Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/34352e342e3132382e302f32322d3234203d3e203232383639.roa
File:                     34352e342e3132382e302f32322d3234203d3e203232383639.roa (raw, json)
Hash identifier:          Dfvj8m/xSOlvMhwkC1A8hNnPqCf2qsLb1gUcuYv+AQs=
Subject key identifier:   27:D3:A5:63:3F:A2:D1:A4:02:82:F6:37:55:8A:45:6E:BF:60:35:DC
Certificate issuer:       /CN=231411337300474BC5489725C8707684F70A876D
Certificate serial:       0F6B8FB95C7C123CD71FC3E3316F88EA5BA27E56
Authority key identifier: 23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/34352e342e3132382e302f32322d3234203d3e203232383639.roa
Signing time:             Tue 05 Mar 2024 18:15:54 +0000
ROA not before:           Tue 05 Mar 2024 18:10:54 +0000
ROA not after:            Tue 04 Mar 2025 18:15:54 +0000
asID:                     22869
IP address blocks:        45.4.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6b:8f:b9:5c:7c:12:3c:d7:1f:c3:e3:31:6f:88:ea:5b:a2:7e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231411337300474BC5489725C8707684F70A876D
        Validity
            Not Before: Mar  5 18:10:54 2024 GMT
            Not After : Mar  4 18:15:54 2025 GMT
        Subject: CN=27D3A5633FA2D1A40282F637558A456EBF6035DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:52:6b:12:e1:cc:a3:f9:45:08:2a:bb:3d:e3:
                    b8:95:21:70:6d:48:ab:c7:1b:fe:cd:70:ba:25:b1:
                    ce:d8:e7:10:a2:38:d5:62:db:9d:75:b6:fb:30:2e:
                    25:83:b0:1d:06:45:cb:1f:46:d6:58:2a:ed:27:fe:
                    24:ac:51:46:f6:cf:c4:90:6d:ee:0c:2e:12:6a:23:
                    b6:e8:32:89:eb:47:c5:bf:91:e0:fd:5e:87:c0:cd:
                    bb:f0:19:56:c9:9d:b1:ad:9f:ef:1d:a3:e2:2e:fe:
                    31:88:54:14:2a:25:b7:55:09:19:98:86:a0:bf:0d:
                    24:d9:19:4f:02:cc:b3:07:e6:2b:7c:35:71:76:98:
                    5d:b6:c3:24:91:c3:9b:fe:0a:16:45:59:32:74:43:
                    63:5f:62:36:22:26:b1:22:2b:93:79:6a:0a:ba:d5:
                    88:1f:41:21:a4:2f:97:56:d5:6c:4c:68:21:e2:a3:
                    de:dd:0a:71:42:85:52:36:cc:7a:96:b7:7b:46:45:
                    a6:22:dd:6a:4e:77:6f:fc:f6:95:ac:ef:82:e1:a1:
                    a3:1d:62:f8:ef:c9:a5:5a:34:da:40:f8:19:e1:2d:
                    8f:f8:3a:ff:46:ef:2b:ff:6f:76:fb:97:b4:08:ab:
                    c8:2f:4e:5c:5b:b1:c5:ba:0b:1e:86:85:08:cc:cf:
                    00:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D3:A5:63:3F:A2:D1:A4:02:82:F6:37:55:8A:45:6E:BF:60:35:DC
            X509v3 Authority Key Identifier:
                keyid:23:14:11:33:73:00:47:4B:C5:48:97:25:C8:70:76:84:F7:0A:87:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/231411337300474BC5489725C8707684F70A876D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/231411337300474BC5489725C8707684F70A876D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D80FD0D5746E4486974F87F0B58AA3D22DF7A9D340037E73D5DA44A391EE2640/0/34352e342e3132382e302f32322d3234203d3e203232383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:10:7d:2e:a1:89:c4:ad:64:e9:f1:7f:71:3e:a0:47:50:b4:
         e4:8e:85:67:ce:29:53:ed:ed:02:6e:0f:1a:cb:af:a5:04:f7:
         6f:53:ed:96:b0:bb:10:86:a6:df:22:c4:74:1b:49:68:d9:3d:
         28:9d:5e:2a:4a:6d:45:ba:1b:37:15:e9:d3:05:54:9c:7a:f6:
         31:7d:32:8c:6e:5c:e4:b6:40:71:7f:9c:7b:b5:83:ee:2a:b4:
         25:3f:2b:ba:78:d4:b9:d5:de:64:91:3a:1b:dd:68:78:57:20:
         bc:e4:b5:d0:2a:e4:24:0d:1c:1b:7d:a9:5f:59:49:8c:32:5f:
         4c:0c:cd:9a:d9:63:ae:28:e8:2f:e8:b1:20:c0:bf:3d:1f:2f:
         8b:94:e5:8d:52:b9:33:94:35:e0:91:cb:f0:21:7c:b6:ab:da:
         64:c7:cc:53:26:ab:7b:b2:9c:61:b8:95:62:15:b0:35:05:b9:
         08:f2:6a:17:0c:e1:63:6e:42:ec:7c:8c:db:70:96:4d:42:16:
         3b:df:7b:0f:66:c6:dd:7e:48:76:32:45:96:e4:88:c7:df:b2:
         b3:e5:01:0b:b3:1c:c9:9b:13:b8:71:c2:2c:26:79:a7:63:4c:
         62:dc:7f:bc:a4:bc:50:0c:32:1f:52:06:81:f9:6c:33:2f:f5:
         f6:f2:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:07 2024 by rpki-client on console-ams.rpki-client.org