Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa
File:                     34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa (raw, json)
Hash identifier:          Qd8KawNClzj29ORarK8eZtr4L59Uja9j/FN2iL2mx1g=
Subject key identifier:   31:A3:A6:0B:3C:44:24:05:97:DA:02:25:53:EC:BC:99:AF:62:7A:0D
Certificate issuer:       /CN=233C81F942C5DC516A2998AA4C482074A3A18024
Certificate serial:       0DC68477F8132B0744ECBF31E0CB2FF1123C39F5
Authority key identifier: 23:3C:81:F9:42:C5:DC:51:6A:29:98:AA:4C:48:20:74:A3:A1:80:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/233C81F942C5DC516A2998AA4C482074A3A18024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa
Signing time:             Tue 05 Mar 2024 17:54:52 +0000
ROA not before:           Tue 05 Mar 2024 17:49:52 +0000
ROA not after:            Tue 04 Mar 2025 17:54:52 +0000
asID:                     265852
IP address blocks:        45.225.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/233C81F942C5DC516A2998AA4C482074A3A18024.crl
                          rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/233C81F942C5DC516A2998AA4C482074A3A18024.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/233C81F942C5DC516A2998AA4C482074A3A18024.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c6:84:77:f8:13:2b:07:44:ec:bf:31:e0:cb:2f:f1:12:3c:39:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233C81F942C5DC516A2998AA4C482074A3A18024
        Validity
            Not Before: Mar  5 17:49:52 2024 GMT
            Not After : Mar  4 17:54:52 2025 GMT
        Subject: CN=31A3A60B3C44240597DA022553ECBC99AF627A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:4c:35:f3:83:04:05:e2:dd:0e:19:60:ab:
                    4e:dc:04:e9:2d:8d:8d:83:7f:75:6d:f7:d4:6b:55:
                    28:31:4d:d6:e4:9a:68:f5:c2:ba:0d:c7:67:7c:58:
                    47:eb:d6:37:5b:b1:5c:d2:4d:2b:83:30:cb:19:56:
                    00:26:0d:90:1f:5b:29:b8:85:94:55:de:d7:89:ce:
                    4b:59:08:00:9e:44:a9:80:ba:7d:2e:70:d6:fb:93:
                    e8:d3:1f:ae:46:5e:2c:a5:08:d6:9c:50:c7:6b:e5:
                    ce:8c:c2:fd:bf:6c:5b:36:22:a1:96:91:13:a5:ca:
                    ad:11:68:65:da:8c:98:f6:ba:0e:9a:af:ba:5a:0d:
                    92:f0:c2:04:f6:e2:80:cc:77:a2:c6:0e:f9:0d:84:
                    ed:48:da:b5:e8:77:66:9e:d9:e5:5c:d7:e3:e7:6a:
                    84:fa:00:e5:ad:99:e7:59:82:f6:bb:be:2a:50:ae:
                    52:09:09:d6:98:58:0d:97:4c:ce:32:75:37:25:18:
                    f1:d7:12:f7:fb:6e:9f:44:51:87:26:e6:ff:46:c4:
                    ff:81:cf:61:96:db:7c:e2:4f:c8:df:5a:31:12:38:
                    53:ea:83:7c:28:a2:df:ee:72:c7:7a:c2:09:1f:40:
                    9d:77:2c:3b:24:16:55:e7:34:b3:d9:8c:13:40:fd:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A3:A6:0B:3C:44:24:05:97:DA:02:25:53:EC:BC:99:AF:62:7A:0D
            X509v3 Authority Key Identifier:
                keyid:23:3C:81:F9:42:C5:DC:51:6A:29:98:AA:4C:48:20:74:A3:A1:80:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/233C81F942C5DC516A2998AA4C482074A3A18024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/233C81F942C5DC516A2998AA4C482074A3A18024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99F02017C269AC4FCE379D07C344E13F444E5563CAF71ABE21DAD7BCC2F2D75A/0/34352e3232352e3231322e302f32322d3234203d3e20323635383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:fd:fc:eb:6f:15:90:ff:e6:5c:dd:39:a1:63:a7:bf:76:
         c7:2d:69:d5:cc:18:ce:c7:ac:bb:93:90:65:54:7d:f5:10:46:
         15:f8:75:05:7d:5e:8c:61:01:f5:04:cf:7c:81:8a:68:c6:8d:
         fc:8f:dd:cd:2e:40:7a:61:19:a4:87:a2:9e:cb:65:ad:83:f3:
         ee:75:9b:d7:2d:83:a3:6f:e5:1f:3b:fa:8f:61:df:3c:56:8d:
         ce:52:fc:11:23:04:e3:d1:97:0d:08:c9:81:1b:e0:f5:fc:83:
         9b:2b:38:01:28:d0:26:d2:f4:70:f2:b8:cc:a5:78:eb:c1:df:
         61:97:7f:7a:c1:97:73:6b:e6:ba:0a:4d:01:ba:5b:80:3c:58:
         68:9b:16:d2:c4:ba:48:12:19:ab:1e:95:ea:03:cf:e7:77:8c:
         12:af:ab:d8:1b:5f:2b:37:01:af:ed:37:35:b5:d9:87:29:21:
         96:83:a1:be:ce:e3:6e:e0:d3:a0:67:27:bb:6f:59:88:08:77:
         8a:14:4f:3b:9f:1d:c1:25:a4:90:46:17:17:13:ae:0d:d3:8b:
         ed:7a:1c:7c:34:e5:17:27:71:06:52:35:56:23:0f:89:2d:21:
         0d:63:56:f0:6e:15:01:62:2f:d9:42:26:e0:5f:f1:b7:b9:5c:
         e8:47:91:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:34:00 2024 by rpki-client on console-fra.rpki-client.org