Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/34352e352e3136342e302f32322d3234203d3e20323635363936.roa
File:                     34352e352e3136342e302f32322d3234203d3e20323635363936.roa (raw, json)
Hash identifier:          YxUDP7KJOgVuxu3LJU4RdV74oq5QgVgIWvbxQy0JWSg=
Subject key identifier:   D0:B2:48:0F:42:89:6A:B5:EA:7D:5C:EE:25:19:E2:E2:A3:E9:55:94
Certificate issuer:       /CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2
Certificate serial:       1753F53B0119FF3FFF3032269CD8EAA25584698B
Authority key identifier: 1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/34352e352e3136342e302f32322d3234203d3e20323635363936.roa
Signing time:             Tue 05 Mar 2024 18:19:10 +0000
ROA not before:           Tue 05 Mar 2024 18:14:10 +0000
ROA not after:            Tue 04 Mar 2025 18:19:10 +0000
asID:                     265696
IP address blocks:        45.5.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:53:f5:3b:01:19:ff:3f:ff:30:32:26:9c:d8:ea:a2:55:84:69:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2
        Validity
            Not Before: Mar  5 18:14:10 2024 GMT
            Not After : Mar  4 18:19:10 2025 GMT
        Subject: CN=D0B2480F42896AB5EA7D5CEE2519E2E2A3E95594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:d8:0b:00:5f:db:3a:c9:88:65:6f:08:9f:
                    f9:42:51:f1:9c:28:b4:46:d9:e5:33:b2:bc:35:4b:
                    91:ef:33:61:66:8d:13:09:b7:a2:c8:ef:fc:9e:7e:
                    3e:54:33:4c:ef:b3:2c:d5:f4:d1:59:3d:e9:95:2d:
                    f3:2d:98:1a:cb:0c:7b:4f:d9:b5:ce:14:4f:5a:e0:
                    3c:a7:5b:4c:5a:76:a1:22:02:3c:54:f8:44:72:b7:
                    55:6d:d6:2e:d1:8a:1e:d3:ab:d2:77:5a:f3:70:cb:
                    9c:7d:d5:ad:98:85:bd:77:8c:fc:bc:f1:3c:f1:c4:
                    54:49:27:c9:e7:82:ba:14:13:08:77:44:ac:cb:9d:
                    e4:aa:e3:87:00:7e:7f:e2:09:74:d5:93:58:9f:72:
                    4a:ca:1a:de:81:0a:cc:96:0c:19:d6:a6:43:87:71:
                    dc:6f:da:d4:ab:51:df:cc:2a:ec:8f:32:ec:18:6a:
                    76:75:17:c6:21:82:95:38:01:4a:15:e1:c1:dc:62:
                    f1:0c:97:2b:84:95:0a:53:fc:2c:45:ca:9e:da:ef:
                    1d:a0:7e:92:8b:78:63:9d:9e:af:9b:b8:4c:3a:1b:
                    ef:2f:d3:f2:e4:79:fa:51:59:62:61:dd:f8:58:9b:
                    50:be:8d:4d:da:06:d7:b3:7f:00:5d:23:08:60:90:
                    5d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B2:48:0F:42:89:6A:B5:EA:7D:5C:EE:25:19:E2:E2:A3:E9:55:94
            X509v3 Authority Key Identifier:
                keyid:1D:74:5E:BF:35:F5:EB:9C:70:C4:2D:53:92:DC:97:76:A7:ED:2F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D745EBF35F5EB9C70C42D5392DC9776A7ED2FC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A115815F39AB3B661CE8D33DC635EC7326A4AD9FB203D8396D5666ED67BA6F76/0/34352e352e3136342e302f32322d3234203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:46:9c:30:c1:d8:5f:af:c1:a7:f7:81:9a:77:4e:07:0b:a7:
         a5:e6:00:70:73:c0:75:f7:1c:8b:df:8e:08:2d:71:d5:4a:6e:
         71:2e:92:4e:78:07:4c:a4:a7:9f:bb:8b:e3:26:a2:6c:59:cc:
         3c:22:fe:d1:9d:47:49:1b:c2:b9:8b:4b:21:ca:a9:93:f7:6e:
         ac:f8:e8:5e:f3:02:5c:86:6a:c8:61:d9:13:05:97:ad:f2:1f:
         85:97:91:2d:10:73:c9:d5:bf:e0:bc:a5:02:fa:7a:0d:88:06:
         a2:34:2a:e6:a8:50:63:ef:12:f1:3c:87:b6:8a:da:54:fd:26:
         c8:61:d9:56:8b:a3:9f:f6:ad:a5:60:a9:1a:77:70:be:9f:fd:
         0e:94:02:39:43:ed:17:2b:08:89:3a:12:89:ad:75:1c:6c:63:
         c0:ca:c3:5b:09:6c:28:63:d1:c8:a7:15:08:05:f7:93:2e:fe:
         c2:c2:7c:cd:36:18:63:ea:0e:f9:7f:ce:65:b7:7b:a9:45:58:
         1f:fe:3a:c1:d1:4d:d0:78:d8:79:d2:25:ab:51:11:bf:0e:ee:
         30:2d:39:1e:8d:52:bb:f6:78:84:18:29:6f:ac:64:ca:e9:69:
         cb:3f:36:f2:99:69:6b:03:75:2f:aa:8b:bb:d8:22:a2:11:39:
         53:66:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:59 2024 by rpki-client on console-ams.rpki-client.org