Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3233302e33332e302f32342d3234203d3e20323636363938.roa
File:                     34352e3233302e33332e302f32342d3234203d3e20323636363938.roa (raw, json)
Hash identifier:          xcirQiOulbr/3r9x1eN8UwdFmDiLwAS60srb5v84vfw=
Subject key identifier:   BB:E2:9A:DF:F9:8A:C6:8A:ED:E8:64:EC:32:0A:5B:0C:39:A8:B4:E2
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       750B52F2C4880246656D8779C31F8A948711DF02
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3233302e33332e302f32342d3234203d3e20323636363938.roa
Signing time:             Tue 05 Mar 2024 18:20:03 +0000
ROA not before:           Tue 05 Mar 2024 18:15:03 +0000
ROA not after:            Tue 04 Mar 2025 18:20:03 +0000
asID:                     266698
IP address blocks:        45.230.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0b:52:f2:c4:88:02:46:65:6d:87:79:c3:1f:8a:94:87:11:df:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Mar  5 18:15:03 2024 GMT
            Not After : Mar  4 18:20:03 2025 GMT
        Subject: CN=BBE29ADFF98AC68AEDE864EC320A5B0C39A8B4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:84:1e:fb:d0:0d:34:d3:6e:44:b2:aa:17:
                    09:2a:16:36:b5:aa:1c:83:8c:5f:83:6a:85:d4:d3:
                    d9:c6:bc:68:b0:5b:36:b7:e0:02:72:c9:bc:9d:29:
                    db:64:20:a7:12:ba:95:d9:9e:c0:c9:d4:ec:97:73:
                    e1:ed:87:e4:92:30:9d:82:58:40:2c:bc:5f:8f:76:
                    bc:c4:87:15:64:d4:e2:39:cc:e1:81:b4:09:01:c4:
                    1e:24:99:26:83:9d:6c:57:0e:9d:80:d1:05:46:38:
                    2c:ad:1e:c5:89:aa:04:a4:fe:96:7a:44:3b:04:d6:
                    18:a8:56:7c:50:77:73:e6:01:19:bf:67:8f:0b:03:
                    dd:02:2f:20:31:e6:bc:34:8c:75:3a:46:06:29:72:
                    bc:6a:04:56:7e:65:96:eb:44:8a:fa:f6:67:c1:56:
                    e6:aa:cb:dd:f8:8f:be:74:f5:22:24:b2:f9:30:1e:
                    39:1b:c5:e3:b1:bf:91:9c:96:03:5b:d9:76:5a:b8:
                    27:82:a6:24:2d:ab:7f:9e:c3:e2:b3:2a:d2:b4:bc:
                    88:b0:84:67:30:a8:40:e2:b5:3f:e8:9f:62:41:a8:
                    6f:7a:1d:84:31:9e:a6:29:03:28:01:9e:80:5d:a8:
                    b8:31:f1:e3:40:31:70:8f:70:98:d5:50:72:4d:4d:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E2:9A:DF:F9:8A:C6:8A:ED:E8:64:EC:32:0A:5B:0C:39:A8:B4:E2
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3233302e33332e302f32342d3234203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e4:19:95:01:b9:31:b5:18:ff:af:b4:91:af:83:ec:7b:97:
         ba:ce:03:95:54:19:7c:c9:17:9c:b8:1b:2f:7b:cf:db:3b:71:
         95:fc:f2:04:ce:60:38:56:8b:a8:22:75:f5:9a:25:fc:20:c7:
         31:73:c2:e1:b4:1f:6a:51:0d:6f:b5:4c:47:ee:92:c3:19:33:
         c5:80:13:79:ba:24:d0:32:99:e5:ae:39:b6:7d:4e:b0:d6:a2:
         3b:e6:0a:33:41:e7:2e:c7:aa:85:c4:83:b4:a6:c1:fe:c4:cb:
         ed:f3:82:ab:65:f1:87:19:22:5c:67:84:e9:70:a0:04:78:77:
         fd:16:04:fb:16:db:fa:d3:94:24:f3:be:c7:a5:fe:25:9a:fe:
         a9:69:94:a8:16:f6:56:d9:d0:98:ae:bf:d7:1d:8f:18:41:f2:
         da:bc:5c:b8:d6:ff:1c:c9:21:64:30:af:c1:b8:09:db:fc:f2:
         3f:73:b6:9a:69:fe:76:8a:0f:a8:65:a8:4a:88:27:7b:48:f9:
         47:7c:c4:a0:e6:a6:c9:ef:27:32:e9:0d:55:d5:ab:d0:24:f4:
         4b:68:4f:ba:73:1b:9e:83:65:dc:a1:a6:f4:76:77:13:e0:e8:
         0b:6e:9d:bf:5f:f3:04:70:b2:9d:17:b9:c5:c2:9d:99:cf:c6:
         b9:90:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org