Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa
File:                     34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa (raw, json)
Hash identifier:          CBj9TOG1dhQeFOAntm+n6b0ni8ozb9v++gOwZVRq9j8=
Subject key identifier:   79:79:F0:25:6D:7E:45:2A:75:ED:7B:F1:50:59:63:7E:CE:11:57:E4
Certificate issuer:       /CN=283E39ACDA61098B187783EF95225FD4C9135441
Certificate serial:       6FD4609A184D9164543BE3223AA7D9888E661CBD
Authority key identifier: 28:3E:39:AC:DA:61:09:8B:18:77:83:EF:95:22:5F:D4:C9:13:54:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa
Signing time:             Fri 05 Jul 2024 16:30:00 +0000
ROA not before:           Fri 05 Jul 2024 16:25:00 +0000
ROA not after:            Fri 04 Jul 2025 16:30:00 +0000
asID:                     266828
IP address blocks:        45.237.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/283E39ACDA61098B187783EF95225FD4C9135441.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/283E39ACDA61098B187783EF95225FD4C9135441.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d4:60:9a:18:4d:91:64:54:3b:e3:22:3a:a7:d9:88:8e:66:1c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283E39ACDA61098B187783EF95225FD4C9135441
        Validity
            Not Before: Jul  5 16:25:00 2024 GMT
            Not After : Jul  4 16:30:00 2025 GMT
        Subject: CN=7979F0256D7E452A75ED7BF15059637ECE1157E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:d4:21:e1:4b:6f:a4:f6:ee:f1:98:8e:76:
                    5a:dc:91:4a:93:71:b1:c3:44:20:10:b6:f3:78:78:
                    7c:86:84:b8:e8:90:73:5d:fa:57:a1:48:11:1a:a4:
                    2c:d9:7a:cb:a8:5d:5a:6e:2d:6c:39:e9:a9:a4:35:
                    fe:44:6a:c5:09:71:39:de:71:0a:79:fb:5e:23:1e:
                    e6:e8:80:13:ed:51:9e:d0:23:e8:ed:31:ab:dc:12:
                    43:f4:fb:51:f6:51:78:94:da:c9:0b:c2:cc:2c:7a:
                    60:e6:1c:cf:54:a4:f3:df:2d:40:14:dc:dd:b6:45:
                    fd:d2:25:9e:87:49:f4:a3:56:f3:70:b5:b6:dd:12:
                    59:cf:e5:5d:85:65:2c:f8:0d:1c:bd:39:0d:dd:b9:
                    d4:cb:e6:2d:6c:4d:4a:6b:61:f9:a9:5a:2b:4d:fe:
                    45:58:49:00:3a:af:33:42:bb:0b:b1:41:c8:1e:c7:
                    d0:cc:9a:28:d7:37:ca:b7:74:4d:8a:69:fd:93:84:
                    36:22:07:85:79:e7:6c:4a:7c:22:c8:45:2a:99:a2:
                    7c:92:d1:ba:23:b2:e5:e3:7a:d4:f7:44:5f:35:62:
                    ce:39:d1:af:e8:49:26:c8:0b:68:e1:e7:2a:4b:8e:
                    44:49:27:4c:d6:f8:76:d3:10:6c:9f:91:f8:a9:c2:
                    8c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:79:F0:25:6D:7E:45:2A:75:ED:7B:F1:50:59:63:7E:CE:11:57:E4
            X509v3 Authority Key Identifier:
                keyid:28:3E:39:AC:DA:61:09:8B:18:77:83:EF:95:22:5F:D4:C9:13:54:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/283E39ACDA61098B187783EF95225FD4C9135441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/283E39ACDA61098B187783EF95225FD4C9135441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F794A9683525C23BA3D3EB6CCD9E8256972DCD2B67BE2258E37F0315C003E4D/0/34352e3233372e3138342e302f32332d3234203d3e20323636383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:82:f5:15:5f:a0:d5:82:68:df:3d:2b:19:9f:e5:20:fc:a4:
         5f:5c:98:7e:72:63:d5:5a:64:48:83:45:98:9d:37:dd:1e:b7:
         09:4e:a8:38:6a:56:e8:00:8a:53:f9:da:79:3e:cc:ff:3f:62:
         7a:d7:9a:6b:0e:90:fc:70:e2:a5:a4:1c:1b:be:c5:e3:f8:d7:
         1a:8b:4e:54:27:94:b4:ad:bd:99:76:be:5a:71:57:7a:2b:5d:
         a5:a5:37:46:1d:75:79:83:61:e1:53:b5:c8:9a:8a:3f:4a:fb:
         b6:96:89:ca:4d:6b:dd:dc:f5:03:6a:3b:d9:4b:a1:fb:8a:d9:
         f1:58:0b:9d:38:14:2e:cf:d0:f7:8e:68:ac:68:12:22:2c:c0:
         4f:37:90:b4:27:be:7a:c9:37:56:3a:cd:7d:9c:8b:69:4f:e3:
         32:ec:60:d8:3f:a2:a4:bc:7e:64:67:9e:07:13:ec:06:8a:03:
         61:3b:7e:b3:3a:01:22:d4:14:f0:38:a8:11:0e:d2:9d:bc:4e:
         1d:51:cf:49:4b:2a:95:c5:cf:c2:a5:62:24:88:63:9f:47:5f:
         a7:23:69:85:97:e1:81:67:a2:ea:35:99:22:b5:9d:a3:7c:8d:
         aa:8d:28:fa:10:92:e7:9d:f8:70:9a:e9:50:89:7b:4b:05:f1:
         9d:91:17:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org