Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa
File:                     34352e3138312e34342e302f32332d3233203d3e20323637373938.roa (raw, json)
Hash identifier:          kGgg5MdrQiOqrS5HT9pM1WXPimlfDbO3CKzc6VMlOLM=
Subject key identifier:   71:2C:F6:18:0A:4E:0E:B6:D1:73:1D:C0:2F:A2:7E:22:4E:74:32:08
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       0E1FF8E6B7FC392FAE8E1BF46D041B08F0C7C453
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa
Signing time:             Fri 17 May 2024 16:50:00 +0000
ROA not before:           Fri 17 May 2024 16:45:00 +0000
ROA not after:            Fri 16 May 2025 16:50:00 +0000
asID:                     267798
IP address blocks:        45.181.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:f8:e6:b7:fc:39:2f:ae:8e:1b:f4:6d:04:1b:08:f0:c7:c4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: May 17 16:45:00 2024 GMT
            Not After : May 16 16:50:00 2025 GMT
        Subject: CN=712CF6180A4E0EB6D1731DC02FA27E224E743208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0e:16:b4:ee:a1:a9:5c:d5:20:9f:03:e6:af:
                    49:3a:9b:8b:1c:8a:c8:d6:11:95:64:fa:73:80:f0:
                    d1:75:d2:9b:40:7d:74:8c:ff:3f:cc:80:0b:07:8d:
                    5f:ca:ba:f9:44:dd:b9:44:d2:fd:95:11:a2:80:b4:
                    26:80:ba:7e:56:d3:4e:40:c2:6e:76:e5:6f:b3:95:
                    4d:79:93:fb:9a:42:0c:c8:ab:ba:ac:0b:37:96:45:
                    19:bd:e4:1c:3e:f1:47:47:fa:d1:50:0e:dd:53:77:
                    3c:00:09:08:cd:cc:c3:a0:31:fb:c8:d2:2f:63:72:
                    dc:46:fd:75:c1:b9:d7:39:da:e8:83:12:04:78:0c:
                    12:71:78:e6:94:c6:cd:a3:0d:b2:1a:88:7d:67:9f:
                    7b:c5:cd:4d:1c:63:1b:a5:13:c8:42:e0:1d:70:d0:
                    e6:ef:27:17:17:85:49:9d:af:5a:ba:aa:54:34:ec:
                    5b:24:e1:45:25:6a:27:e4:fb:b7:d3:35:dd:88:4e:
                    60:44:cc:37:04:3a:31:be:c8:2a:ab:8d:92:9b:02:
                    03:90:58:83:96:68:5b:ce:de:13:58:a8:1d:9c:67:
                    6e:0f:20:bc:b6:a9:c8:6e:f9:3a:3f:e5:a1:a6:71:
                    60:af:d7:f1:53:e0:76:5a:fb:e0:9f:2c:b5:c1:de:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2C:F6:18:0A:4E:0E:B6:D1:73:1D:C0:2F:A2:7E:22:4E:74:32:08
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34342e302f32332d3233203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:21:a1:37:c2:30:68:d5:6b:8c:a3:87:d8:e4:f6:45:8f:e7:
         9c:4f:e3:82:44:42:0a:7f:00:82:97:2c:f8:8d:31:4f:64:71:
         06:26:de:1e:cb:4a:66:12:40:11:3a:f7:34:34:bf:cf:3a:99:
         53:72:f7:bd:2f:38:d1:91:45:c7:91:31:0f:a5:aa:ab:83:48:
         41:c0:b9:44:2e:b6:8d:53:4f:f1:bf:2b:53:2c:e8:1a:a1:fa:
         56:f2:bc:31:5d:f6:d5:9f:ef:60:28:3f:f4:c4:8b:36:0b:37:
         d1:5c:3d:28:2c:9a:6c:6b:95:f2:d5:2a:fa:a4:fe:96:64:e6:
         b1:d2:3d:28:7a:a8:f4:56:60:6d:09:a5:e8:34:b9:34:13:4e:
         4e:f6:ba:f7:f0:d2:40:38:dd:f2:9a:65:fb:72:ed:f9:51:56:
         9f:95:49:d9:e9:a4:95:fc:ee:95:32:c4:64:39:3e:41:76:bd:
         f6:ad:07:f0:fe:90:8b:bd:55:ff:3f:4e:61:c8:e9:2d:2f:67:
         bf:53:3a:51:d3:51:13:dc:37:b2:c9:62:fa:b6:c5:58:81:bc:
         55:1b:78:1b:19:75:e8:24:28:d4:34:9d:55:a9:ff:32:3b:5f:
         22:1a:9c:b1:11:7c:6c:30:8f:aa:3a:be:33:60:b3:2d:2c:de:
         fb:ec:e0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org