Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
File:                     34352e3233342e38382e302f32322d3234203d3e20323636373632.roa (raw, json)
Hash identifier:          svnQ/qMEFJmsYnkhBtBBrz8TRvfYesSNhPPGAJJsoa8=
Subject key identifier:   C3:37:CA:D9:A1:33:D2:24:39:0D:28:91:01:A6:F2:2D:BF:F5:A6:F1
Certificate issuer:       /CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
Certificate serial:       13F95DF7397921A17769B9DA07EEA0FEF5CAEA55
Authority key identifier: D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa
Signing time:             Tue 05 Mar 2024 18:18:13 +0000
ROA not before:           Tue 05 Mar 2024 18:13:13 +0000
ROA not after:            Tue 04 Mar 2025 18:18:13 +0000
asID:                     266762
IP address blocks:        45.234.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f9:5d:f7:39:79:21:a1:77:69:b9:da:07:ee:a0:fe:f5:ca:ea:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09418521EA53A7D75F8FDF01F073B4955B0B259
        Validity
            Not Before: Mar  5 18:13:13 2024 GMT
            Not After : Mar  4 18:18:13 2025 GMT
        Subject: CN=C337CAD9A133D224390D289101A6F22DBFF5A6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:ec:cb:be:67:a0:b6:ca:43:6c:68:27:10:
                    87:f9:11:68:fe:d6:26:0b:5d:40:c2:4e:72:a0:ed:
                    4f:72:c6:0d:e6:6b:ce:e2:c3:95:68:45:d9:98:08:
                    21:f8:a6:00:8a:f8:29:6f:2c:78:52:5d:c4:a1:a7:
                    66:1d:e8:39:f9:24:e6:25:6f:1d:0a:3d:9a:cd:b0:
                    02:24:f8:b6:59:5b:a3:2a:33:b7:c5:35:ba:9e:1b:
                    83:89:6e:6c:24:b1:a5:d1:2e:f6:1d:ec:d5:31:e5:
                    37:09:d2:bc:b4:b0:24:31:0a:9b:b2:dd:c9:33:e8:
                    80:41:12:13:d8:50:cb:0c:d8:40:d5:f0:d9:f1:7f:
                    dc:b7:77:62:60:cb:3d:9c:d5:59:b1:48:40:85:da:
                    8d:f6:ae:fb:5c:73:14:49:7e:e0:fe:09:04:68:2d:
                    40:b3:fc:91:59:df:25:5c:0d:18:9d:95:2b:38:1f:
                    77:f0:37:4e:fe:0c:97:95:b8:d7:2c:14:98:e2:e3:
                    a8:b6:a7:90:01:90:40:7b:ea:d7:02:e4:7f:07:bc:
                    9c:af:ce:43:2f:eb:b8:db:59:1b:2b:5b:45:ec:a6:
                    2f:bd:2d:ef:de:d2:fa:34:88:32:cd:cf:49:42:21:
                    67:d1:3e:0f:52:06:6d:c3:3a:7d:a5:99:9c:15:31:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:CA:D9:A1:33:D2:24:39:0D:28:91:01:A6:F2:2D:BF:F5:A6:F1
            X509v3 Authority Key Identifier:
                keyid:D0:94:18:52:1E:A5:3A:7D:75:F8:FD:F0:1F:07:3B:49:55:B0:B2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D09418521EA53A7D75F8FDF01F073B4955B0B259.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BF9CEA9A0F070C9A952B7B8BCA2BB519EE001285EC2DF41394118981BFBB5389/0/34352e3233342e38382e302f32322d3234203d3e20323636373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:3c:6c:15:8a:5b:f5:94:80:c8:52:d1:c1:43:0c:11:2b:
         33:a1:45:f4:e6:10:61:e9:a3:99:17:96:c2:15:93:dd:4f:fd:
         be:4a:df:01:63:d2:6c:7b:d9:84:6e:9d:65:65:7d:00:21:59:
         db:72:86:39:b3:b5:fc:21:1b:ba:1d:6f:d3:42:bf:17:c4:28:
         fc:8e:cc:87:e7:81:8f:3c:28:7a:6f:9f:19:2d:e9:74:71:68:
         10:33:be:ba:a3:ff:8d:58:e2:b0:f2:fa:eb:70:5e:4b:1f:e7:
         0e:63:f7:52:b5:1c:52:b1:86:80:dd:4d:eb:89:31:c0:c5:98:
         1c:0d:c5:09:e2:96:13:dd:6e:da:de:df:fa:82:51:18:f6:89:
         0a:d6:a2:b2:3d:58:28:a4:4e:e7:59:00:c1:81:ee:d2:e7:61:
         73:5e:0d:90:01:a2:1e:1b:1f:ab:77:b7:e1:92:ea:95:17:22:
         34:22:9e:13:af:f7:c3:df:16:68:05:40:ea:ce:c1:29:2b:07:
         38:4b:2b:8b:a7:27:db:05:e1:13:81:cb:9b:a2:fa:b2:d0:00:
         da:ea:27:ac:c7:e9:0a:57:21:4d:7f:c6:49:df:1d:22:99:5d:
         64:f8:3a:e3:11:59:0d:a5:51:13:ef:f8:a3:01:77:e0:9d:1b:
         e8:e1:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org