Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa
File:                     34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa (raw, json)
Hash identifier:          lxDUU0d/jbh9bLQiqh83hDBir2HmM0rsjNYHEtqZsGo=
Subject key identifier:   7E:1D:64:E6:DE:2F:43:36:71:7B:C5:0D:D9:EE:4E:2F:A2:22:15:BB
Certificate issuer:       /CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
Certificate serial:       1C66EEBE96F0D8DF25622AB1C60A64921E94DDB3
Authority key identifier: 88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa
Signing time:             Tue 05 Mar 2024 18:23:08 +0000
ROA not before:           Tue 05 Mar 2024 18:18:08 +0000
ROA not after:            Tue 04 Mar 2025 18:23:08 +0000
asID:                     269933
IP address blocks:        45.191.192.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:66:ee:be:96:f0:d8:df:25:62:2a:b1:c6:0a:64:92:1e:94:dd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=889D0E05D0237E6BC68731B7798A1D62FA3AE791
        Validity
            Not Before: Mar  5 18:18:08 2024 GMT
            Not After : Mar  4 18:23:08 2025 GMT
        Subject: CN=7E1D64E6DE2F4336717BC50DD9EE4E2FA22215BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:a4:fd:ad:ed:7f:aa:3c:1d:54:cc:c5:b5:
                    56:01:92:de:3d:4b:c4:9d:f6:b4:e2:cc:c6:71:a2:
                    26:28:1f:a2:23:43:21:02:a5:d1:45:d0:91:94:fd:
                    25:49:bd:6b:c5:92:52:e7:c4:70:7c:a3:56:dd:d1:
                    84:4e:5f:fe:bb:4b:e6:c9:f5:06:fa:e1:0f:e3:8a:
                    59:e3:50:f0:74:0f:2a:63:f2:5a:40:5d:1f:28:33:
                    00:7d:6d:24:8f:6f:83:07:84:ec:52:d7:79:db:d0:
                    e8:2b:43:db:de:48:af:07:f0:7f:7d:27:85:d8:1a:
                    79:92:8c:8c:21:ee:b7:0b:7e:0e:f3:cf:fd:e9:28:
                    c1:b7:84:6d:cd:2e:b1:ff:e9:45:20:5b:37:a6:4d:
                    26:bf:3c:62:c5:26:0d:df:62:33:9b:66:45:88:6f:
                    29:66:90:23:cd:4b:3f:20:36:16:93:18:d9:c6:fb:
                    67:15:f1:62:f6:19:9e:43:13:fb:46:e5:25:45:9b:
                    1c:96:81:e2:1e:85:cd:a2:4b:61:fe:8a:fb:8d:3b:
                    b2:07:89:a5:16:1a:d5:bd:9d:12:71:87:db:e5:1c:
                    42:5e:49:11:2f:96:d9:4a:30:8d:4d:28:ce:76:5f:
                    86:97:91:e8:9b:e1:a0:06:91:b1:37:0a:80:54:aa:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1D:64:E6:DE:2F:43:36:71:7B:C5:0D:D9:EE:4E:2F:A2:22:15:BB
            X509v3 Authority Key Identifier:
                keyid:88:9D:0E:05:D0:23:7E:6B:C6:87:31:B7:79:8A:1D:62:FA:3A:E7:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/889D0E05D0237E6BC68731B7798A1D62FA3AE791.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9521C15C14E4C63699B162B64E86E4BCD170221FF13F62A5D6D1B4DBB78408C2/0/34352e3139312e3139322e302f32332d3234203d3e20323639393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:4d:56:94:25:89:a2:19:9e:e9:df:03:fe:fd:d2:20:38:cf:
         85:7f:31:b9:15:24:2f:86:19:d4:2a:af:04:25:6b:e1:c9:2f:
         28:2f:5b:59:d3:92:aa:47:54:ce:8b:04:e4:5b:76:a6:e0:98:
         a2:1b:47:e6:81:01:e6:8a:da:98:56:be:27:e2:f8:43:2e:2c:
         81:a3:0e:e8:dd:40:4c:c2:cb:37:97:e3:6b:76:5c:3f:61:f6:
         22:a4:ae:23:14:da:b3:90:f1:8a:2b:6c:0a:2f:5d:cf:e8:01:
         20:29:7a:97:3d:cc:77:cf:59:44:5f:28:90:8e:b0:07:4d:af:
         03:42:a8:ae:5a:38:e1:4f:82:ba:f6:f7:0a:09:a5:50:ee:d9:
         df:01:2e:ae:51:03:d0:75:ac:84:39:89:2b:e4:c9:25:8f:52:
         56:ca:a8:53:f1:22:3c:59:4c:e1:ce:9d:cd:00:bf:36:0f:8a:
         6f:aa:33:bf:3a:ee:33:0b:22:ec:c9:29:f5:cb:8e:fc:52:20:
         f2:13:48:93:24:b1:28:90:75:bf:73:6e:01:6d:07:e4:08:06:
         d3:10:44:0e:6b:df:91:26:7c:df:0a:bd:e5:ad:fe:82:f8:8e:
         12:ef:d4:41:fb:ac:ae:fd:63:e4:e5:09:fd:61:3d:ad:ae:4b:
         2a:30:bc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:56 2024 by rpki-client on console-fra.rpki-client.org