Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32312e302f32342d3234203d3e203233343730.roa
File:                     34352e3136342e32312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          EAi4HW/T/owujdCsNi+9/lN/tP+dPsScG5gKvoh9bk8=
Subject key identifier:   E0:A2:B3:0F:36:A6:3E:64:FC:95:43:6E:92:24:57:06:4E:42:9B:25
Certificate issuer:       /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial:       3D87F7863297AACB71AF9EAEBD52F557B75A9BD2
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32312e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Mar 2024 17:50:52 +0000
ROA not before:           Tue 05 Mar 2024 17:45:52 +0000
ROA not after:            Tue 04 Mar 2025 17:50:52 +0000
asID:                     23470
IP address blocks:        45.164.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:87:f7:86:32:97:aa:cb:71:af:9e:ae:bd:52:f5:57:b7:5a:9b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
        Validity
            Not Before: Mar  5 17:45:52 2024 GMT
            Not After : Mar  4 17:50:52 2025 GMT
        Subject: CN=E0A2B30F36A63E64FC95436E922457064E429B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d4:59:ab:18:44:d0:90:a0:a5:0e:ac:88:21:
                    bf:99:68:55:e4:cd:cd:d6:6a:dd:ae:d9:e5:63:43:
                    e5:40:0e:b5:cc:3c:97:99:bc:56:dd:f3:53:25:fa:
                    47:7c:9f:0f:1c:9e:f6:6c:77:f2:92:eb:2b:8c:a7:
                    d3:09:c9:59:58:3d:e4:08:f0:08:f5:fe:13:9f:26:
                    bb:53:c0:e2:33:b4:c1:c9:c7:47:43:f9:22:8f:cb:
                    92:23:41:0a:7f:e5:0a:4f:37:95:cc:f1:4c:42:3c:
                    10:46:3a:c2:08:f3:38:0c:96:fd:6b:95:02:c2:44:
                    4d:ab:0e:ce:8c:97:0e:f9:34:fa:02:d7:e5:4a:75:
                    97:aa:1e:3f:04:00:9f:0d:22:6a:0f:3d:6a:c8:06:
                    36:72:0b:58:22:2a:fa:35:f0:66:43:67:7b:d3:a0:
                    24:7f:3a:2e:aa:35:73:f2:53:38:b8:c1:71:93:97:
                    c8:8a:0a:b8:ad:b9:fa:a1:c9:c3:22:43:8c:06:8e:
                    8c:51:7a:d0:b3:43:46:13:56:36:53:94:df:93:29:
                    7f:e2:41:75:ff:96:47:13:c4:72:51:2f:37:ec:c5:
                    22:31:e6:3a:d5:aa:94:2e:e2:51:56:df:6b:a0:09:
                    47:cd:e6:8b:a4:98:a3:19:ee:e0:94:ef:db:7f:5a:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A2:B3:0F:36:A6:3E:64:FC:95:43:6E:92:24:57:06:4E:42:9B:25
            X509v3 Authority Key Identifier:
                keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32312e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:05:ab:85:49:25:2e:f8:d6:f9:99:b9:5d:c3:64:fc:dd:e7:
         05:e4:1b:74:c8:54:41:76:2f:af:e0:87:ab:e0:d7:84:bd:85:
         68:c2:cd:af:b1:6e:b0:30:49:33:4f:38:c8:6f:1a:dc:3c:9d:
         78:cc:45:bb:cd:93:70:28:0a:07:e1:58:10:14:84:79:20:df:
         38:de:e6:f8:78:61:93:b7:4d:67:4e:9e:07:a0:18:24:b5:ba:
         fa:a6:71:f1:4d:2f:f3:4f:3c:e2:b8:21:89:68:16:8a:89:da:
         8d:08:fc:88:4c:c9:9e:f0:1c:fb:d4:2c:55:be:85:20:10:70:
         83:cd:fd:39:2a:83:ee:ad:b2:16:22:da:de:b9:ab:99:07:38:
         cf:8d:83:49:fd:fe:a9:bf:d3:7c:8b:19:b0:98:95:1f:51:f2:
         7a:f2:5c:47:83:e5:0f:28:57:97:dc:53:1a:cc:69:21:5d:d9:
         ea:10:2a:ba:27:00:8b:e8:61:4f:f3:ce:a5:4a:03:ed:4e:72:
         e5:36:f8:66:ad:0e:91:b2:d5:49:57:31:15:b9:52:f3:7e:8a:
         90:96:22:2a:b8:41:52:f1:e9:1d:55:60:a7:b1:e1:25:3d:ae:
         8b:08:63:52:f8:c1:86:be:13:36:35:5c:d5:6a:99:63:e0:54:
         67:8f:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org