Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa
File:                     34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa (raw, json)
Hash identifier:          D2ZXr4yxv5AbAmIOMY713/KFlJEeCm80eeEE0v8/tQg=
Subject key identifier:   2D:BD:E6:E6:F6:78:87:6C:3F:7A:8A:20:D2:FF:64:94:A6:0B:57:F7
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       57DB1646BB42A726E09849465D0C8FE980396712
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa
Signing time:             Tue 05 Mar 2024 18:06:37 +0000
ROA not before:           Tue 05 Mar 2024 18:01:37 +0000
ROA not after:            Tue 04 Mar 2025 18:06:37 +0000
asID:                     269886
IP address blocks:        45.191.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:db:16:46:bb:42:a7:26:e0:98:49:46:5d:0c:8f:e9:80:39:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Mar  5 18:01:37 2024 GMT
            Not After : Mar  4 18:06:37 2025 GMT
        Subject: CN=2DBDE6E6F678876C3F7A8A20D2FF6494A60B57F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e6:fb:ee:e5:92:f6:25:90:63:63:0c:10:7b:
                    58:30:d6:ef:69:5a:a4:ea:71:9d:c5:e3:41:40:68:
                    63:57:68:71:79:64:76:ba:74:99:56:32:e4:48:07:
                    6e:36:5a:a7:c1:16:af:be:15:db:4b:f5:6b:06:a7:
                    27:5b:fb:57:02:df:bc:ab:ba:aa:cc:4e:81:a4:b3:
                    c8:92:5a:12:bc:6b:1b:32:57:5f:cf:04:e0:af:7d:
                    80:eb:8f:a2:ac:ea:2b:e1:50:86:b1:f3:48:37:f1:
                    79:4a:c0:e1:91:72:fb:c8:5a:dd:9d:be:30:d6:29:
                    a8:6e:fe:c1:ee:49:c1:9f:7a:14:74:33:5d:c1:fa:
                    31:81:b4:b8:6c:73:4a:75:25:88:30:34:ba:11:fd:
                    96:29:1b:67:7d:5e:97:67:ee:c5:a1:04:dc:08:0d:
                    b2:ad:e7:39:01:bd:5a:ee:b9:4c:a6:a4:73:34:59:
                    1c:6e:86:50:25:23:b5:dc:e4:71:2b:c0:89:ab:28:
                    c8:17:46:e1:a0:49:2e:b1:1e:49:0f:9e:70:76:2a:
                    db:30:29:31:eb:99:46:0f:a4:6d:75:31:2f:74:24:
                    6d:ce:ad:cc:ef:c2:4a:ca:82:4a:ea:56:7b:9c:a7:
                    5a:ff:72:24:3e:de:b8:11:a3:dc:2f:93:cd:98:92:
                    dd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:E6:E6:F6:78:87:6C:3F:7A:8A:20:D2:FF:64:94:A6:0B:57:F7
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130382e302f32322d3232203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:be:9f:97:0b:bf:35:7c:ca:e6:ef:10:46:7b:87:8d:df:e2:
         ca:83:1d:e1:50:f6:b4:d1:c7:e2:54:f8:67:ca:98:cf:e5:c7:
         41:2b:4d:16:a5:a7:4e:b0:e9:81:4b:8b:4a:dd:a4:94:76:a8:
         23:65:38:b8:5e:9d:c9:f4:81:b2:18:2b:0d:80:3b:ad:62:6a:
         f9:91:e8:ba:51:2d:e6:65:11:24:96:de:92:20:53:c8:67:47:
         6a:58:62:61:11:e6:22:f2:83:1f:b4:d8:73:6f:ce:fa:47:45:
         48:ff:49:a6:c3:6b:22:5f:87:11:aa:4a:f8:78:24:7a:8b:d5:
         92:30:06:22:7a:ee:77:4b:69:58:c5:8a:85:f7:01:c3:b0:bf:
         4f:46:40:32:41:ef:fc:34:b1:ff:61:a2:c2:c9:3f:c0:ff:bd:
         50:8e:94:15:56:4c:5f:94:13:bc:cb:89:54:3a:43:27:4c:0c:
         1a:0b:0a:d5:a5:29:9b:78:80:eb:c4:60:ac:b0:72:04:85:e7:
         90:30:88:2f:be:96:c0:82:72:79:62:82:0e:ad:98:db:b0:21:
         40:bc:cd:fe:1c:eb:06:f7:ca:0f:4e:e4:d3:38:66:92:07:61:
         3e:21:d7:f6:14:f5:d1:d7:89:f4:46:6b:69:eb:62:94:b5:40:
         f6:b2:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org