Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35322e302f32342d3234203d3e20323639383338.roa
File:                     34352e3232382e35322e302f32342d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          Ax7yRDc55w8pxIaAYjxv3YbEOGFAESOrcWzOg7WutmQ=
Subject key identifier:   E9:83:AA:97:FE:8D:3C:66:54:7A:DD:70:2D:23:C8:CE:15:73:A0:85
Certificate issuer:       /CN=A8F348342236CEF0874883E7673551354708EDDE
Certificate serial:       730399DC936D226EBE99DF577026139F6E8A103D
Authority key identifier: A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35322e302f32342d3234203d3e20323639383338.roa
Signing time:             Tue 05 Mar 2024 18:18:05 +0000
ROA not before:           Tue 05 Mar 2024 18:13:05 +0000
ROA not after:            Tue 04 Mar 2025 18:18:05 +0000
asID:                     269838
IP address blocks:        45.228.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:99:dc:93:6d:22:6e:be:99:df:57:70:26:13:9f:6e:8a:10:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F348342236CEF0874883E7673551354708EDDE
        Validity
            Not Before: Mar  5 18:13:05 2024 GMT
            Not After : Mar  4 18:18:05 2025 GMT
        Subject: CN=E983AA97FE8D3C66547ADD702D23C8CE1573A085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:e4:95:3e:fa:79:cc:40:16:79:74:f0:4a:
                    f6:40:b7:6e:18:bd:be:f2:c2:83:c5:40:a6:05:12:
                    23:02:c3:47:5b:6b:eb:8b:7b:f4:37:28:04:b8:a9:
                    16:52:37:b9:f6:27:69:81:46:a6:b2:1e:e1:b6:d2:
                    d0:90:e9:b5:c9:40:08:4f:c9:1d:26:0d:18:f0:10:
                    ee:58:86:8a:2d:89:9d:16:e0:97:2d:da:ef:87:23:
                    c1:ea:a9:17:27:e9:62:1e:00:b2:5e:4e:e4:e8:29:
                    98:d4:44:c9:8b:1c:fa:42:91:5d:a5:9b:87:fa:59:
                    1f:90:fd:63:98:b7:ed:b3:9c:c1:6f:93:55:bd:e1:
                    0d:d3:51:7d:f6:be:77:ae:9c:b1:b4:3d:27:04:16:
                    ae:ac:71:19:c6:2e:ad:d0:c0:d3:8d:5e:e9:f3:2a:
                    65:c2:3b:ca:a3:4c:d2:f6:be:36:97:22:b7:fc:53:
                    a2:f4:c1:57:89:1f:8c:b6:c4:b7:68:bd:10:64:e3:
                    a0:e1:00:54:f6:19:94:9b:ec:ce:01:7d:0d:0d:42:
                    9a:16:dc:9c:82:8e:a2:9a:2b:1d:0e:73:84:1b:57:
                    8c:e5:a0:c3:82:3e:16:5d:9d:8c:58:a6:43:03:4e:
                    3b:7c:61:e4:5d:68:50:d8:db:ba:42:33:04:42:a9:
                    02:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:AA:97:FE:8D:3C:66:54:7A:DD:70:2D:23:C8:CE:15:73:A0:85
            X509v3 Authority Key Identifier:
                keyid:A8:F3:48:34:22:36:CE:F0:87:48:83:E7:67:35:51:35:47:08:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/A8F348342236CEF0874883E7673551354708EDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8F348342236CEF0874883E7673551354708EDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/841A1D6C56D9A2431ED62D8750469F5B37A27ECFF512D14BC177814101F49D12/0/34352e3232382e35322e302f32342d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:fb:37:29:68:59:be:7f:45:e7:f8:96:33:29:2a:36:73:
         16:6d:0e:96:be:c7:2d:a8:21:71:d3:a2:7b:2c:b0:e8:03:71:
         4d:b9:fc:92:21:21:fb:32:ad:30:82:72:39:be:4f:79:ee:20:
         06:bd:29:de:4c:83:ed:15:90:4e:98:74:bd:31:f8:22:93:f3:
         e4:c6:21:ac:e1:76:79:e7:5d:f9:f3:f9:16:67:c1:4b:2d:24:
         c9:34:af:43:c7:88:20:e1:b3:61:16:bd:cc:dd:e7:92:ea:67:
         d5:17:d7:e3:89:24:19:b0:ad:51:b1:c5:18:04:10:4a:9e:7d:
         8e:1f:66:7d:6b:42:3f:f3:9a:2a:a2:6e:3d:82:7a:15:ea:67:
         f0:81:bd:bb:4d:25:5a:29:31:9c:11:a0:b6:5e:cf:f0:bc:72:
         6a:c3:ea:72:cf:4a:0b:b5:33:c6:06:9d:fe:9e:3a:2d:63:c0:
         b3:64:bd:91:4f:c3:87:df:da:aa:28:90:e9:af:f0:56:0a:7d:
         43:00:00:91:de:51:95:2d:8c:f0:90:91:46:f0:2e:dc:7c:d2:
         0a:46:b6:97:c5:76:f1:9c:c0:78:58:28:a4:35:45:4c:86:92:
         b6:33:56:78:a1:c2:ae:6a:81:f7:da:32:65:cc:58:e1:e0:24:
         d2:25:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:08 2024 by rpki-client on console-ams.rpki-client.org