 04 Mar 2025 18:19:41 +0000
asID:                     266765
IP address blocks:        45.234.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a6:1b:76:79:19:00:a6:73:69:05:f2:11:00:d3:1e:be:f2:e1:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C097077D00F9B394156695ADC73EFDCF74721DB1
        Validity
            Not Before: Mar  5 18:14:41 2024 GMT
            Not After : Mar  4 18:19:41 2025 GMT
        Subject: CN=F47E0D7A0E19B432E470DA774A65662F799C074D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:41:6f:58:2a:30:87:fb:cc:5a:46:52:38:
                    34:43:bb:91:0c:4a:77:45:d7:02:4d:aa:c1:1a:97:
                    71:31:20:34:28:de:07:7b:fa:10:52:bf:3a:d2:90:
                    10:23:33:b6:e3:4f:48:12:af:e8:ce:fc:e6:f4:42:
                    af:93:76:4f:ca:f0:60:95:4f:8a:b9:be:31:f9:0d:
                    eb:69:d8:d5:a2:18:29:1a:47:1d:d8:31:1f:2e:6c:
                    3c:b1:b7:3b:b2:48:ab:d1:bd:a3:8d:8d:e0:a2:76:
                    55:7a:dd:36:20:c9:4a:f4:71:2d:20:a8:a3:b0:a7:
                    bf:6b:f5:36:fa:97:7c:0c:0d:fc:ba:0e:8c:06:db:
                    f2:c5:4e:ae:fe:c3:97:76:36:c5:99:df:2e:2c:7f:
                    eb:b4:11:de:91:47:25:9f:5c:91:d1:ad:d4:48:8a:
                    4a:7b:fa:73:2d:34:d1:b8:5f:8e:3e:31:35:48:5e:
                    6c:6e:16:aa:97:09:be:97:14:85:60:82:b0:54:72:
                    b5:e9:b7:85:72:f9:b3:7e:ac:2c:c6:66:20:52:c1:
                    33:b7:cc:45:28:9b:e6:04:81:55:30:02:18:43:51:
                    d3:52:c2:2f:41:02:d9:6c:71:c8:59:a6:19:20:48:
                    33:74:41:6b:4f:0a:7f:0b:dc:22:9b:c2:62:51:6d:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7E:0D:7A:0E:19:B4:32:E4:70:DA:77:4A:65:66:2F:79:9C:07:4D
            X509v3 Authority Key Identifier:
                keyid:C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232352e302f32342d3234203d3e20323636373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:74:84:b5:6f:4d:b7:0b:83:7a:35:a3:aa:2a:30:6c:8d:ac:
         75:80:93:9d:1b:0a:ca:3e:83:61:85:b0:7b:a2:aa:65:4f:41:
         de:5d:1c:fc:88:e0:38:6a:8c:20:0f:85:a1:75:7b:b7:09:0c:
         ee:b5:0b:37:dd:20:42:79:9c:36:21:99:4f:be:23:ae:df:39:
         59:41:ad:5c:e2:7a:7d:28:b6:5d:50:e2:0e:fd:22:dd:04:47:
         b5:41:80:d1:1a:b0:8f:cc:6e:2a:8d:9a:cd:fb:cf:8e:c9:b4:
         d7:c0:0b:a8:84:98:d4:36:65:36:14:9f:e6:05:d5:8b:47:f5:
         cf:e9:5c:31:b5:2c:64:81:84:4f:ae:e1:c1:f5:bd:b0:16:49:
         1e:30:10:c6:77:cd:56:b2:70:9c:e2:9c:96:7b:4c:94:e9:4b:
         a7:36:2b:41:6f:0f:c6:37:07:b2:70:3c:ac:5c:21:c0:b5:46:
         7d:03:79:3a:2a:7f:54:71:06:c5:3d:30:0d:56:1c:52:f1:d8:
         0e:b3:69:51:c6:ae:70:7d:d6:6b:c1:5c:44:2d:16:01:14:ff:
         f6:8d:6c:e7:88:b4:15:d6:79:09:bc:6f:19:73:79:de:a0:58:
         a0:6a:76:dd:12:6d:bb:6b:4f:0a:77:c4:8a:c2:60:6e:a6:bb:
         55:bf:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:04 2024 by rpki-client on console-fra.rpki-client.org