Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230372e302f32342d3234203d3e20323639373337.roa
File:                     34352e3138312e3230372e302f32342d3234203d3e20323639373337.roa (raw, json)
Hash identifier:          WOWS+oPMSljJebD804GWb5akIV7d1EBRZCCtovGRKZA=
Subject key identifier:   09:CB:BC:66:1E:09:CF:2C:48:86:3B:C5:12:12:E7:50:AF:0D:16:2B
Certificate issuer:       /CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
Certificate serial:       4A3092D177B31314A6267F9CF585089CF20FC3D1
Authority key identifier: 85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230372e302f32342d3234203d3e20323639373337.roa
Signing time:             Tue 05 Mar 2024 18:12:02 +0000
ROA not before:           Tue 05 Mar 2024 18:07:02 +0000
ROA not after:            Tue 04 Mar 2025 18:12:02 +0000
asID:                     269737
IP address blocks:        45.181.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:92:d1:77:b3:13:14:a6:26:7f:9c:f5:85:08:9c:f2:0f:c3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851F72AF17FC1DA87BB197750BC5B43F401D78D2
        Validity
            Not Before: Mar  5 18:07:02 2024 GMT
            Not After : Mar  4 18:12:02 2025 GMT
        Subject: CN=09CBBC661E09CF2C48863BC51212E750AF0D162B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fc:e8:71:0c:7f:75:87:18:1a:d4:db:4a:ea:
                    f7:35:cd:91:c7:9d:a4:42:38:87:93:77:02:3b:a8:
                    e8:11:5f:4e:bf:26:f6:72:5a:73:a0:2b:e9:9d:2b:
                    26:f9:01:90:2a:44:f6:e6:8a:72:41:0f:fa:9a:41:
                    98:87:e4:80:53:fe:b5:39:c6:70:41:9e:9b:52:82:
                    1f:7f:a4:75:b7:1f:95:93:fd:15:03:31:c8:18:7e:
                    40:25:cd:76:8a:06:70:ef:0a:1e:45:46:84:55:fd:
                    f3:db:c3:1f:9c:c7:aa:43:dc:8d:54:0b:c5:4a:42:
                    d5:94:7e:ef:55:3c:19:60:13:1e:a5:6a:22:55:d5:
                    40:51:d2:2a:0d:aa:bd:fd:46:98:e1:b0:18:a7:af:
                    1e:5c:53:b4:a3:c7:62:61:b1:a5:d2:42:36:42:dd:
                    27:eb:af:52:44:c3:f5:b0:e9:cd:af:97:59:07:7b:
                    f4:26:6b:0a:60:5a:62:eb:fa:c4:e9:d2:fc:ac:1e:
                    74:1e:63:47:a9:a2:e1:f0:a7:1e:72:e5:15:30:fe:
                    db:fa:61:d6:c1:4b:5e:d8:ce:02:1d:7c:6b:07:99:
                    d0:86:e3:13:40:61:10:9d:35:d0:2d:47:56:d6:42:
                    68:4b:05:fb:4f:91:32:52:ff:1f:d2:42:28:43:84:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:BC:66:1E:09:CF:2C:48:86:3B:C5:12:12:E7:50:AF:0D:16:2B
            X509v3 Authority Key Identifier:
                keyid:85:1F:72:AF:17:FC:1D:A8:7B:B1:97:75:0B:C5:B4:3F:40:1D:78:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851F72AF17FC1DA87BB197750BC5B43F401D78D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D58723A0FB36F7E9997AB05E915333B8B2B140E16E90374FEEC926DA02D8AD96/0/34352e3138312e3230372e302f32342d3234203d3e20323639373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:05:6b:19:44:3e:5c:0d:6b:70:3e:1c:58:f4:21:95:23:b8:
         86:a5:ba:09:ac:3e:37:fa:13:64:64:ff:75:ff:a2:d1:66:45:
         56:fd:bb:b0:5e:5e:70:c5:7f:fb:07:4d:42:b5:20:10:7e:3d:
         74:e7:97:69:43:ab:3e:20:a7:34:f5:72:5a:3b:b4:ed:bc:55:
         cc:f8:c6:43:59:06:19:1a:66:d9:d3:99:f6:1a:b1:bd:34:9d:
         48:7d:68:79:fb:97:61:6c:e5:8f:74:39:38:b3:ec:32:d0:a6:
         0a:c8:4f:bb:fe:29:b1:43:56:d9:e6:85:b1:85:06:e8:74:ea:
         88:04:95:64:6e:1b:69:de:92:ad:bf:8e:b5:b5:12:26:18:a0:
         1d:bc:f5:35:0d:92:b6:cf:76:c2:2a:a2:e3:96:cd:de:2a:e7:
         ab:e2:34:f5:ac:7b:1d:dc:11:eb:92:c7:94:b0:15:0e:9f:a2:
         65:0b:a5:35:3f:5f:98:18:86:dd:fc:22:95:cd:5a:61:90:ca:
         eb:e9:3e:c0:19:43:e1:b4:5c:3f:72:a8:b6:6e:b9:d9:90:4c:
         03:57:89:51:6e:62:92:c3:e7:e6:01:c0:46:20:53:ea:e4:a3:
         fb:ff:ed:c8:da:7e:0d:0c:64:90:c6:f0:8c:be:7f:89:dc:f2:
         3a:a5:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org