Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32342d3234203d3e20323636373535.roa
File:                     34352e3233332e36342e302f32342d3234203d3e20323636373535.roa (raw, json)
Hash identifier:          E8Yo080fyoMyryfRMyBcUKtrRfs7XqQiv9hAdqPyoCs=
Subject key identifier:   3D:96:1B:6D:13:B6:D3:5A:82:5E:1D:E5:67:8B:E2:93:89:FF:BA:4F
Certificate issuer:       /CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Certificate serial:       2DA5EBE088DAA81F2EDADF35FCF5ED38DA3F047D
Authority key identifier: 17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32342d3234203d3e20323636373535.roa
Signing time:             Tue 05 Mar 2024 18:14:34 +0000
ROA not before:           Tue 05 Mar 2024 18:09:34 +0000
ROA not after:            Tue 04 Mar 2025 18:14:34 +0000
asID:                     266755
IP address blocks:        45.233.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a5:eb:e0:88:da:a8:1f:2e:da:df:35:fc:f5:ed:38:da:3f:04:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
        Validity
            Not Before: Mar  5 18:09:34 2024 GMT
            Not After : Mar  4 18:14:34 2025 GMT
        Subject: CN=3D961B6D13B6D35A825E1DE5678BE29389FFBA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:e1:1b:14:47:5c:97:84:87:d1:f8:77:6b:
                    bc:fc:2a:3e:d8:df:da:b5:d7:85:56:f7:28:32:1d:
                    22:7d:d8:91:b4:6f:1e:56:96:90:93:0e:7d:7d:be:
                    9a:a3:e9:de:c9:9b:89:8c:ec:4b:48:31:29:a8:ff:
                    2e:e4:9a:ae:f5:cd:82:53:38:97:91:ac:59:f1:1e:
                    7f:49:15:fb:cb:c4:7a:2c:8a:7c:69:57:43:32:24:
                    46:50:c4:cc:0f:35:d7:43:81:99:b2:de:e8:18:98:
                    c1:20:98:fe:68:91:37:13:96:bf:90:ab:05:3b:04:
                    af:37:37:db:ca:2b:38:e7:57:af:d2:a8:ec:2d:4b:
                    3d:a6:50:b7:05:5e:3d:b0:31:83:3e:14:1e:cf:88:
                    ea:3c:fb:26:fa:d7:ea:a1:88:46:19:22:24:e5:bf:
                    e7:50:31:ac:00:50:0f:a9:27:f9:4b:7e:04:81:fa:
                    fc:ac:94:5b:e2:ec:65:f3:01:94:e5:ab:53:52:05:
                    5e:af:51:86:14:11:29:dd:f0:55:4c:b4:bc:d6:18:
                    0b:a1:b3:ae:5c:bd:1f:88:2d:3d:cd:ea:a0:c9:af:
                    2b:92:0a:0c:fc:33:7b:8a:45:bd:42:e7:74:1e:aa:
                    fe:e7:f3:b4:97:cc:65:46:42:a1:de:15:d6:9a:69:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:96:1B:6D:13:B6:D3:5A:82:5E:1D:E5:67:8B:E2:93:89:FF:BA:4F
            X509v3 Authority Key Identifier:
                keyid:17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32342d3234203d3e20323636373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:00:2d:06:dd:be:fe:0e:e2:d9:93:6a:65:53:0b:35:86:
         df:81:39:9f:6a:ac:98:a8:74:da:ac:54:24:34:10:2e:ee:2a:
         0e:9c:df:78:94:75:0f:66:14:9b:0f:ea:ca:48:8e:31:5a:44:
         21:9c:27:4e:4a:a3:e5:45:08:7a:43:3e:a1:ce:76:bf:29:aa:
         9e:61:3a:bb:46:a5:05:4b:6f:d6:08:d0:7a:3e:b1:8b:85:f0:
         6e:b0:59:7b:e2:e2:97:7e:3e:0b:21:9c:83:6d:72:f4:e8:5d:
         a5:93:83:ef:02:92:5e:ba:c8:3d:af:3e:f1:e8:ef:d6:71:99:
         65:26:d4:54:ca:6e:e2:e5:ed:cc:95:8d:e2:9a:4a:b1:49:bc:
         64:2c:9c:a4:91:7a:2b:d1:75:f6:57:b2:49:da:f3:25:0b:5f:
         c1:02:f2:34:5e:b0:ae:c3:93:43:47:49:5b:0a:ff:ef:e5:44:
         ba:e4:7d:88:aa:52:6a:16:ad:45:6f:f6:a5:43:bc:ca:54:7b:
         9f:60:b4:3f:09:e4:61:e0:27:75:08:37:42:21:ab:d0:7c:25:
         04:a9:5f:38:15:e2:2b:1a:d8:f2:7b:25:35:61:ba:9d:62:79:
         18:6e:41:96:89:36:f9:c6:85:ad:69:78:f7:53:84:8d:04:a1:
         0e:1c:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org