Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/34352e3138352e32302e302f32322d3234203d3e20323633323232.roa
File:                     34352e3138352e32302e302f32322d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          nG08X9p3AkG5+khciwlyCKnJnV2FHAcyvg9+D9rgGwY=
Subject key identifier:   D4:BD:D3:29:E1:AA:9C:D7:E2:49:BC:88:9A:8E:70:E0:A8:3C:A0:08
Certificate issuer:       /CN=303D9AA210B739FDFB020F6AEAF9959B0A8B94F6
Certificate serial:       0258EF83C5EE13EF64EC033822CEEC4E30D6711D
Authority key identifier: 30:3D:9A:A2:10:B7:39:FD:FB:02:0F:6A:EA:F9:95:9B:0A:8B:94:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/34352e3138352e32302e302f32322d3234203d3e20323633323232.roa
Signing time:             Tue 05 Mar 2024 17:48:37 +0000
ROA not before:           Tue 05 Mar 2024 17:43:37 +0000
ROA not after:            Tue 04 Mar 2025 17:48:37 +0000
asID:                     263222
IP address blocks:        45.185.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:58:ef:83:c5:ee:13:ef:64:ec:03:38:22:ce:ec:4e:30:d6:71:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303D9AA210B739FDFB020F6AEAF9959B0A8B94F6
        Validity
            Not Before: Mar  5 17:43:37 2024 GMT
            Not After : Mar  4 17:48:37 2025 GMT
        Subject: CN=D4BDD329E1AA9CD7E249BC889A8E70E0A83CA008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:cc:c1:6c:bf:73:65:44:6b:08:ee:b8:f1:
                    55:c4:9c:ab:d8:04:ad:75:75:71:33:96:57:68:2c:
                    1a:c1:5a:79:cf:19:48:c3:65:e0:6f:0a:2c:2a:3b:
                    39:6f:27:8d:21:53:a8:d8:0b:41:43:d8:3e:48:58:
                    5f:d5:49:49:71:a5:8d:c7:1e:5f:f1:55:03:4a:00:
                    1f:6c:83:9c:2b:20:6a:64:1a:22:d8:6b:21:f3:7f:
                    b8:4f:ca:36:65:90:67:a4:f4:60:b3:b4:c5:40:4b:
                    4d:d5:15:c0:47:cf:cc:c3:de:d6:24:cf:b0:3f:d0:
                    9e:0a:b4:29:95:a5:0f:fe:f6:c6:68:f3:1d:b3:6e:
                    a2:be:3a:4c:3a:fa:23:4d:30:1a:29:dc:c4:50:25:
                    50:3a:22:a4:d6:c6:73:ee:92:35:fd:4e:68:17:d2:
                    a2:29:c3:81:5e:1f:e1:de:b7:3e:35:1c:52:34:57:
                    87:09:41:3c:9f:bf:68:e7:da:7f:00:e5:a3:16:b1:
                    47:5e:7d:d6:af:4b:77:18:cd:e3:23:6f:69:3f:c6:
                    19:51:78:4f:66:ff:f5:62:bf:5e:fc:fa:c2:96:fd:
                    17:ed:7a:de:e8:e7:8f:06:7c:c6:a1:99:cb:e1:20:
                    da:42:39:78:3f:46:f0:f8:87:ac:23:81:7e:ce:54:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BD:D3:29:E1:AA:9C:D7:E2:49:BC:88:9A:8E:70:E0:A8:3C:A0:08
            X509v3 Authority Key Identifier:
                keyid:30:3D:9A:A2:10:B7:39:FD:FB:02:0F:6A:EA:F9:95:9B:0A:8B:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303D9AA210B739FDFB020F6AEAF9959B0A8B94F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B88C5504AC1B86CA02BC7931DB9A846EA076901960A2C2625E8A34A4F4B851E8/0/34352e3138352e32302e302f32322d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:05:b1:9e:15:8d:d4:54:bc:62:13:ab:78:97:13:72:ac:48:
         59:25:07:cf:8f:95:dc:ea:ed:f1:32:49:07:46:e9:66:c2:82:
         40:5e:c7:ce:e0:5c:7a:0b:0a:0d:0a:ce:b4:fe:a5:99:37:ce:
         17:e8:08:cc:55:b1:16:88:72:35:0b:3a:19:24:34:87:93:db:
         4d:f6:c4:87:f4:01:cd:b8:7f:b6:b8:e0:05:f5:b1:cb:a1:12:
         13:81:29:da:8d:8d:fa:c4:d7:23:fb:29:a9:92:21:b5:17:71:
         ff:27:67:fa:66:4b:41:84:92:b2:e7:76:24:1f:af:ed:a4:a7:
         5b:9f:33:29:2c:2f:15:3b:a2:12:ff:35:04:96:e9:95:83:1c:
         0f:1a:24:87:de:44:77:80:db:3f:c0:aa:dc:b7:2a:29:0d:7a:
         c9:80:d0:9d:77:e7:29:61:c5:33:a0:ac:da:7e:de:c7:8a:7c:
         b4:d9:64:0b:91:75:6e:76:79:a7:46:a7:14:41:12:f4:81:7f:
         98:90:de:b2:b6:6a:de:fe:78:3e:3b:a5:fc:54:2a:9f:79:95:
         b0:67:cb:10:1a:dc:a2:10:22:a4:38:a7:fe:db:42:a2:cb:d7:
         4c:59:ea:e3:c0:6e:9a:cd:06:d9:36:64:00:9f:71:1f:a1:47:
         cf:b5:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:46 2024 by rpki-client on console-fra.rpki-client.org