Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/34352e3138312e36382e302f32322d3232203d3e20323639373336.roa
File:                     34352e3138312e36382e302f32322d3232203d3e20323639373336.roa (raw, json)
Hash identifier:          5A36X4lHXaDvM1ZUzGj9pdlOONy6obimgVsbp6oV/EQ=
Subject key identifier:   FA:EF:21:08:EE:05:63:A3:AF:70:32:E0:8A:A9:67:4B:C8:E9:C9:70
Certificate issuer:       /CN=FCB083EE5CFFAFB10962A859AA22652832710154
Certificate serial:       64CF4289572F78BD7C44E53D19A18F924C614280
Authority key identifier: FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/34352e3138312e36382e302f32322d3232203d3e20323639373336.roa
Signing time:             Tue 05 Mar 2024 18:05:08 +0000
ROA not before:           Tue 05 Mar 2024 18:00:08 +0000
ROA not after:            Tue 04 Mar 2025 18:05:08 +0000
asID:                     269736
IP address blocks:        45.181.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:cf:42:89:57:2f:78:bd:7c:44:e5:3d:19:a1:8f:92:4c:61:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCB083EE5CFFAFB10962A859AA22652832710154
        Validity
            Not Before: Mar  5 18:00:08 2024 GMT
            Not After : Mar  4 18:05:08 2025 GMT
        Subject: CN=FAEF2108EE0563A3AF7032E08AA9674BC8E9C970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:30:0e:11:4d:35:ef:83:8f:98:b4:87:c6:
                    e0:8a:ee:5d:3d:5a:48:01:ab:17:14:58:43:ca:ae:
                    74:91:d0:7f:d6:4b:61:c4:b0:14:2c:22:55:3d:bc:
                    c7:d4:75:e8:92:73:6d:95:e5:16:d4:cd:e9:a9:94:
                    a7:c7:cb:9f:0b:9f:da:ba:a6:30:a8:c2:e3:82:21:
                    71:4f:f9:5f:43:a6:e1:aa:84:83:d5:ce:1d:5a:43:
                    0d:74:18:bc:c1:ce:64:93:de:bd:49:db:dd:f4:38:
                    6e:a8:5a:77:31:3a:27:a2:83:5c:84:f6:a6:dc:b9:
                    6a:0d:ea:b4:f9:1b:9a:ba:e1:09:69:32:99:33:f7:
                    66:0f:34:cb:53:b6:91:ac:8c:bf:5e:d1:c9:76:00:
                    0f:bb:b3:3a:bc:fb:1e:c9:f5:fe:c0:da:f5:27:0c:
                    f7:ee:f6:b0:6e:7a:12:e5:77:9e:0f:7f:2d:65:4a:
                    83:0a:6b:bd:12:b1:aa:99:7a:e3:59:f8:55:3e:9e:
                    d2:ef:72:66:21:d3:69:5d:62:21:66:a0:e8:ef:00:
                    9c:2f:8a:4a:24:f0:b5:8d:74:da:e5:2f:09:2c:70:
                    e1:ae:35:71:f4:d9:80:6f:22:3b:30:22:b2:c2:3d:
                    88:4b:b4:a0:f4:e1:4c:09:0e:67:37:60:b4:b3:5b:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EF:21:08:EE:05:63:A3:AF:70:32:E0:8A:A9:67:4B:C8:E9:C9:70
            X509v3 Authority Key Identifier:
                keyid:FC:B0:83:EE:5C:FF:AF:B1:09:62:A8:59:AA:22:65:28:32:71:01:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/FCB083EE5CFFAFB10962A859AA22652832710154.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCB083EE5CFFAFB10962A859AA22652832710154.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CE48E13328675773DB0D93CA1D27FD6A257CBDF87E5B248571C8DAFF601E374/0/34352e3138312e36382e302f32322d3232203d3e20323639373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:c8:79:6f:5f:6a:6b:a8:c2:73:65:b5:2d:93:38:d5:58:
         79:4e:be:6b:2d:81:73:6a:f6:57:5c:f2:83:a2:12:83:06:5b:
         57:55:83:14:42:fe:15:8e:eb:39:50:c2:a4:f8:5d:55:bc:d3:
         b3:7c:c5:5b:46:f1:79:67:f2:6a:94:be:c0:e9:7c:5c:30:67:
         0e:43:a6:ae:01:11:41:c7:04:cd:a5:7d:8a:45:d4:b5:da:0d:
         76:25:4a:fe:24:3b:4b:85:d3:33:ae:f5:2d:94:1b:92:f2:3b:
         72:02:4b:39:c6:68:df:6d:3f:a2:63:4e:fb:6f:93:0b:55:4a:
         18:d4:cf:08:92:d3:b3:5a:f1:35:79:6a:bd:2d:2c:96:a6:65:
         b2:b2:a4:75:88:15:4d:a0:fe:06:41:1c:db:82:9b:fc:d3:da:
         1b:dd:cb:98:49:88:93:06:c9:9b:b7:ff:33:48:4f:02:83:a8:
         71:7f:ab:51:41:cf:58:79:76:f4:70:a6:73:66:be:d3:36:bd:
         82:4d:2c:80:21:a8:8f:45:96:26:cc:80:b2:94:5c:d4:d7:0d:
         4e:57:9b:59:ec:11:7a:46:3a:37:f2:27:5d:3e:35:51:71:dd:
         c8:d3:ad:d7:17:a5:00:e6:1c:a3:86:d4:c2:44:0d:f4:53:77:
         09:eb:71:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 13:53:19 2024 by rpki-client on console-fra.rpki-client.org