Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32342d3234203d3e20323635363931.roa
File:                     34352e352e36382e302f32342d3234203d3e20323635363931.roa (raw, json)
Hash identifier:          AncXADo1R2ZrXfI0UhGp5Yf7VCSKrRONV4mzfzjg/YI=
Subject key identifier:   4E:BE:6C:73:9C:4D:A4:53:BC:20:FC:9C:88:CE:1F:02:1A:89:4F:1D
Certificate issuer:       /CN=E7A27C8F6CDCF649D79DE823E920014569787295
Certificate serial:       4D22DC815C8AC867037DCA85A2603DCCE6DFB0FD
Authority key identifier: E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32342d3234203d3e20323635363931.roa
Signing time:             Tue 05 Mar 2024 18:16:17 +0000
ROA not before:           Tue 05 Mar 2024 18:11:17 +0000
ROA not after:            Tue 04 Mar 2025 18:16:17 +0000
asID:                     265691
IP address blocks:        45.5.68.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:22:dc:81:5c:8a:c8:67:03:7d:ca:85:a2:60:3d:cc:e6:df:b0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7A27C8F6CDCF649D79DE823E920014569787295
        Validity
            Not Before: Mar  5 18:11:17 2024 GMT
            Not After : Mar  4 18:16:17 2025 GMT
        Subject: CN=4EBE6C739C4DA453BC20FC9C88CE1F021A894F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fa:31:d3:cb:25:de:d7:7d:6d:a5:fc:3a:e0:
                    33:0f:6f:93:42:82:5c:29:71:f6:c0:76:a8:26:97:
                    89:22:9a:83:fe:c7:7c:21:7d:96:ad:31:c5:3b:71:
                    b2:9d:1c:d1:48:5c:64:d2:10:79:00:28:21:e2:bf:
                    98:ee:5b:f0:c3:a4:83:2a:9b:50:85:93:fe:ed:29:
                    76:f1:ef:0b:44:37:43:dd:ca:d2:2d:0a:ff:92:1d:
                    aa:88:fc:2c:a9:e0:5e:e0:ff:91:87:7f:fd:15:d7:
                    ed:15:8d:37:b1:35:2f:a9:9d:56:cd:47:85:cb:0a:
                    10:88:9c:55:36:f9:ec:38:e9:f3:40:21:d8:9b:21:
                    79:a5:49:d3:c7:35:60:94:fd:2f:b2:76:d9:a1:2f:
                    ea:e0:d3:0c:e9:a3:e6:51:81:ba:76:6a:c3:c3:a5:
                    9c:c2:29:71:19:54:66:80:62:9c:b0:9f:8a:86:11:
                    b8:07:e0:e7:f3:57:35:7b:ee:a7:26:fe:bc:06:94:
                    a1:a9:db:9c:4c:dd:0c:82:a0:38:bd:77:75:82:a5:
                    0c:34:ad:d2:c9:52:32:7c:36:96:6a:75:29:40:0f:
                    57:45:c2:fe:99:d7:4f:27:0c:83:fb:51:17:df:81:
                    26:c7:43:0a:46:23:00:2c:64:57:7b:86:8b:09:fd:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BE:6C:73:9C:4D:A4:53:BC:20:FC:9C:88:CE:1F:02:1A:89:4F:1D
            X509v3 Authority Key Identifier:
                keyid:E7:A2:7C:8F:6C:DC:F6:49:D7:9D:E8:23:E9:20:01:45:69:78:72:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/E7A27C8F6CDCF649D79DE823E920014569787295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7A27C8F6CDCF649D79DE823E920014569787295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D828FDD3E53B748618165B66FE695F5547F56A73103C6573424452A5AB0A1B1C/0/34352e352e36382e302f32342d3234203d3e20323635363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:13:b7:80:d4:63:17:d9:a3:6c:d6:e0:3f:4c:0a:9e:96:
         5c:fe:5c:a8:3c:4d:ef:3a:34:a7:1c:c9:59:2d:f0:89:af:1d:
         a9:f3:09:c1:c6:18:8d:2f:45:0e:1a:0a:40:a3:7b:94:3b:2c:
         6e:c9:20:63:58:22:37:74:ad:f9:25:57:5d:a3:74:12:35:98:
         9e:52:8f:75:af:68:d4:b3:36:f7:04:c4:12:ed:9c:7c:f4:f3:
         66:64:08:bf:36:87:03:84:61:e9:0f:69:ff:4b:6f:2a:7a:76:
         0c:7a:15:4d:87:46:bc:07:ac:42:5c:9f:8a:a1:c6:62:64:b7:
         4f:af:5c:e1:e7:1e:87:9d:fa:62:cb:f4:7d:17:4d:5c:6d:e9:
         cc:b8:3c:50:83:22:e7:8e:ce:f5:b2:07:11:b3:2e:91:1f:2f:
         8f:13:96:9b:50:70:38:1c:a2:65:fe:a6:98:5f:f8:ff:29:53:
         42:99:2f:0a:c7:1f:2d:c8:dc:19:7e:15:71:4a:c1:1a:58:eb:
         b3:3b:8e:09:1d:c6:bd:17:95:37:d3:11:91:c0:a1:8f:b5:b8:
         2c:ae:b1:35:65:d1:22:2f:dc:9c:b4:7f:28:0b:6c:ef:0f:34:
         f0:13:5b:f7:44:16:84:53:d7:86:bd:ee:df:2b:e1:7c:23:66:
         40:f0:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org