Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa
File:                     34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa (raw, json)
Hash identifier:          D49eMgaIC5b/JNg3Eel/A2PvwWLtGPxkSRMKesy3+j4=
Subject key identifier:   C7:AD:91:02:9F:9B:F2:23:A3:E8:FA:94:4C:04:ED:76:E0:1A:2F:A9
Certificate issuer:       /CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
Certificate serial:       0B88F531A1F5A870EC6E459DCF207BABA9B537EE
Authority key identifier: 42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa
Signing time:             Tue 20 Aug 2024 13:35:00 +0000
ROA not before:           Tue 20 Aug 2024 13:30:00 +0000
ROA not after:            Tue 19 Aug 2025 13:35:00 +0000
asID:                     267766
IP address blocks:        45.170.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:88:f5:31:a1:f5:a8:70:ec:6e:45:9d:cf:20:7b:ab:a9:b5:37:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42EE9B624E098B952E8E073D8C62609958DB7CC3
        Validity
            Not Before: Aug 20 13:30:00 2024 GMT
            Not After : Aug 19 13:35:00 2025 GMT
        Subject: CN=C7AD91029F9BF223A3E8FA944C04ED76E01A2FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:46:6c:42:d9:88:d9:50:ae:fb:73:b9:60:
                    80:ec:1d:10:3f:03:1c:16:94:c0:0c:8c:6f:87:27:
                    82:24:49:27:fc:1e:06:8e:b0:82:78:7e:30:34:c4:
                    25:42:d9:a3:81:db:d9:d9:5a:ce:7a:55:08:83:80:
                    8b:79:14:88:5a:dd:70:97:1d:a3:f1:21:cc:a6:55:
                    0e:20:05:61:f7:84:f6:ec:0c:f9:b8:58:8c:8a:42:
                    0c:0f:14:ad:5d:69:67:c1:02:0e:c5:3b:51:4d:77:
                    79:0f:ab:43:a3:99:7a:d3:16:f9:44:79:ff:21:0a:
                    1d:87:15:63:d0:a1:f5:2d:11:1d:07:69:67:fe:cd:
                    b6:66:35:1d:4f:21:44:ed:44:eb:01:af:fd:ed:d4:
                    3c:58:24:ff:bc:b8:ef:57:68:04:80:78:38:52:2f:
                    0e:51:4e:e3:d8:34:c5:be:65:7c:72:55:f9:0a:e5:
                    1c:ed:97:29:91:39:96:0e:29:0b:bc:e5:9c:7b:2f:
                    ea:ff:6c:84:dd:66:d4:9d:6b:8b:cb:ed:2e:0d:8c:
                    61:55:11:77:c7:21:32:7a:64:6e:ac:77:2b:a6:2b:
                    e4:d4:12:c4:78:a9:d3:77:4c:a6:66:98:41:e1:82:
                    b8:9c:52:54:10:fb:98:4d:49:9b:ae:45:ee:c9:a2:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AD:91:02:9F:9B:F2:23:A3:E8:FA:94:4C:04:ED:76:E0:1A:2F:A9
            X509v3 Authority Key Identifier:
                keyid:42:EE:9B:62:4E:09:8B:95:2E:8E:07:3D:8C:62:60:99:58:DB:7C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/42EE9B624E098B952E8E073D8C62609958DB7CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A093A21CDF3E69485119E233B4B4A2BF6DE1252D527677DB76A3743D75962E1E/0/34352e3137302e3138342e302f32322d3234203d3e20323637373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:28:aa:a6:13:73:03:0b:73:c2:32:a6:97:6a:b8:80:03:
         7b:e3:83:2b:e8:f5:68:b5:7d:4a:66:55:42:56:a2:06:3e:d3:
         47:20:28:6e:ef:d1:ba:10:91:4f:5d:24:4c:13:7c:05:9d:0c:
         d8:91:07:bb:0f:b4:40:6a:8b:41:9d:a3:94:fd:28:f1:28:fd:
         f5:1c:3d:f6:37:21:25:a7:c9:1b:6c:b5:80:34:d6:e1:9e:f6:
         dc:93:5f:15:3d:bd:ae:3d:98:4b:69:0d:43:83:e8:5d:14:40:
         63:2d:5f:f7:5e:b1:03:af:55:9f:0a:29:24:46:65:9d:c8:11:
         eb:0e:c6:e4:93:9c:50:9d:4a:d3:55:8a:49:93:b9:48:d7:0b:
         65:0c:4b:1f:a7:98:d5:1d:47:1c:13:8a:8d:4f:37:cb:a3:2e:
         9b:bc:2f:1a:e1:cc:cb:b6:da:59:ca:58:c0:4d:8c:4a:83:b0:
         9c:53:3e:2f:63:d0:7c:a4:90:69:b5:ee:39:3f:a3:fc:f6:03:
         bc:e7:3f:2f:eb:01:2e:d7:8b:61:af:81:cb:13:e2:79:f0:5c:
         e8:42:f3:03:33:81:f9:81:ec:e4:b8:5d:87:cf:9f:cd:3a:f4:
         02:75:4b:87:7c:ff:b8:31:4e:08:91:40:b1:8c:58:75:86:93:
         80:44:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:37 2024 by rpki-client on console-fra.rpki-client.org