Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33352e302f32342d3234203d3e20323636383736.roa
File:                     34352e3136302e33352e302f32342d3234203d3e20323636383736.roa (raw, json)
Hash identifier:          rmbBfvsf1OyuQ5YgcO7Z7ANLLDsYVm/uNB9II5kpu64=
Subject key identifier:   CD:50:FA:39:42:29:96:2A:44:72:E4:FE:60:E2:73:31:31:AE:76:96
Certificate issuer:       /CN=9A0A973B46C2B2B4900ED226E666340849864C77
Certificate serial:       5D920E591B80E4F7DBA4E223B9D78CF771ECD314
Authority key identifier: 9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33352e302f32342d3234203d3e20323636383736.roa
Signing time:             Tue 05 Mar 2024 17:45:00 +0000
ROA not before:           Tue 05 Mar 2024 17:40:00 +0000
ROA not after:            Tue 04 Mar 2025 17:45:00 +0000
asID:                     266876
IP address blocks:        45.160.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:92:0e:59:1b:80:e4:f7:db:a4:e2:23:b9:d7:8c:f7:71:ec:d3:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A0A973B46C2B2B4900ED226E666340849864C77
        Validity
            Not Before: Mar  5 17:40:00 2024 GMT
            Not After : Mar  4 17:45:00 2025 GMT
        Subject: CN=CD50FA394229962A4472E4FE60E2733131AE7696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:a9:f1:0d:92:75:71:b2:08:24:6e:73:0b:
                    12:cd:93:f0:57:34:85:c2:8a:4b:68:8a:db:a0:6b:
                    b6:50:d9:18:74:5b:21:2c:b4:a5:31:fd:40:25:68:
                    10:8a:44:43:9d:42:a3:9b:1e:3e:cd:56:78:49:a0:
                    b9:82:79:29:89:bd:ee:39:68:89:d8:12:7b:ac:7e:
                    cd:2e:c1:16:8b:ff:9f:b1:fc:76:ae:6d:92:64:11:
                    8e:d7:41:6e:ed:22:84:ca:1c:82:58:24:4b:18:64:
                    23:a7:02:0e:a3:e9:b7:05:c8:e1:0f:9e:ff:59:5b:
                    b3:8e:03:8a:d4:4b:8b:21:64:8f:bd:07:8a:5e:57:
                    bc:56:c3:08:46:9d:b9:23:f9:70:cc:0a:ce:ef:73:
                    cc:1f:94:f0:ad:86:f4:2a:04:97:26:4c:d6:4b:3e:
                    61:1b:b7:fa:06:87:38:7c:d8:d5:70:f9:ce:96:4c:
                    f0:1a:e5:3d:09:a7:e6:08:07:53:b9:76:59:39:8f:
                    b8:c5:8b:e5:fd:c3:7a:ff:30:5a:9a:e6:ab:a0:03:
                    6c:39:3d:8e:ee:56:86:6c:00:1a:8c:81:2c:66:f7:
                    21:dd:87:97:88:f9:42:2f:85:6c:80:27:de:a6:43:
                    54:d8:a6:ff:0b:53:3d:47:89:17:89:ff:dc:17:6d:
                    d1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:FA:39:42:29:96:2A:44:72:E4:FE:60:E2:73:31:31:AE:76:96
            X509v3 Authority Key Identifier:
                keyid:9A:0A:97:3B:46:C2:B2:B4:90:0E:D2:26:E6:66:34:08:49:86:4C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/9A0A973B46C2B2B4900ED226E666340849864C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A0A973B46C2B2B4900ED226E666340849864C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B292262CC1DF8A8DACD8A3713A6530E936828039FAC4A4268E2E91EB03C6C91E/0/34352e3136302e33352e302f32342d3234203d3e20323636383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:6f:fc:ab:7b:08:90:a2:dd:f7:5d:94:c3:3b:fd:ca:c9:
         41:ce:cd:17:41:bc:cb:49:15:21:1d:bf:18:cc:06:fd:5d:11:
         47:d8:9b:dc:37:b8:34:2c:95:8a:c1:15:30:49:7b:d8:0c:03:
         1a:78:ca:90:ee:fb:bc:bf:56:40:59:92:c4:67:d9:64:e7:08:
         0b:45:f4:49:06:37:dd:0b:5d:4c:11:4e:ae:b8:6e:f3:a6:da:
         5b:c4:f6:5d:ff:17:f5:b4:fa:c9:2c:37:3d:24:ec:5c:35:61:
         45:88:d0:c2:17:1d:94:0e:7d:ca:3e:d1:60:bc:49:ad:5e:b5:
         00:11:c0:0b:4c:4e:1e:3e:70:1f:c3:81:0f:62:4c:de:44:2a:
         ab:c4:ae:c1:39:52:8e:a5:38:10:c7:de:65:22:80:c5:70:bb:
         f9:0b:95:2d:1a:d5:fb:b5:58:3e:0d:b0:ea:c3:87:e4:de:54:
         7f:7a:40:7b:81:32:69:0d:6d:f7:37:25:3d:0b:d1:aa:b3:ad:
         47:6f:ff:5c:3b:ee:0f:8c:32:37:70:09:67:1f:ad:54:d8:1c:
         f2:d6:4b:28:e4:fe:58:19:67:58:38:62:d5:5a:6e:23:a8:85:
         c3:52:0b:44:6e:57:4e:a3:57:ba:c6:5f:b7:78:e9:eb:86:32:
         dd:95:7b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org