Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa
File:                     34352e372e3230382e302f32342d3234203d3e20323635373239.roa (raw, json)
Hash identifier:          99Bb9/Fc89+Vh3Leq1qmWPxQimKA0gmPI/DiqpatwUY=
Subject key identifier:   61:CD:98:84:84:05:59:2F:F4:80:B3:EE:CC:5D:42:8D:8C:A3:7E:3D
Certificate issuer:       /CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
Certificate serial:       5957BAF82643D6CE81BE073176F5F53FB2CE3284
Authority key identifier: 3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa
Signing time:             Tue 05 Mar 2024 18:06:45 +0000
ROA not before:           Tue 05 Mar 2024 18:01:45 +0000
ROA not after:            Tue 04 Mar 2025 18:06:45 +0000
asID:                     265729
IP address blocks:        45.7.208.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:57:ba:f8:26:43:d6:ce:81:be:07:31:76:f5:f5:3f:b2:ce:32:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A
        Validity
            Not Before: Mar  5 18:01:45 2024 GMT
            Not After : Mar  4 18:06:45 2025 GMT
        Subject: CN=61CD98848405592FF480B3EECC5D428D8CA37E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:71:78:3b:e3:72:8f:96:24:91:62:73:a0:
                    b6:49:32:aa:d2:10:56:b4:ae:7a:40:73:10:59:b1:
                    a0:0b:cd:9f:9a:cc:62:48:b8:b6:1e:d0:1f:eb:d1:
                    1b:1d:31:f9:2a:c5:39:af:eb:c7:6c:f0:a6:ce:6d:
                    63:b6:57:39:f7:df:c9:6c:f8:51:87:b4:27:55:62:
                    47:5c:73:cf:61:78:f4:25:fb:9c:3f:59:b5:72:7e:
                    8d:c9:d6:99:62:92:58:01:79:ef:61:75:d3:54:76:
                    3a:eb:0c:61:73:96:1b:a8:c7:68:02:f2:42:10:e5:
                    ea:d0:cb:42:ab:a4:62:e8:49:aa:4a:2f:a7:0f:d8:
                    17:88:13:ad:f0:00:70:d3:f0:08:a2:d6:54:63:5f:
                    4b:98:0e:e0:61:c8:58:b0:fa:e0:6c:96:dd:f8:aa:
                    1d:62:fc:ad:d4:37:59:b7:ec:08:cc:38:1c:3f:27:
                    c4:d8:5d:01:32:b6:a6:cc:a9:d4:d4:b4:f5:15:08:
                    8b:d7:a0:34:b3:8e:68:c6:aa:f7:eb:01:53:09:82:
                    23:b9:b9:37:bb:a2:2c:0d:af:b6:a1:73:37:6c:f8:
                    06:5f:68:ac:e7:99:7c:85:c3:d1:52:f2:78:bf:b0:
                    de:e7:50:a8:18:8d:9c:49:f2:f5:a7:9d:f0:8a:ca:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CD:98:84:84:05:59:2F:F4:80:B3:EE:CC:5D:42:8D:8C:A3:7E:3D
            X509v3 Authority Key Identifier:
                keyid:3A:74:8E:67:E7:C3:9A:7A:19:6D:27:CB:2F:4D:E6:C9:B8:3D:42:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A748E67E7C39A7A196D27CB2F4DE6C9B83D427A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF9F2669DCA28E525919E44E4FEDCD5FFD0FDF0FEEAA423025749A3CAA2C55FB/0/34352e372e3230382e302f32342d3234203d3e20323635373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:9a:c8:43:b0:d7:99:f2:1b:48:b4:af:22:24:84:3d:4e:
         8f:85:f9:de:c9:32:fa:0d:92:12:0a:b8:73:b4:4e:ce:c2:ac:
         f2:a3:d8:61:af:ee:97:eb:59:53:bd:9a:0f:c9:b2:30:2e:a9:
         17:92:91:51:7b:2b:74:ce:3c:2c:8d:d0:6e:52:56:ec:22:2a:
         5a:ad:05:65:91:96:ec:00:3c:04:f7:76:fa:83:42:63:ba:77:
         dc:cf:65:89:40:66:25:bf:55:88:98:ec:b4:3a:44:05:1d:24:
         09:c1:48:a6:0f:da:9b:71:27:a1:7c:d4:fe:d8:46:49:47:5a:
         8f:7f:57:1a:0b:eb:50:24:ff:0d:04:c9:b1:cd:22:9d:52:2e:
         d9:b7:63:73:7e:89:63:be:04:3b:39:ee:b2:28:95:7c:26:b3:
         e0:04:2e:f2:35:28:eb:75:8d:dc:1f:e8:72:b6:d4:80:d3:95:
         ec:9b:6d:a7:54:a8:f8:e5:97:d4:33:39:96:e7:eb:ca:ce:c8:
         d8:5a:bd:d4:49:1d:7b:b2:0c:b7:c4:9b:53:f9:b9:dd:4b:34:
         a4:3b:a3:af:c5:83:2d:7c:ed:1f:90:d6:0c:5c:9a:6a:73:66:
         cc:d9:e9:52:02:b4:e2:a0:27:7d:ae:87:98:dc:7a:89:9f:6a:
         fb:c5:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org