Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e20323731393230.roa
File:                     34352e3138332e34322e302f32332d3233203d3e20323731393230.roa (raw, json)
Hash identifier:          KbCotxy/4PD6U5Re23bu6EN97P2cMfyAlWLdiLMyzqU=
Subject key identifier:   75:99:82:E4:C8:06:4D:51:AA:AB:9B:5F:2D:9F:47:1F:58:6D:E5:55
Certificate issuer:       /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial:       669A2BD7DF698D815FA6B679D201AE0064FFCAF6
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e20323731393230.roa
Signing time:             Tue 05 Mar 2024 18:07:15 +0000
ROA not before:           Tue 05 Mar 2024 18:02:15 +0000
ROA not after:            Tue 04 Mar 2025 18:07:15 +0000
asID:                     271920
IP address blocks:        45.183.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9a:2b:d7:df:69:8d:81:5f:a6:b6:79:d2:01:ae:00:64:ff:ca:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
        Validity
            Not Before: Mar  5 18:02:15 2024 GMT
            Not After : Mar  4 18:07:15 2025 GMT
        Subject: CN=759982E4C8064D51AAAB9B5F2D9F471F586DE555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8b:99:ac:fa:d2:55:b4:fc:23:6d:cd:8a:a3:
                    44:03:b0:fd:ce:57:6d:a8:eb:28:56:ce:b5:cf:83:
                    b6:e4:fa:09:5f:8e:85:7f:0c:42:b3:80:b9:0b:a1:
                    c3:dc:7f:ea:40:12:d5:a0:bd:e9:e3:e5:bb:ba:81:
                    e0:f8:f9:d4:ca:9f:ee:b4:3c:95:87:95:66:8a:85:
                    f8:9d:9e:0a:30:d4:53:37:71:1f:05:4b:cf:3f:4c:
                    3c:28:d9:22:b1:31:cf:d8:75:bb:01:04:01:0a:0f:
                    96:1e:6c:1e:b8:02:db:27:84:fd:45:13:da:47:24:
                    76:25:eb:eb:d5:a1:23:df:43:d3:ec:29:b9:b9:9b:
                    ee:bd:19:38:a0:d8:09:fd:ba:a3:44:f0:25:b1:7a:
                    07:83:7e:d7:55:80:c9:19:47:c3:3d:b4:ef:80:0f:
                    34:2b:0a:d2:3f:f8:55:5f:01:d4:85:ae:9d:d8:98:
                    fb:37:04:20:a4:ff:c9:78:e5:11:7e:61:f1:20:aa:
                    6c:2e:8e:9f:00:cd:59:26:59:b9:68:ad:61:e4:95:
                    23:4d:44:86:cd:f6:65:d6:53:d6:1f:60:eb:7b:69:
                    a1:68:30:10:2d:56:79:e5:80:be:96:aa:9f:27:9a:
                    06:21:21:41:57:bc:0d:30:c6:a0:3f:54:6c:07:63:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:82:E4:C8:06:4D:51:AA:AB:9B:5F:2D:9F:47:1F:58:6D:E5:55
            X509v3 Authority Key Identifier:
                keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e20323731393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:68:55:c8:c8:fb:58:c4:01:95:53:87:35:04:36:d9:5d:
         cf:28:b9:04:ca:6c:7a:e0:2c:fd:a3:6e:cf:53:7a:dc:5e:da:
         8a:f7:c0:62:0e:a6:83:f3:76:83:dd:ee:ed:7f:55:be:6e:89:
         91:fe:4f:9f:a2:46:9d:58:7a:d9:ba:73:de:8f:7a:e0:1e:fe:
         0b:e1:7f:81:40:71:af:a2:c7:c6:f2:01:f7:8f:ee:c7:9a:84:
         94:80:a6:f6:21:b7:9b:b2:75:ad:b3:47:f4:a1:bc:e5:33:0b:
         89:5a:ad:05:5c:0b:dc:27:f1:72:4e:ab:6a:38:af:80:63:2f:
         54:a7:cd:ee:f5:bf:f5:03:15:62:8c:52:9a:09:8a:f6:4f:94:
         a5:37:8d:54:d1:e3:bd:2d:d1:72:05:ee:d1:f5:7c:2a:9a:84:
         d7:ec:c8:f1:a7:52:17:76:ea:04:06:2f:4f:9b:1e:5a:35:d7:
         3f:e0:49:db:6f:22:b0:a7:8c:0b:41:0c:53:99:e0:db:b1:5a:
         3b:21:58:8f:94:54:65:a9:d4:f2:a0:8a:d9:4a:b0:bc:7a:67:
         71:72:7e:57:65:c8:72:b7:a1:4b:86:d9:16:06:ba:f5:bf:04:
         ea:51:83:ba:22:a4:21:2d:17:1d:2b:7b:14:d1:49:31:9b:18:
         7e:db:44:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org