Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3234203d3e20323636373737.roa
File:                     34352e3233352e39382e302f32342d3234203d3e20323636373737.roa (raw, json)
Hash identifier:          2muWO/J8iBNYH++gXsv+8qtI+5vnCHagncXVbJdoiv4=
Subject key identifier:   F3:63:26:79:59:40:3B:F7:1E:9B:1C:BA:61:55:97:48:59:86:E3:0D
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       33823C79F029C5D618610E53B6225B40AB8B6E4A
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3234203d3e20323636373737.roa
Signing time:             Wed 02 Oct 2024 16:35:01 +0000
ROA not before:           Wed 02 Oct 2024 16:30:01 +0000
ROA not after:            Wed 01 Oct 2025 16:35:01 +0000
asID:                     266777
IP address blocks:        45.235.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:82:3c:79:f0:29:c5:d6:18:61:0e:53:b6:22:5b:40:ab:8b:6e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Oct  2 16:30:01 2024 GMT
            Not After : Oct  1 16:35:01 2025 GMT
        Subject: CN=F363267959403BF71E9B1CBA615597485986E30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:00:c3:f5:0b:9f:ca:db:7a:c4:d6:f3:30:
                    f2:74:26:81:e2:d9:88:50:83:e6:2d:de:b0:48:da:
                    09:7c:8f:4f:16:73:cf:83:f0:e8:d1:4a:95:1f:e7:
                    3f:68:77:e4:66:8e:95:22:4a:d7:93:db:d9:d0:4f:
                    6d:0d:df:8f:f3:89:10:82:d9:1c:ff:7f:df:88:67:
                    9c:3f:3e:67:88:61:ce:2d:a9:3a:6a:03:6e:10:e9:
                    02:48:61:f2:5e:f6:b7:9d:40:07:11:2d:ab:44:bb:
                    83:e6:4b:12:32:54:f0:ac:5b:5a:5b:93:3e:0f:b7:
                    bc:3c:f1:a2:c6:ba:a5:4b:fd:d9:da:70:58:47:39:
                    a7:23:3f:09:f3:03:6c:58:29:9b:c2:1b:6b:2b:1f:
                    8c:76:02:c1:ae:78:e0:eb:c3:bd:f0:ea:2b:96:6f:
                    04:4c:5e:8a:26:8e:40:11:02:c2:db:1c:2e:de:a0:
                    9c:ca:c1:cb:84:c9:0c:f8:c7:ae:65:b2:f0:b1:6a:
                    25:bc:ac:ac:a2:fb:99:7a:bf:d0:b5:5c:4d:34:ad:
                    6a:cf:49:e3:9d:a2:ca:1e:cb:d1:23:d0:7f:6c:3b:
                    62:f8:49:7c:56:3b:7c:c0:01:a9:c6:c5:48:01:02:
                    21:c5:8c:5a:e4:2b:3f:f4:d2:dd:d6:9a:7f:3c:f5:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:26:79:59:40:3B:F7:1E:9B:1C:BA:61:55:97:48:59:86:E3:0D
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39382e302f32342d3234203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:fc:7d:0f:46:c8:fa:f5:c1:93:d3:14:cc:09:74:a2:8d:ec:
         fd:12:f9:8f:0c:4b:23:45:c6:38:eb:e8:d4:0d:98:9d:7c:7e:
         38:f5:33:56:c0:ba:6d:6a:29:95:a5:4f:e3:8c:28:71:8f:9c:
         75:b7:c6:7f:82:42:5d:06:ac:47:a6:73:df:c4:5f:2e:ae:24:
         db:fd:8e:d1:ba:e9:f5:03:48:b1:5b:c5:52:5c:63:74:7c:14:
         2a:3d:a7:97:70:c3:2e:8b:cb:63:86:63:51:2d:2b:2d:12:0a:
         c9:15:5a:aa:c5:db:bb:c9:4e:43:ff:63:58:b0:4b:ae:32:69:
         b1:cd:e6:c5:c0:56:37:ba:60:c7:7b:d7:01:8f:14:b8:8f:6d:
         7f:25:62:b1:b4:3c:3f:b3:ca:3a:c9:16:a5:ef:40:04:f3:19:
         73:64:63:e7:6d:42:fa:c0:8f:68:6b:d9:b4:6a:19:4b:91:b8:
         ef:e5:aa:de:9c:0e:f2:a8:9f:67:f8:a6:4f:1d:c3:7f:00:4f:
         74:a3:43:e6:86:c3:94:bb:35:67:75:aa:99:c0:6d:52:f5:39:
         e6:a8:0a:80:df:58:e0:3a:f4:a5:0e:26:02:23:23:36:0c:11:
         ec:91:00:a0:33:f5:e6:f6:f5:2c:64:64:e6:08:30:fb:e0:be:
         b4:d3:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org