Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37382e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233392e37382e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          FqD/x2Y9TpXJCgKpbZtAto82NpC55VP6q4REbOYoQr8=
Subject key identifier:   16:68:8D:A4:0A:55:45:21:9E:C3:57:59:2A:C6:9B:F7:A6:A7:18:8B
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       386D584DC35826D878EB7AD8A48DE95038ADE035
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37382e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 05 Mar 2024 18:02:39 +0000
ROA not before:           Tue 05 Mar 2024 17:57:39 +0000
ROA not after:            Tue 04 Mar 2025 18:02:39 +0000
asID:                     263157
IP address blocks:        45.239.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6d:58:4d:c3:58:26:d8:78:eb:7a:d8:a4:8d:e9:50:38:ad:e0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Mar  5 17:57:39 2024 GMT
            Not After : Mar  4 18:02:39 2025 GMT
        Subject: CN=16688DA40A5545219EC357592AC69BF7A6A7188B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:72:64:75:1d:fd:f9:58:50:ba:ca:c1:ed:ea:
                    4e:c5:6b:70:53:0a:fa:48:af:a0:f4:42:fe:64:a7:
                    89:08:fa:a8:9e:ed:00:fb:5a:85:18:a9:a4:4e:e1:
                    e8:b3:36:bf:8c:2d:4a:2e:30:c2:1a:05:dc:54:4a:
                    fd:59:01:50:8c:06:81:7b:23:35:a6:4f:2c:54:f2:
                    66:0d:44:5f:c7:fc:09:26:15:ca:9a:5e:6a:0c:8c:
                    2c:20:55:b1:db:aa:0f:5e:f3:22:39:3f:c4:40:6d:
                    6d:1b:d3:83:e9:20:70:c1:e4:ab:2f:08:86:03:50:
                    e7:20:a7:80:2e:19:6a:2d:22:79:0b:24:64:18:5c:
                    fa:90:77:70:7e:25:9a:6e:c8:94:7e:15:dc:be:ca:
                    c2:17:63:e2:e7:b5:2d:32:e9:d7:8f:2b:ed:3d:d4:
                    a7:5b:21:2e:5f:c5:ba:01:ae:2c:92:01:9b:54:2d:
                    12:c6:b3:5c:11:8f:23:ab:b6:e9:13:f5:99:7e:54:
                    65:87:b0:0b:44:e9:5d:f4:82:7c:d5:72:85:5d:d5:
                    15:7d:db:e9:57:f8:c6:59:b4:af:db:c3:a5:d6:1a:
                    1d:7b:6f:0f:15:39:ff:4f:81:37:10:c6:65:6f:1d:
                    42:0f:09:70:d3:f2:22:ef:b2:3e:48:63:7d:3d:50:
                    60:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:68:8D:A4:0A:55:45:21:9E:C3:57:59:2A:C6:9B:F7:A6:A7:18:8B
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37382e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:1d:62:98:7f:70:1a:89:7c:2f:84:f8:ae:fa:e4:05:2b:2d:
         d9:44:5d:d7:58:18:0a:ed:28:cd:cb:64:30:92:4d:0e:83:57:
         97:af:10:e6:27:59:6b:bc:34:2f:26:66:63:56:71:b6:eb:5e:
         d8:40:f2:34:e5:15:f6:e5:98:53:f1:93:d4:21:c2:cd:5f:4f:
         13:63:3d:3d:04:86:75:92:39:13:d2:98:63:66:50:31:e0:89:
         34:bb:87:8e:82:ec:29:1e:dc:92:a3:37:4f:e7:4c:ff:6d:d2:
         1c:0d:da:ba:82:1b:14:6a:9d:86:de:80:ca:ba:a6:d8:4e:3c:
         d8:1e:cc:8a:ab:42:37:fa:e4:3a:3a:a7:7c:b8:cc:b1:e0:56:
         77:a3:38:07:5e:6f:fb:89:29:5d:d8:be:87:6d:10:f0:ac:19:
         6c:00:ae:08:92:c2:71:7f:93:82:fd:8a:0c:8a:61:63:f6:de:
         eb:28:44:01:41:8c:05:c9:03:80:ab:66:ad:85:78:4f:1d:ce:
         c5:54:46:f8:84:98:40:b7:db:16:c0:2d:24:50:43:a6:1a:af:
         a1:05:cb:99:fe:ed:37:fb:52:06:08:72:3f:4b:f1:e8:dc:33:
         18:59:b3:f3:4e:44:3f:bb:ee:61:df:26:fc:6c:ec:0d:e9:a0:
         dc:ab:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org