Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e20323634363638.roa
File:                     34352e37312e3138342e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          d4YD4e2ZEseaoXzmyV7arZAK8y26Ds6YLea/tJ5FelU=
Subject key identifier:   AE:0C:99:DA:6A:6C:BD:22:76:3A:81:24:20:05:60:E5:D4:93:FA:D7
Certificate issuer:       /CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
Certificate serial:       017F9D9465289605E0C674A11AEAB076F430AFCD
Authority key identifier: BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:48:25 +0000
ROA not before:           Tue 05 Mar 2024 17:43:25 +0000
ROA not after:            Tue 04 Mar 2025 17:48:25 +0000
asID:                     264668
IP address blocks:        45.71.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7f:9d:94:65:28:96:05:e0:c6:74:a1:1a:ea:b0:76:f4:30:af:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355
        Validity
            Not Before: Mar  5 17:43:25 2024 GMT
            Not After : Mar  4 17:48:25 2025 GMT
        Subject: CN=AE0C99DA6A6CBD22763A8124200560E5D493FAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:90:da:a3:54:aa:bf:13:4a:c8:70:12:46:
                    aa:94:a6:17:e0:1f:23:c9:15:18:57:d4:76:1d:cc:
                    e2:39:58:d1:f2:f2:2d:47:d3:83:99:f6:af:ff:d4:
                    8b:12:1f:8d:4c:25:cf:59:ef:39:56:e8:8a:31:11:
                    5c:22:ef:87:51:f7:f0:45:e8:f7:c0:86:a6:b8:68:
                    4b:bc:6e:6f:82:05:39:38:95:f1:b4:89:54:e5:87:
                    bf:2e:d9:65:80:84:43:f4:68:77:fc:dc:0d:6b:5b:
                    fe:4e:0a:55:4d:d1:05:9b:df:33:c1:88:80:f0:65:
                    7b:6d:64:2c:32:fc:98:92:5a:b6:71:84:27:41:aa:
                    f5:67:68:51:cf:2f:78:11:92:4a:bd:5a:9a:c8:72:
                    53:7a:5b:a1:67:ff:71:80:2a:33:f5:82:f4:a1:ef:
                    44:f0:98:6a:23:d2:ce:2e:76:4f:0c:fc:46:5e:cb:
                    b4:35:d1:77:0b:58:3c:d7:c9:15:47:d0:22:e9:4c:
                    22:43:5d:7a:f0:7e:0f:c9:d0:01:0e:30:0e:19:db:
                    84:43:fb:06:5d:63:29:8e:da:e9:c1:91:a2:bc:89:
                    19:85:a1:d3:3d:e5:4e:2a:42:ff:69:27:2b:43:5e:
                    2e:55:ae:f7:ca:a3:6a:0b:07:a1:09:c6:0c:b4:4c:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0C:99:DA:6A:6C:BD:22:76:3A:81:24:20:05:60:E5:D4:93:FA:D7
            X509v3 Authority Key Identifier:
                keyid:BE:6B:84:F3:8B:EB:E6:F3:5E:C7:9C:B8:35:CA:E0:A3:F9:21:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE6B84F38BEBE6F35EC79CB835CAE0A3F921B355.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDBF09B3CAE1A376B8986E8C71550097CDFFD30F14F2FD2790FF48D55E3D54C1/0/34352e37312e3138342e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:06:f2:04:34:d0:35:f2:f9:49:26:0e:fb:67:bb:1e:e3:72:
         be:c4:9e:c2:6b:d0:52:ca:15:93:d8:00:80:26:5e:c6:f4:6d:
         71:c9:83:05:e1:1f:06:f4:99:74:d6:e0:fc:be:d0:51:a1:34:
         4c:5a:92:76:59:c1:22:e5:c5:6c:c1:19:43:09:25:f9:e9:43:
         be:e2:8f:94:b2:32:07:04:71:c4:6b:88:2b:00:8f:1a:6e:ab:
         dc:51:30:11:f8:01:a3:e1:68:e6:e3:8d:59:fb:ba:44:de:b7:
         4b:40:d4:35:ef:76:f6:50:ca:ef:8c:9d:dc:07:a3:f3:88:5a:
         c7:b7:e3:fe:63:0a:4a:8c:61:6f:f4:3a:3f:7b:b9:98:5d:bc:
         e0:c2:13:8c:09:10:82:be:b6:db:cc:33:2a:2c:5f:02:b1:57:
         b3:ed:03:a9:13:88:5f:cc:49:66:85:2b:ef:15:c3:d9:b7:57:
         76:17:f0:bf:df:1d:90:d1:1a:91:55:80:89:e6:ac:ae:b3:f7:
         e6:27:d6:b2:ab:f9:92:01:3e:2b:c0:ca:25:25:8d:9b:d3:94:
         7d:64:2c:42:21:da:62:0e:73:18:db:54:11:92:b7:9b:d9:8d:
         de:80:3d:47:79:00:94:79:37:65:e3:f5:2f:a0:13:b9:4f:a1:
         93:3d:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org