Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa
File:                     34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa (raw, json)
Hash identifier:          YtR1e4yLe8WW+0kUXErAAcXr18rOKQwYARlo9VaPBTw=
Subject key identifier:   D8:E6:51:F0:6C:54:03:53:56:B0:40:99:E8:EC:6A:D0:A4:CB:CF:C3
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       2AF8C58D51547AE24A822D70B3E10A35A9E8F6AC
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa
Signing time:             Tue 05 Mar 2024 17:48:49 +0000
ROA not before:           Tue 05 Mar 2024 17:43:49 +0000
ROA not after:            Tue 04 Mar 2025 17:48:49 +0000
asID:                     266790
IP address blocks:        45.233.100.0/23 maxlen: 27

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f8:c5:8d:51:54:7a:e2:4a:82:2d:70:b3:e1:0a:35:a9:e8:f6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Mar  5 17:43:49 2024 GMT
            Not After : Mar  4 17:48:49 2025 GMT
        Subject: CN=D8E651F06C54035356B04099E8EC6AD0A4CBCFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:28:21:df:75:2c:98:ba:c7:cc:cf:4d:57:
                    82:38:63:28:21:3a:53:37:e1:c6:30:f8:f8:53:3e:
                    6f:a5:87:6a:a5:83:93:9a:30:42:57:0c:4f:fe:1f:
                    ad:3b:00:67:54:55:8d:18:81:05:df:cc:f1:d0:f8:
                    49:6d:a5:bf:f8:9a:58:45:5f:56:0c:15:6a:da:f5:
                    26:d0:11:6c:78:33:a8:b0:54:62:9d:32:29:0b:c0:
                    ab:0d:27:9d:5a:d2:e8:22:5d:40:17:59:ad:88:81:
                    b9:2a:aa:47:f8:c7:27:87:26:34:49:50:b0:30:dc:
                    8a:7e:17:be:3e:17:66:ef:26:d8:4a:c0:dd:a8:e2:
                    fc:5e:77:4c:42:ac:da:e7:9e:14:60:b0:81:75:8b:
                    9a:48:dc:dd:46:da:ba:66:e4:5c:99:0a:43:91:39:
                    b1:74:0f:3a:2e:70:c5:95:b9:72:66:6f:7b:90:27:
                    f3:3e:b4:bc:ed:a7:a8:20:d4:b6:f5:7a:ff:5a:8a:
                    2f:04:16:af:8b:a2:d3:8b:49:ba:28:1a:8b:80:57:
                    4f:1f:ce:da:15:19:c5:d9:a9:96:17:37:71:eb:05:
                    cf:ed:ba:7f:16:7b:7c:c1:27:ec:f7:97:fc:14:8c:
                    72:30:d2:65:79:5e:59:7a:4f:c8:ac:09:c1:ba:4a:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E6:51:F0:6C:54:03:53:56:B0:40:99:E8:EC:6A:D0:A4:CB:CF:C3
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130302e302f32332d3237203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:76:53:2a:d5:14:aa:63:f6:b1:de:d2:cb:2f:87:89:bb:
         4f:a4:fd:51:0e:db:0f:d9:b2:5a:fb:9c:cd:d0:a9:4e:00:d4:
         8f:b3:79:59:01:fb:03:4d:89:05:11:64:d9:04:5f:79:17:21:
         5d:ed:11:34:f7:38:62:6e:cd:08:e2:24:02:fd:dc:99:76:d7:
         ef:f3:f1:9b:1d:9e:f4:8e:d2:20:e5:52:69:76:95:3b:c3:af:
         27:65:91:74:a0:c9:b2:ca:89:e0:c6:cf:fd:5d:0c:2b:08:07:
         ca:ce:2b:54:29:61:68:da:fd:8a:29:3d:44:b7:5a:89:1d:db:
         fc:d2:cf:4d:40:3f:c0:07:34:37:97:40:e4:d5:2f:04:28:fb:
         98:6e:16:06:a6:ac:13:77:0f:f4:04:03:78:ca:90:53:77:a5:
         e6:66:57:b5:e3:e5:b0:c8:db:c9:8c:7a:77:a6:58:e7:9b:f6:
         cc:8a:8f:92:e2:e4:50:e5:e1:9e:98:84:59:84:3c:83:7b:3e:
         36:44:34:b6:3d:ff:26:da:9a:2b:09:54:aa:36:ec:d7:04:25:
         24:36:e2:a4:b5:04:ad:e8:d3:58:0b:1c:25:df:11:7b:4e:47:
         c0:5b:bc:39:02:62:10:33:0d:87:3e:bc:e2:c5:a2:f9:30:7c:
         bc:0d:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:25 2024 by rpki-client on console-ams.rpki-client.org