Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
File:                     34352e3138332e34322e302f32332d3233203d3e2033353439.roa (raw, json)
Hash identifier:          uD6iCrsxWNKnLCHecGJXSFJerA9PaXCaugAxCqn0zsE=
Subject key identifier:   B4:1A:33:A1:82:2B:82:F7:16:CD:AB:CE:F6:F7:E9:ED:F9:7B:06:40
Certificate issuer:       /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial:       6D7D3932960A7C88D63A173EC8E071E782EE2F84
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa
Signing time:             Tue 05 Mar 2024 18:07:16 +0000
ROA not before:           Tue 05 Mar 2024 18:02:16 +0000
ROA not after:            Tue 04 Mar 2025 18:07:16 +0000
asID:                     3549
IP address blocks:        45.183.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7d:39:32:96:0a:7c:88:d6:3a:17:3e:c8:e0:71:e7:82:ee:2f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
        Validity
            Not Before: Mar  5 18:02:16 2024 GMT
            Not After : Mar  4 18:07:16 2025 GMT
        Subject: CN=B41A33A1822B82F716CDABCEF6F7E9EDF97B0640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:d6:3c:82:60:26:7a:d9:b2:80:8f:76:6a:
                    98:a6:03:12:92:81:46:69:22:b4:a9:1f:ad:43:7c:
                    51:8f:fa:c0:68:13:34:35:50:e2:d3:06:5d:90:34:
                    e2:37:af:7b:3b:09:4e:4f:00:a7:57:43:86:6e:50:
                    de:16:11:a1:8a:81:ee:03:04:f4:85:d4:1d:49:2a:
                    45:58:5a:95:04:66:04:2f:ac:67:ba:13:29:f2:17:
                    35:eb:29:e9:85:5d:a8:5b:f1:57:7e:68:e1:be:8b:
                    79:24:35:82:69:b0:6e:77:6c:5b:34:0b:55:7e:90:
                    4c:0f:a8:c7:98:ec:90:cd:bf:14:59:64:21:29:ff:
                    45:9d:cc:1f:c7:91:66:49:4c:cb:2f:46:57:70:23:
                    c0:35:23:76:89:65:1b:fb:ac:76:02:35:a7:5e:b9:
                    cb:2e:c0:36:3c:5a:c6:a9:2a:5b:ea:f4:c3:a3:89:
                    bb:77:aa:75:05:1a:03:c6:26:a1:57:88:b2:06:de:
                    ff:c1:24:e7:f1:9b:e3:7f:6c:29:bb:15:b0:61:a2:
                    84:d6:c0:07:d2:15:52:fb:07:4c:a5:d8:e9:88:08:
                    84:1e:13:c1:b6:2d:6a:1a:89:ab:22:08:6a:30:22:
                    15:2b:62:f7:6f:54:fb:53:6c:b4:df:b7:90:61:bf:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1A:33:A1:82:2B:82:F7:16:CD:AB:CE:F6:F7:E9:ED:F9:7B:06:40
            X509v3 Authority Key Identifier:
                keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:0e:21:2c:d2:b0:55:61:78:09:df:71:f1:4d:e7:91:ee:3a:
         60:a2:45:e4:42:58:57:60:e7:56:b2:fc:77:c3:6b:8a:5f:ed:
         16:be:f9:f8:78:5e:82:eb:58:bf:e3:c2:11:0f:e0:14:25:1e:
         fd:29:51:d7:63:5d:8a:fc:68:b2:12:b5:41:90:52:88:05:c4:
         13:d3:12:7b:4d:d7:aa:20:bd:70:6f:bc:b6:a7:68:10:51:31:
         75:38:b7:d6:45:47:b5:ea:5c:b7:b9:ea:21:be:c9:f0:1f:5f:
         e0:07:c1:7c:07:0a:6e:30:6b:e5:0f:20:65:5a:39:a7:60:33:
         27:03:b2:8b:ac:13:af:ed:7f:1d:17:41:d6:cf:6a:ec:55:dd:
         9e:32:ab:91:bc:27:9d:25:16:e9:36:6a:fa:4c:5b:33:3c:58:
         6e:da:95:12:c9:7e:3d:80:68:5d:b6:04:59:9b:ad:50:69:66:
         d3:83:5a:a4:ef:78:cc:89:a0:8c:54:13:86:0d:2e:c1:e0:f7:
         7d:fc:fc:8e:de:2c:5d:d0:ff:f9:2d:76:c9:83:34:d8:0e:b0:
         e9:c9:15:bb:83:5a:e2:bd:20:8f:56:ec:91:e5:ad:1b:2f:1c:
         45:d1:d4:6b:cd:50:fe:24:3e:95:e7:0e:98:9b:12:4a:7f:e6:
         0b:2b:f2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:33 2024 by rpki-client on console-fra.rpki-client.org