Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa
File:                     34352e352e3131372e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          rW+ODH7A6ba9fZL9Q6Rnyl311smKXoD0Lz2Q+Urk7u8=
Subject key identifier:   3F:BA:22:8C:28:5A:F1:9B:EB:0A:9C:A5:B4:7E:2B:C1:1D:3B:C7:A9
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       187CDC1C41148314596C176770B0EC7DE42A097A
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:01 +0000
ROA not before:           Thu 21 Mar 2024 19:10:01 +0000
ROA not after:            Thu 20 Mar 2025 19:15:01 +0000
asID:                     265684
IP address blocks:        45.5.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7c:dc:1c:41:14:83:14:59:6c:17:67:70:b0:ec:7d:e4:2a:09:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Mar 21 19:10:01 2024 GMT
            Not After : Mar 20 19:15:01 2025 GMT
        Subject: CN=3FBA228C285AF19BEB0A9CA5B47E2BC11D3BC7A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0a:85:a9:86:d5:b9:f2:7d:3f:b1:9c:2f:65:
                    0f:d7:5d:b8:4f:9e:16:50:21:ec:95:fe:ba:e1:0f:
                    c6:34:34:09:e8:f7:2f:66:84:6a:dd:45:fd:51:8f:
                    d4:9d:fc:dc:da:3f:e7:c3:31:8d:8d:d0:41:c6:b2:
                    b4:3e:77:ac:2e:a9:9e:88:49:d3:af:89:f0:80:01:
                    38:e8:37:50:44:fb:07:3c:86:52:19:7e:f6:9d:23:
                    62:49:6d:48:c2:64:c9:dd:4e:50:b1:fe:c8:fb:2f:
                    21:9e:0a:48:31:26:43:a5:0e:23:b5:c8:5d:b5:cc:
                    11:fa:b4:93:70:6b:52:b0:a0:8a:d1:da:4f:b2:59:
                    90:c6:3f:5e:a4:9e:59:5a:8e:4c:a8:9b:9e:8c:18:
                    9f:b0:1d:6f:6e:5c:66:34:15:2c:36:db:d9:83:c0:
                    ea:1a:4c:8b:bc:ee:72:1c:33:dd:c3:f5:86:aa:80:
                    03:40:41:7e:9e:c8:42:88:4f:6d:d3:69:f7:e5:c3:
                    34:a7:1f:fc:92:7a:e6:fa:6a:10:43:fd:4c:19:9c:
                    10:e4:20:0c:86:93:a5:64:18:5d:c7:cc:95:81:7e:
                    b2:56:4b:a5:13:8f:a9:07:04:db:cd:88:8c:95:84:
                    f6:c5:5d:53:07:e0:d4:e9:24:ef:4f:e7:9a:6c:0c:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BA:22:8C:28:5A:F1:9B:EB:0A:9C:A5:B4:7E:2B:C1:1D:3B:C7:A9
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:de:d6:ae:9e:db:f5:7c:41:df:26:66:16:4d:13:99:85:21:
         e7:98:56:75:40:42:73:5c:0a:e6:6e:50:34:43:47:b0:b4:a7:
         7c:5e:75:95:97:0f:cc:00:e5:96:a4:7d:f8:45:85:ed:e7:25:
         06:aa:bd:6b:22:ee:89:8d:ab:58:bb:59:37:72:0a:14:6b:d8:
         f5:f0:39:17:ec:4b:b4:2b:38:b1:d7:b4:54:57:08:62:7e:a9:
         3f:93:d3:e6:85:21:5a:41:b2:94:be:78:3f:58:ec:9f:13:fb:
         0d:fe:3e:91:23:41:a7:03:9c:f3:c9:8a:a5:c0:32:49:86:48:
         6b:c9:c2:3a:a9:0a:d5:c6:e2:31:75:e7:0a:ab:b7:cd:97:d4:
         d2:0c:48:47:8d:47:10:e0:b7:67:d1:39:c2:2f:e2:be:0a:4e:
         e7:52:f2:48:68:54:a8:16:99:28:ab:c8:ec:e8:b4:aa:cf:c5:
         bd:f0:e0:b1:92:06:95:98:46:cf:08:5b:7d:97:72:03:8c:92:
         37:09:6c:f8:c0:da:44:17:5b:19:ba:c2:ad:68:90:c7:a5:0d:
         df:a9:c4:0e:8e:ff:de:c5:cd:63:58:3a:0b:c4:5c:79:76:c4:
         8b:22:49:aa:28:12:68:bb:b9:24:a6:52:31:74:a1:4a:64:60:
         19:3e:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org