Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa
File:                     34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa (raw, json)
Hash identifier:          w3Td/NPGv53AVMt14GnUKvE5gTwX9klxd7CdaRaA2GA=
Subject key identifier:   22:37:45:CE:88:05:73:4A:38:1F:0E:00:23:6D:92:80:83:FD:4A:1C
Certificate issuer:       /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
Certificate serial:       1D6FD94648F1910C7B7864D110B15A2B50360CEB
Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa
Signing time:             Tue 05 Mar 2024 18:07:21 +0000
ROA not before:           Tue 05 Mar 2024 18:02:21 +0000
ROA not after:            Tue 04 Mar 2025 18:07:21 +0000
asID:                     269915
IP address blocks:        45.189.232.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:6f:d9:46:48:f1:91:0c:7b:78:64:d1:10:b1:5a:2b:50:36:0c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
        Validity
            Not Before: Mar  5 18:02:21 2024 GMT
            Not After : Mar  4 18:07:21 2025 GMT
        Subject: CN=223745CE8805734A381F0E00236D928083FD4A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:66:dd:8a:c9:75:08:39:9f:98:2c:8f:3c:
                    97:7c:67:02:c5:3c:41:d8:6e:a1:e2:66:6e:cf:75:
                    0d:60:74:d7:a2:b6:1e:4f:70:e1:6a:20:07:24:68:
                    d2:61:f1:81:91:bd:38:64:4a:73:27:08:d9:1a:38:
                    38:a5:3b:a0:40:5d:c7:06:43:df:8d:6a:a1:6b:8a:
                    d1:ad:48:96:da:d3:6b:aa:7b:02:78:bd:fa:76:9a:
                    5a:78:7b:e2:49:bf:61:a6:cb:aa:6c:94:ba:da:a2:
                    05:f5:05:dc:86:30:49:67:dd:79:10:c7:97:89:52:
                    03:b7:c6:f0:c0:1d:e6:a3:a2:b4:84:83:ca:07:2d:
                    ed:1d:3b:e8:38:48:14:88:e6:23:5a:5d:ed:3f:61:
                    ff:13:aa:44:80:52:be:05:d3:23:e2:03:e6:03:42:
                    8f:91:c1:6b:98:b1:9b:59:79:ef:94:9e:5c:bc:9f:
                    0e:15:48:6d:44:54:c3:4a:6d:88:44:da:69:71:2e:
                    66:ef:0f:21:31:d5:5a:f1:a7:c8:fd:42:f3:a6:2a:
                    e1:37:ee:e7:c1:be:33:47:7c:fe:f5:c9:e9:08:43:
                    3b:3e:3e:48:b4:c8:54:a7:b4:1e:d6:12:58:5e:10:
                    f4:b8:89:21:9f:b3:5f:9e:d1:e3:6f:3f:e4:41:08:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:45:CE:88:05:73:4A:38:1F:0E:00:23:6D:92:80:83:FD:4A:1C
            X509v3 Authority Key Identifier:
                keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138392e3233322e302f32332d3233203d3e20323639393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:38:11:ee:b0:16:44:aa:9b:62:f0:19:9b:5c:00:74:58:68:
         28:cd:d7:24:f1:2a:9c:e6:3d:1a:fc:9c:d4:c7:6e:35:00:41:
         8e:03:ab:82:9f:79:0f:96:f5:a4:04:f5:85:d2:1b:f8:97:7e:
         ec:e4:57:89:95:ca:4a:7e:ed:83:56:71:68:fa:41:0b:fa:fc:
         03:e7:cf:69:3f:cc:4f:34:3f:5c:f2:63:a6:a0:4b:b4:35:93:
         f1:65:ed:f8:c7:0b:70:4d:f9:21:1e:9f:34:a1:91:0d:64:64:
         f8:ee:99:9e:dd:73:95:a7:b7:bf:f5:4a:6c:c5:13:59:55:be:
         9d:2a:cc:da:ee:d3:98:4a:f6:96:91:ea:27:a6:71:c2:f9:a4:
         2e:31:b9:e7:68:a9:c2:9f:aa:15:29:a1:4d:85:7e:64:32:b6:
         f7:92:9f:98:2b:ff:d1:0b:6c:5f:f2:01:62:98:ea:20:77:74:
         0e:ca:08:a1:c9:cb:c0:1b:ea:99:63:24:67:f1:8d:0c:1b:6f:
         30:23:52:6b:4b:5d:a0:7f:91:3f:e6:42:2e:44:e8:15:97:62:
         23:92:60:9d:7f:08:97:ca:c4:fd:f6:43:08:00:46:81:99:c9:
         14:f1:82:86:6b:10:78:11:b7:d6:c8:98:32:c3:8f:42:2e:c7:
         80:ca:28:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:39 2024 by rpki-client on console-ams.rpki-client.org