Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa
File:                     34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          ub9SSj7jiURyvdHrP20vn5p1L9PP6VNhXTDSPeq7moU=
Subject key identifier:   DD:27:5C:FD:56:03:66:DF:EB:17:82:67:8C:58:BD:82:60:8F:5E:55
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       5AF74DD645BCDB28A36D63F8BE928AB69EFAD58A
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:03 +0000
ROA not before:           Thu 21 Mar 2024 19:10:03 +0000
ROA not after:            Thu 20 Mar 2025 19:15:03 +0000
asID:                     265684
IP address blocks:        45.228.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:f7:4d:d6:45:bc:db:28:a3:6d:63:f8:be:92:8a:b6:9e:fa:d5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Mar 21 19:10:03 2024 GMT
            Not After : Mar 20 19:15:03 2025 GMT
        Subject: CN=DD275CFD560366DFEB1782678C58BD82608F5E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:21:03:67:1c:2d:6d:49:16:86:77:e6:ee:85:
                    48:bc:ee:08:a5:da:f5:fa:67:2c:9a:c3:a4:e5:6c:
                    35:ae:37:59:b4:4d:ce:cf:fa:56:71:40:52:cc:9e:
                    8f:cd:8e:07:01:f8:54:e6:1b:56:9d:85:93:47:70:
                    48:0e:46:e5:26:80:16:4e:2d:f3:67:0e:29:ba:8a:
                    78:39:21:a2:1a:4c:43:a3:17:e9:7c:55:01:a7:62:
                    e2:b1:d9:ac:be:4a:bb:bc:8a:05:0a:3f:fb:bd:1f:
                    af:cf:f4:2f:d7:f0:52:48:6f:bf:74:fd:8e:47:b3:
                    95:5b:9e:8a:4d:39:84:61:89:e4:bb:a6:86:68:9f:
                    29:93:de:0b:8c:9c:e1:eb:de:22:8a:8f:67:a9:28:
                    dd:49:ec:8d:37:52:a8:24:8f:cb:ef:4d:9c:4a:80:
                    59:88:ba:7c:8e:8d:63:71:c4:2c:02:14:3d:6f:c3:
                    85:74:9a:e4:02:2c:6d:81:09:f2:3a:1e:f7:1c:00:
                    95:c0:12:fd:ee:09:a0:02:4a:9c:00:97:dd:78:72:
                    50:78:e4:a2:4a:5f:02:c9:21:1b:bc:72:38:f3:95:
                    0e:4f:7a:8a:70:3f:20:e5:63:69:eb:e1:95:0c:6a:
                    bd:04:c4:a7:af:a0:05:8b:a2:64:1e:9e:7e:8c:1b:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:27:5C:FD:56:03:66:DF:EB:17:82:67:8C:58:BD:82:60:8F:5E:55
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:76:9a:0c:05:10:2f:cd:e9:86:6c:4d:37:fa:f6:bf:ed:8d:
         54:db:01:cf:20:49:93:fb:24:43:82:64:f9:4d:e6:1e:ff:bc:
         48:64:ad:d0:b8:7f:c8:da:64:c8:53:fb:b2:ca:f1:84:36:72:
         36:b1:46:5d:5b:35:2d:00:ce:8d:6b:36:a1:b4:9f:d1:22:91:
         42:aa:33:fc:70:4d:d6:c9:8b:7d:88:c0:0c:c5:f6:97:54:38:
         81:02:59:63:95:58:98:09:47:ce:24:6a:e3:70:39:94:12:40:
         55:33:32:7e:de:62:d5:07:ee:36:f2:7d:a7:98:a2:c7:53:03:
         d3:65:cb:d6:36:43:a9:e0:97:c3:2e:0b:88:da:f3:71:41:f0:
         da:c1:ff:64:8c:47:48:6f:2d:ca:79:3a:a6:83:1e:ef:31:cc:
         45:09:09:0f:ec:97:4c:90:da:ab:9d:7b:4b:8c:45:b6:1e:71:
         dd:82:af:6a:92:66:bb:8c:db:20:04:0e:40:46:04:30:a6:c3:
         19:3f:a9:8d:34:04:fe:76:52:f8:fc:83:5e:00:0f:f4:48:e5:
         49:bc:5d:50:fb:b1:05:50:45:51:59:76:c0:a6:a6:d7:91:ea:
         75:14:7f:93:c2:39:46:c8:a7:de:f7:99:7c:ad:dc:ae:50:3a:
         14:89:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org