Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
File:                     34352e3138312e34302e302f32332d3233203d3e20323635353936.roa (raw, json)
Hash identifier:          CA5Az8LXicA1/nguWzQF+HbR4Gih9rEjeivbVrbwTN0=
Subject key identifier:   51:70:42:C0:37:11:48:3D:56:6D:99:1A:B9:F0:54:33:A9:08:40:C2
Certificate issuer:       /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial:       158E6A22A08BF3E0A7BEC029343104F1CE216D5D
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa
Signing time:             Tue 05 Mar 2024 18:13:15 +0000
ROA not before:           Tue 05 Mar 2024 18:08:15 +0000
ROA not after:            Tue 04 Mar 2025 18:13:15 +0000
asID:                     265596
IP address blocks:        45.181.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8e:6a:22:a0:8b:f3:e0:a7:be:c0:29:34:31:04:f1:ce:21:6d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
        Validity
            Not Before: Mar  5 18:08:15 2024 GMT
            Not After : Mar  4 18:13:15 2025 GMT
        Subject: CN=517042C03711483D566D991AB9F05433A90840C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:4c:10:9f:99:7e:77:18:7e:96:dc:c1:cd:
                    73:cd:a7:f5:0f:8a:86:5c:52:d2:36:3c:02:79:bb:
                    59:89:f6:d0:c8:60:8f:44:b8:5f:2c:39:69:20:7e:
                    22:c5:77:14:1f:9d:38:37:73:b5:a9:28:f1:4e:4c:
                    0b:fe:ef:ad:b0:c8:a2:d2:24:ed:57:82:52:72:da:
                    05:4a:f6:36:6d:de:93:ed:61:f9:0b:f5:a4:55:0c:
                    78:bc:74:76:9c:b8:6c:0a:c0:03:ab:04:af:de:61:
                    58:79:4f:ac:bc:74:58:d6:3a:08:6b:10:04:7b:65:
                    f7:07:10:c7:38:60:77:66:83:34:c9:38:6f:2a:ca:
                    98:91:a6:41:6b:98:8d:96:11:c7:4f:81:97:cf:5d:
                    9a:ee:02:95:05:6e:14:ea:ad:02:1a:b0:d3:d0:ad:
                    be:4e:ad:36:cb:0b:d4:a1:a2:37:67:59:eb:3a:93:
                    bd:5b:a0:18:f8:3c:b8:af:ad:0c:bd:7a:78:27:f1:
                    16:43:c8:c0:44:99:c5:b5:67:1f:40:5d:88:04:62:
                    79:31:7a:d9:1a:4f:42:02:68:91:1c:bb:b7:6f:30:
                    87:6e:c1:f0:ea:be:ab:77:eb:7c:5d:b7:40:fe:e5:
                    5a:3c:8e:c1:70:81:58:d6:b7:84:14:4d:e7:52:9e:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:70:42:C0:37:11:48:3D:56:6D:99:1A:B9:F0:54:33:A9:08:40:C2
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32332d3233203d3e20323635353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:e5:92:85:3d:55:bd:e4:33:fd:2d:2a:d6:bc:e0:aa:15:
         78:26:4d:12:d0:51:e1:da:2b:22:87:bb:8d:02:57:eb:6d:01:
         6d:74:41:76:da:13:30:f3:95:2b:86:69:47:e1:e6:7b:fb:6b:
         25:0a:44:ab:9b:38:c9:15:75:d2:e4:eb:d8:23:df:86:da:d1:
         13:1e:4e:ca:2a:c3:15:f3:b4:0e:72:47:d2:87:c8:27:85:7f:
         44:42:43:d8:f8:59:aa:f1:a3:79:5f:41:a1:bd:53:54:f4:6f:
         2b:01:03:ec:9e:1e:ba:d4:f9:af:db:02:23:bd:b0:e8:16:4b:
         6b:7f:ae:0f:e6:35:18:cc:1e:d1:11:62:38:14:b7:7a:77:6e:
         74:be:1c:0a:72:e1:29:3f:c5:fd:c0:e6:6d:41:24:42:d8:dd:
         16:78:ba:31:97:8d:84:c1:96:d8:56:30:aa:74:23:e0:0e:92:
         cf:4e:79:72:2f:77:b7:71:f0:6c:bb:55:45:1b:aa:4c:ad:97:
         32:a3:a5:f7:12:58:2d:83:fb:5a:ab:c8:59:9a:69:7b:4d:a4:
         2f:d8:23:a3:28:3f:5f:55:ef:e4:e4:05:c2:3a:94:b8:0d:1e:
         fb:de:5a:63:6c:67:a3:9a:a1:72:5b:1f:a6:ce:54:47:3b:d9:
         63:1a:91:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org