Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135342e302f32332d3233203d3e20323637393134.roa
File:                     34352e3137392e3135342e302f32332d3233203d3e20323637393134.roa (raw, json)
Hash identifier:          Ezz8Eh/5kzWAwIIKNclw1SBjUN/Mz33TRDT2yhQOxtE=
Subject key identifier:   FB:8E:4F:43:0C:3F:17:43:F7:01:A2:F3:1F:CC:CF:F3:80:94:32:82
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       4248F70DE39FACA0E3E1A28BCA56DA4312F366B9
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135342e302f32332d3233203d3e20323637393134.roa
Signing time:             Wed 28 Aug 2024 20:30:02 +0000
ROA not before:           Wed 28 Aug 2024 20:25:02 +0000
ROA not after:            Wed 27 Aug 2025 20:30:02 +0000
asID:                     267914
IP address blocks:        45.179.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:48:f7:0d:e3:9f:ac:a0:e3:e1:a2:8b:ca:56:da:43:12:f3:66:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Aug 28 20:25:02 2024 GMT
            Not After : Aug 27 20:30:02 2025 GMT
        Subject: CN=FB8E4F430C3F1743F701A2F31FCCCFF380943282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ec:96:4d:a3:33:3f:8f:ee:a5:da:83:2c:ef:
                    b0:5e:2a:a1:b1:63:3c:61:c1:60:99:8c:3b:9e:30:
                    bf:7a:b2:b5:33:22:ea:d9:76:cd:4f:fb:7d:76:07:
                    ee:90:c4:42:69:3f:1f:f8:43:9e:88:9f:f6:30:ff:
                    b6:2b:7b:06:b6:bd:1d:15:b9:9c:34:82:4c:d9:99:
                    70:ad:5b:f7:e6:59:e7:ad:ba:ec:89:68:37:ae:ae:
                    c2:38:4d:9f:37:7c:6c:00:88:09:f0:93:0c:71:b2:
                    fb:d1:06:03:d2:44:08:0c:ff:cc:71:a0:93:75:84:
                    c8:f8:39:93:9e:e2:f6:7c:9a:8a:94:0e:ca:7b:c6:
                    8a:6c:66:3f:7c:40:02:f5:45:a8:76:3e:24:a1:8f:
                    8c:55:be:52:bc:50:65:d7:88:76:b0:8f:b3:3d:d2:
                    2f:90:ee:ad:c0:1d:de:1a:29:38:0f:dc:67:da:2c:
                    d1:f6:43:2f:13:ca:31:73:20:3d:bd:e0:f4:2b:bc:
                    52:de:f8:88:18:2a:5d:d8:f2:4a:fa:c2:6c:2b:bf:
                    c4:e7:b4:6e:7b:1e:74:40:b8:75:4f:05:11:69:72:
                    17:ba:2d:a3:e6:31:ab:45:30:90:3d:a4:e5:b5:9b:
                    3d:4e:47:eb:84:c4:ff:32:66:6b:7f:b3:57:ad:6d:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:4F:43:0C:3F:17:43:F7:01:A2:F3:1F:CC:CF:F3:80:94:32:82
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135342e302f32332d3233203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:c3:28:03:a0:d9:84:ab:8d:52:92:fc:98:6d:cf:ea:3a:44:
         ea:0a:18:16:d8:2e:bf:76:a9:99:0c:89:2b:6f:bd:01:e5:c4:
         96:d2:44:12:f3:fc:58:a8:1a:19:3e:2e:c4:79:8f:c4:5f:0e:
         9b:15:26:af:59:a2:97:d6:6e:89:1c:53:18:1f:27:8a:a8:76:
         63:65:66:0b:96:d3:07:c5:3d:64:a1:a9:6f:b4:fb:96:c7:12:
         2a:57:a2:9b:7d:d2:34:5f:60:a8:8f:58:52:6d:d9:8e:24:51:
         3d:1b:5f:54:54:e4:76:ca:cb:e6:00:32:97:90:bb:8f:e5:8f:
         da:69:fd:9c:8b:3c:11:4e:aa:58:64:2a:53:47:3f:40:32:12:
         70:a4:25:fe:91:00:39:ed:87:1c:52:4c:e4:5d:1a:4b:69:ca:
         af:06:04:59:23:04:e7:5d:fc:65:2d:b2:b6:5f:f4:fe:c3:3b:
         6f:4f:c0:4c:9f:db:5e:be:e2:c9:8d:cd:dd:57:93:fd:6c:70:
         d9:50:53:5a:05:7c:04:b6:b3:a4:13:92:82:b7:c4:eb:de:0e:
         c3:09:aa:69:9c:f8:4d:c8:91:1c:46:08:c2:f9:44:32:f0:1d:
         03:f4:e0:d5:de:fa:46:7e:c0:15:7e:b9:26:b0:f4:5c:4d:bf:
         14:9f:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:45 2024 by rpki-client on console-fra.rpki-client.org