Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/34352e3233392e34382e302f32322d3234203d3e20323633323338.roa
File:                     34352e3233392e34382e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          0Or0PZT2rq4Im9KLffyxuHGVl7gSqg1B6el5JKgAWUk=
Subject key identifier:   83:88:5E:79:10:EF:D4:14:06:88:15:BA:C2:49:8D:AC:B4:F1:9A:B7
Certificate issuer:       /CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
Certificate serial:       4F8AA4F1579254CCB7B86B46F2554CE5CCED49F3
Authority key identifier: E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/34352e3233392e34382e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 05 Mar 2024 18:12:52 +0000
ROA not before:           Tue 05 Mar 2024 18:07:52 +0000
ROA not after:            Tue 04 Mar 2025 18:12:52 +0000
asID:                     263238
IP address blocks:        45.239.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8a:a4:f1:57:92:54:cc:b7:b8:6b:46:f2:55:4c:e5:cc:ed:49:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82
        Validity
            Not Before: Mar  5 18:07:52 2024 GMT
            Not After : Mar  4 18:12:52 2025 GMT
        Subject: CN=83885E7910EFD414068815BAC2498DACB4F19AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:df:8d:cf:3c:2b:6d:26:fa:e3:90:b8:b7:
                    14:3d:75:1a:ca:41:52:4c:c6:5e:16:af:90:78:38:
                    13:31:7e:17:3a:ac:91:a0:26:c9:22:89:a7:7e:80:
                    3a:e9:0b:89:90:14:92:2b:57:70:b6:42:16:75:52:
                    13:15:68:19:22:fe:1c:bc:66:a9:01:d1:80:c7:49:
                    42:91:c2:15:d1:97:61:e4:87:90:71:a3:f6:ac:fd:
                    1a:b9:5d:32:bf:99:6c:fc:96:0a:f2:fe:16:9c:cf:
                    eb:64:85:8a:17:e7:30:a1:4f:ac:56:90:15:fc:07:
                    95:1d:ae:68:4f:47:91:99:e1:14:44:15:ad:0d:b0:
                    8c:1b:45:69:98:9f:ce:68:0c:0a:83:c5:c0:1f:37:
                    ac:1d:58:d1:b5:09:9f:52:19:34:4c:1e:f2:2a:09:
                    44:2b:33:7d:da:0b:0c:2b:e3:08:75:22:fc:fe:e9:
                    c6:55:89:f4:67:1a:0e:be:3e:6d:39:a6:c0:12:a7:
                    b7:bc:a6:d4:47:30:df:9a:57:16:1f:ab:b5:16:56:
                    ba:e1:48:e3:42:90:77:81:6a:98:29:cb:8e:5a:38:
                    98:0c:d9:b4:91:25:9b:b2:b5:ea:94:4d:5f:a4:59:
                    23:17:6d:90:90:08:19:be:d8:f4:84:bc:80:3f:f5:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:5E:79:10:EF:D4:14:06:88:15:BA:C2:49:8D:AC:B4:F1:9A:B7
            X509v3 Authority Key Identifier:
                keyid:E1:8C:86:96:D3:87:96:27:D1:26:1D:7B:A7:AC:C2:DD:BE:0D:AF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E18C8696D3879627D1261D7BA7ACC2DDBE0DAF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93E8A862A26EBB0297BD5DB83E22353C990F9D2D17CEF486F0FEAED8FD5262EF/0/34352e3233392e34382e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:af:b0:a9:22:42:65:99:f3:53:f9:b6:79:de:cd:0c:26:3c:
         43:ab:55:2c:15:43:2e:f7:6c:09:cc:3f:48:d3:54:79:5e:c4:
         91:29:1a:be:52:95:ff:4b:04:e1:04:ad:8d:e4:54:34:94:e0:
         68:85:22:f1:d4:d0:3d:19:e2:ca:a4:6a:71:74:3f:b9:9f:28:
         5b:7a:67:d2:dc:51:ac:e2:ea:06:6d:18:68:93:76:b0:b9:48:
         82:08:5e:c7:c0:36:fc:57:58:02:36:37:9c:5d:af:a8:9d:9b:
         7a:9e:ef:92:d0:79:85:21:39:da:a2:23:22:34:a6:f7:0d:7a:
         dc:b2:e5:e1:e2:70:11:ad:96:95:c4:3b:43:26:a2:69:a2:ce:
         73:d9:32:0e:e5:51:2f:be:2f:44:b0:d5:04:a8:ff:3e:26:46:
         42:ad:2c:58:07:f8:34:47:8b:f1:d6:dc:00:0d:3a:89:e1:4d:
         65:08:c0:f3:bb:12:3b:4a:b8:7f:a8:7b:9d:fe:fe:b6:45:4f:
         cf:2b:e7:78:5f:32:88:32:0e:67:57:89:80:7d:ac:11:54:3d:
         a6:bc:a4:86:4a:ea:1e:1b:32:48:ac:df:87:bf:ea:f9:e7:c3:
         d1:20:59:2b:b6:32:37:2b:3e:f0:5b:0e:cd:70:91:3b:c1:e1:
         92:d2:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 23:02:09 2024 by rpki-client on console-fra.rpki-client.org