Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135392e302f32342d3234203d3e20323633313537.roa
File:                     34352e3136372e3135392e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          BDPRewBEC5xPaPqTfP9YHqmmvoWd3HW+Na/qF0IWssU=
Subject key identifier:   DD:75:AA:99:C2:17:2B:6D:B6:A5:B3:AC:1D:FE:86:96:96:03:01:E3
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       7F855EBD524840CDB9DB9031D65B8525EC739F36
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135392e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 05 Mar 2024 17:50:17 +0000
ROA not before:           Tue 05 Mar 2024 17:45:17 +0000
ROA not after:            Tue 04 Mar 2025 17:50:17 +0000
asID:                     263157
IP address blocks:        45.167.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:85:5e:bd:52:48:40:cd:b9:db:90:31:d6:5b:85:25:ec:73:9f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Mar  5 17:45:17 2024 GMT
            Not After : Mar  4 17:50:17 2025 GMT
        Subject: CN=DD75AA99C2172B6DB6A5B3AC1DFE8696960301E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:fa:9d:dd:8b:bb:6b:5a:ba:8c:77:d2:2e:
                    d9:e2:e1:7a:79:a3:98:83:ca:80:4d:51:47:80:36:
                    0d:f8:25:47:c2:07:97:bc:fb:53:ef:a8:14:61:af:
                    ae:00:a2:51:ca:e3:af:ce:53:3d:11:9a:10:74:cf:
                    92:ab:42:a2:07:79:1b:b9:31:17:42:f7:bc:ca:7b:
                    f1:15:42:d8:98:be:90:ee:da:f3:0f:08:d2:5b:0e:
                    53:48:aa:ca:26:8d:92:2c:34:ad:45:23:80:f3:12:
                    77:fc:3d:67:43:17:54:c0:48:96:94:19:e0:30:61:
                    3f:c7:36:58:bb:58:8a:9e:67:9a:00:25:64:a2:7c:
                    f2:22:de:f4:f5:d4:96:2f:9e:ec:b5:82:6c:59:13:
                    f5:01:2c:d8:ee:7f:0b:bf:71:40:f3:41:32:89:fd:
                    63:31:c1:ae:3c:4d:7a:7f:12:58:f2:2a:33:e7:59:
                    49:90:9c:73:da:18:e0:49:1b:9c:67:0c:2b:03:2c:
                    38:02:c7:62:16:85:9c:aa:fa:3a:fb:56:c8:a2:85:
                    10:7e:67:b3:d5:7f:b1:2d:ab:13:4b:8b:e0:21:4f:
                    1c:e8:aa:ae:fd:b9:58:d7:d2:3a:50:6f:87:a9:39:
                    35:2f:1d:57:fb:33:83:0a:3c:e4:4a:8a:33:6d:bb:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:75:AA:99:C2:17:2B:6D:B6:A5:B3:AC:1D:FE:86:96:96:03:01:E3
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135392e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:e3:b5:fe:f5:27:6f:02:cd:9e:55:8a:19:51:60:1b:a1:a2:
         79:26:34:f9:8f:20:43:47:76:85:8b:cc:ba:e3:ad:e2:5a:3a:
         fd:f0:e0:6a:42:b5:8e:a0:36:86:47:24:11:26:9f:18:6f:7d:
         f8:17:24:04:51:f1:4d:44:d9:5d:64:d0:a2:2e:0d:84:08:11:
         ee:79:88:2a:94:93:2c:5f:41:9c:fc:04:ea:ef:c4:1c:55:59:
         95:d5:69:ef:68:be:dc:ed:e0:5b:f4:41:73:b2:36:ed:11:2b:
         7a:4b:d5:ca:8d:9c:98:51:24:2c:1d:34:d2:9b:49:23:8f:72:
         89:0b:80:68:27:16:89:0d:24:5b:ee:e1:c2:69:4f:1f:d4:b6:
         be:6a:c9:cd:b3:e4:52:23:d7:25:4d:b6:60:77:3b:24:07:83:
         7c:e8:20:b0:28:0f:ba:58:34:97:f9:54:a6:b3:06:92:dd:78:
         3b:82:f9:39:11:12:7d:e7:59:1c:3c:58:84:dd:c6:33:3f:3a:
         d0:ec:ac:a9:3b:2a:aa:13:98:ff:23:da:a6:6f:66:a3:3b:22:
         c1:b5:05:63:30:f9:f1:22:26:62:2e:81:e6:07:da:45:4b:f0:
         0f:5b:db:2e:e6:a0:35:f1:8a:2d:32:91:3d:b8:38:65:43:b8:
         3d:46:c5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 18:29:48 2024 by rpki-client on console-fra.rpki-client.org