Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34302e302f32342d3234203d3e20323632313931.roa
File:                     34352e3233352e34302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          jX6CpScKYjCe83zmfiCXdfJHzCSV1uJ0OKIcFoPSxJg=
Subject key identifier:   18:B6:48:DE:27:AA:89:A4:6E:5E:65:7D:B0:2C:B5:8E:F1:2A:A8:67
Certificate issuer:       /CN=1E862F205E27A89B1343A4D62B69B564737D0432
Certificate serial:       4EB1C5C824276383E7967FF669816439CACFFA0C
Authority key identifier: 1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 30 Jul 2024 14:25:00 +0000
ROA not before:           Tue 30 Jul 2024 14:20:00 +0000
ROA not after:            Tue 29 Jul 2025 14:25:00 +0000
asID:                     262191
IP address blocks:        45.235.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b1:c5:c8:24:27:63:83:e7:96:7f:f6:69:81:64:39:ca:cf:fa:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E862F205E27A89B1343A4D62B69B564737D0432
        Validity
            Not Before: Jul 30 14:20:00 2024 GMT
            Not After : Jul 29 14:25:00 2025 GMT
        Subject: CN=18B648DE27AA89A46E5E657DB02CB58EF12AA867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:b9:a2:56:f9:96:f5:96:e1:e8:85:31:32:
                    69:7e:a5:dc:48:09:86:fc:1e:1d:fa:99:8b:08:2e:
                    50:d9:8c:93:8a:b2:a7:9d:e1:69:55:03:bf:5a:fc:
                    f0:57:cb:f1:3c:64:03:d4:92:a5:02:63:fa:b9:c6:
                    b4:74:16:c4:cb:6e:79:bd:70:68:1d:a9:48:c2:a5:
                    7d:06:bf:0e:4c:cc:c1:96:0e:11:16:7a:ee:ab:4d:
                    51:1c:b1:3d:bd:46:06:7e:7a:c7:9e:06:9b:24:d8:
                    2b:40:f2:88:1a:51:da:77:45:f8:25:25:df:4b:27:
                    7e:ac:9f:66:99:28:34:1b:72:be:9c:5f:3a:09:77:
                    8d:68:4e:78:ee:c6:7e:52:e5:32:17:5a:99:c9:cd:
                    63:80:35:2d:c8:26:e1:a0:1a:a5:a3:62:8f:df:71:
                    d1:77:d6:25:93:b0:04:55:bb:f5:af:3d:f4:29:49:
                    f9:ae:51:b9:92:2f:8b:c2:1d:f1:ec:d2:64:93:68:
                    e5:e4:b9:bc:f0:6a:f0:65:bf:a9:08:a4:4e:4a:2c:
                    4c:42:f3:2c:7c:7b:f5:06:41:bf:df:eb:9a:87:8b:
                    bb:27:fd:8a:9f:5f:46:05:d0:48:a7:89:a0:f4:07:
                    47:65:7f:19:2b:b1:fc:e8:e2:80:96:01:2c:00:b5:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B6:48:DE:27:AA:89:A4:6E:5E:65:7D:B0:2C:B5:8E:F1:2A:A8:67
            X509v3 Authority Key Identifier:
                keyid:1E:86:2F:20:5E:27:A8:9B:13:43:A4:D6:2B:69:B5:64:73:7D:04:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/1E862F205E27A89B1343A4D62B69B564737D0432.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E862F205E27A89B1343A4D62B69B564737D0432.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8116D9EB7E63D2305B5E9BA5F8D9664BB14C517AE700C80A255C99D4DE736CD5/0/34352e3233352e34302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:91:b1:8d:df:62:b8:85:ce:6b:76:6b:84:79:98:cd:00:
         c5:4a:f7:cf:a9:32:12:4c:b9:00:65:00:75:44:19:b6:84:ef:
         66:96:3d:73:a5:40:63:c2:5b:46:74:b4:44:75:38:b3:01:9e:
         dc:b6:c7:06:b7:91:c8:53:2d:7e:2b:c0:a7:2f:b5:cc:75:bb:
         f8:ef:75:2d:92:19:88:a0:aa:9d:2c:86:dd:66:ca:26:c0:eb:
         c1:4c:df:ec:fa:50:f1:b9:ca:df:57:17:3b:c5:d6:bb:f8:a7:
         02:99:80:60:85:a6:84:13:ac:ce:55:c8:21:22:1a:6f:6e:e0:
         9e:1f:c3:12:4d:af:50:3c:f8:2e:70:f2:84:70:12:0b:30:3e:
         c2:db:c3:ed:b2:56:dc:b7:60:85:44:a3:2f:14:ec:38:6f:c0:
         9d:40:d8:dc:ae:22:f6:09:13:39:90:e1:ac:36:9f:42:0f:c0:
         3a:f6:d7:be:29:a0:b9:8d:ef:83:6a:f9:1c:5c:a5:2a:65:68:
         3f:58:a0:c7:34:94:21:d1:16:07:51:90:53:8c:5c:09:68:0e:
         fb:a4:7f:11:2e:c8:1d:93:2e:21:66:f9:ce:d1:b4:7b:f9:bb:
         36:06:9f:22:b5:87:a3:14:81:7d:ac:24:c2:0f:e2:d8:08:08:
         d4:7c:90:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org