Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32342d3234203d3e20323635363834.roa
File:                     34352e3232382e3233342e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          4yS+IPrd0abEwPK9QWER0gYym2+t7rR9PXX0aoHbK8U=
Subject key identifier:   35:CE:21:C4:05:86:74:B6:E1:22:E9:AF:88:64:8B:A7:6C:DB:95:53
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       128553122D862BC7134E472ED812212D0B1A822F
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:03 +0000
ROA not before:           Thu 21 Mar 2024 19:10:03 +0000
ROA not after:            Thu 20 Mar 2025 19:15:03 +0000
asID:                     265684
IP address blocks:        45.228.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:85:53:12:2d:86:2b:c7:13:4e:47:2e:d8:12:21:2d:0b:1a:82:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Mar 21 19:10:03 2024 GMT
            Not After : Mar 20 19:15:03 2025 GMT
        Subject: CN=35CE21C4058674B6E122E9AF88648BA76CDB9553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:84:b9:7d:79:bc:a5:3d:92:51:d2:94:fe:a8:
                    62:79:27:96:18:4f:25:9e:66:88:a6:b7:a3:46:52:
                    b4:3a:bc:a6:63:12:98:d8:3b:04:11:69:cf:c1:2e:
                    ab:9e:20:2b:9c:be:73:46:24:e3:09:8b:d6:39:63:
                    4b:f9:71:a4:d0:a6:55:e7:84:61:0e:b9:9a:57:08:
                    8e:38:90:ae:bb:c9:dc:87:d5:b3:12:e8:30:9a:f2:
                    24:9d:5a:9c:ac:54:02:16:6f:36:90:3a:61:9c:70:
                    03:53:bf:87:9a:c3:13:7a:08:db:f6:38:ec:0b:79:
                    af:88:16:0b:83:23:76:32:87:5d:31:3f:20:5a:99:
                    17:4c:c0:9d:86:da:c5:5c:67:ce:a5:32:a9:7b:35:
                    e3:7e:71:6d:1e:67:ab:e6:5b:9b:71:ec:bc:5e:4d:
                    3f:6f:d4:a9:0e:90:17:22:52:fb:dc:f8:38:7a:71:
                    52:e0:3f:52:72:9c:99:dc:5c:fb:4c:b5:a5:95:34:
                    8e:17:47:81:4b:7d:04:e8:ea:8d:57:69:22:ef:76:
                    81:38:f4:d0:6e:60:0c:1e:75:01:39:f4:b1:8d:dc:
                    a6:76:e0:90:be:46:8d:4c:b6:ad:43:da:24:a2:d1:
                    62:30:1e:b9:05:eb:37:7d:58:2b:88:f0:5c:28:38:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CE:21:C4:05:86:74:B6:E1:22:E9:AF:88:64:8B:A7:6C:DB:95:53
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233342e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:72:53:83:35:a0:69:3e:93:59:8c:30:35:60:48:2f:35:8d:
         d9:cd:fa:90:a3:90:1b:58:4d:9a:4a:49:46:de:92:0e:b6:ba:
         ea:eb:b2:83:4f:39:b4:66:bd:14:77:d8:97:33:db:8a:96:fa:
         ca:5b:ec:95:bd:fa:85:b8:4f:e2:64:c8:95:61:c5:3f:77:69:
         33:44:6d:dc:50:e3:99:51:30:41:ec:c7:e6:2e:00:d5:c5:9a:
         98:23:bf:d6:0a:dc:f9:6b:be:81:d6:57:c3:78:2f:42:6d:e3:
         7c:8d:27:31:5e:70:f8:97:ce:bc:5e:35:4c:63:67:47:45:61:
         ac:53:f6:96:8a:3e:ad:2c:cd:35:1b:8f:95:aa:92:12:4c:89:
         35:d1:d4:62:71:72:8d:16:03:8a:e0:37:0c:4d:54:62:69:d5:
         37:80:e7:9b:0a:e2:af:52:cc:f4:80:ba:83:1b:0e:ec:2c:37:
         75:4d:d6:ea:8c:13:a3:d2:e4:6c:0b:89:50:53:8b:ce:76:b1:
         b6:c8:5d:2c:26:94:ee:a3:fa:98:47:d5:29:93:41:95:d4:81:
         de:39:87:51:71:88:af:59:f6:83:0d:d5:fc:b6:af:f7:18:e4:
         f7:a6:1b:b4:bf:cc:da:4e:ab:09:ca:72:e3:84:4d:b0:62:94:
         3e:cb:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org