Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32322d3234203d3e20323636383134.roa
File:                     34352e3233372e34342e302f32322d3234203d3e20323636383134.roa (raw, json)
Hash identifier:          uTV3QdgtElkJaKKGsrLD5mtbnnMa4xH08LntsrnRDss=
Subject key identifier:   D7:7F:F0:9E:52:21:6B:CC:0F:07:81:5A:E8:52:2E:A1:F5:AD:9D:47
Certificate issuer:       /CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
Certificate serial:       447468DBC5188C1327EE0E30CAB955D516393A8F
Authority key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32322d3234203d3e20323636383134.roa
Signing time:             Tue 05 Mar 2024 17:40:59 +0000
ROA not before:           Tue 05 Mar 2024 17:35:59 +0000
ROA not after:            Tue 04 Mar 2025 17:40:59 +0000
asID:                     266814
IP address blocks:        45.237.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:74:68:db:c5:18:8c:13:27:ee:0e:30:ca:b9:55:d5:16:39:3a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
        Validity
            Not Before: Mar  5 17:35:59 2024 GMT
            Not After : Mar  4 17:40:59 2025 GMT
        Subject: CN=D77FF09E52216BCC0F07815AE8522EA1F5AD9D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:02:1f:a8:90:0a:34:74:db:b5:22:9f:8c:
                    d6:08:c7:9f:12:97:79:21:19:df:07:dc:0c:59:fa:
                    c6:e2:a2:ff:2f:1b:f9:ff:37:41:36:e3:61:a7:e3:
                    10:55:f0:c5:b7:4e:fe:57:64:3e:1d:c0:e8:ea:6b:
                    b9:ac:f3:cd:b2:62:51:a5:ac:d3:43:51:e4:63:07:
                    a2:f6:80:40:9d:f0:48:12:73:c5:42:f8:71:79:39:
                    ad:21:c5:c9:e9:cf:31:57:ed:c6:de:90:1c:a0:75:
                    40:3a:25:02:c1:20:81:9a:31:6e:99:f4:4d:55:04:
                    7e:8a:81:23:ab:a6:be:50:ec:ba:d8:29:4e:b7:a1:
                    2b:b2:f7:6f:6b:7f:c9:dc:12:aa:d0:7c:8d:04:17:
                    49:89:4e:7c:02:00:f1:c3:14:d0:ac:7e:22:db:cf:
                    53:e9:41:02:f9:6d:2b:7b:82:4a:8c:ad:1d:f2:b6:
                    f2:67:7e:dd:e7:c4:a3:30:9e:d3:5f:1d:96:15:0d:
                    fa:53:0f:ef:98:74:3a:de:9d:30:59:ea:21:99:5f:
                    06:62:01:4c:4b:57:b6:f4:1d:e6:45:48:db:52:e0:
                    7c:d1:ae:82:16:fb:d6:e9:f8:e6:52:d4:93:13:68:
                    88:bd:57:f1:f9:d9:94:e5:8f:71:13:3f:7e:c4:4c:
                    c4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7F:F0:9E:52:21:6B:CC:0F:07:81:5A:E8:52:2E:A1:F5:AD:9D:47
            X509v3 Authority Key Identifier:
                keyid:0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32322d3234203d3e20323636383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:fe:43:2f:ad:0e:d9:02:89:84:66:fa:76:82:72:87:f1:61:
         e9:84:b7:a0:7b:38:2e:84:bb:d3:46:cf:aa:f4:b5:6e:3d:6e:
         db:4e:bb:ef:cb:c2:0f:4f:98:5b:93:89:71:d4:00:36:fd:bb:
         1e:9e:3b:ff:a1:45:29:ef:8f:7f:b1:5c:83:e6:a7:fa:50:7e:
         06:b4:54:70:85:f3:3b:00:3f:12:fa:c8:6f:7c:38:dd:c2:3c:
         82:77:1f:1a:77:67:1e:cd:46:39:58:d2:de:8e:fa:e1:94:50:
         14:88:2b:ea:a5:cf:e3:99:3f:9a:ec:79:b2:cc:73:eb:ca:4e:
         bb:72:63:ba:f1:9b:84:11:a7:9a:8c:d4:37:4d:96:ba:d4:ea:
         76:4d:50:42:fd:ea:5b:67:4f:07:1c:9e:30:61:2b:b2:34:13:
         86:9b:42:42:fb:cd:99:95:eb:ab:70:e9:5a:a8:7c:4a:80:1f:
         80:2b:b1:4b:b1:00:9b:32:0d:4f:64:39:e7:8a:64:92:03:56:
         67:66:b7:da:41:ac:b5:08:e1:6b:39:94:c2:10:23:64:48:24:
         cf:17:34:c0:f6:4e:aa:41:77:48:71:f2:04:49:2e:f7:08:16:
         bf:5e:83:b0:7c:b2:56:d3:1f:86:ab:1e:b0:1f:45:d4:21:77:
         72:3b:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org