Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa
File:                     34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa (raw, json)
Hash identifier:          4/4Fb3ZbZTL41S8++5em3waYYEQ8Ayslkkk9GPHLJqc=
Subject key identifier:   6A:DE:FD:C4:09:9C:19:19:9D:D4:BC:94:BB:F2:85:B8:09:DD:2A:08
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       15BED0A2DD83F832999FABF89E88A70C1E5CC195
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa
Signing time:             Tue 05 Nov 2024 14:50:01 +0000
ROA not before:           Tue 05 Nov 2024 14:45:01 +0000
ROA not after:            Tue 04 Nov 2025 14:50:01 +0000
asID:                     266764
IP address blocks:        45.234.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:d0:a2:dd:83:f8:32:99:9f:ab:f8:9e:88:a7:0c:1e:5c:c1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Nov  5 14:45:01 2024 GMT
            Not After : Nov  4 14:50:01 2025 GMT
        Subject: CN=6ADEFDC4099C19199DD4BC94BBF285B809DD2A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:be:2d:b2:77:d5:0f:7b:39:78:09:43:e5:
                    46:3d:db:17:b3:20:77:c8:48:d5:91:8d:58:fe:44:
                    a7:f8:87:28:c1:f7:bb:80:49:23:ea:e3:06:ef:90:
                    ae:93:a3:d1:3c:e3:ca:fe:18:3e:10:c7:9a:fa:8d:
                    11:3e:f4:31:40:7e:25:9f:25:4b:5d:65:75:ad:06:
                    b3:22:e7:43:1a:4c:12:86:72:00:e9:41:85:e0:8f:
                    40:ab:9a:10:ef:b0:56:1f:e8:d8:90:67:5f:36:b4:
                    68:98:7d:8b:86:62:f2:f9:f1:ba:ff:7f:4c:3f:17:
                    1e:a7:8b:64:74:8b:f9:23:c2:23:6c:52:c8:6d:07:
                    f3:40:7b:7f:e9:b2:07:28:8d:bd:32:e5:49:72:fa:
                    fe:8c:5d:a0:10:95:63:2c:7c:ec:12:14:d7:9f:0c:
                    3e:67:00:3e:47:20:39:ee:a5:32:ba:35:36:3d:04:
                    13:10:c6:66:42:55:44:f5:fc:11:77:22:1b:e3:8d:
                    c5:de:af:0f:a9:30:36:70:0f:07:75:8e:13:a8:7b:
                    4c:2f:c0:22:b8:3d:dc:cf:ce:e8:4d:a0:8e:89:37:
                    83:e4:a6:ea:f8:3a:f7:36:56:7c:5f:47:cf:1f:64:
                    50:1a:6d:e0:e9:44:c0:17:aa:12:36:6d:4c:65:5a:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DE:FD:C4:09:9C:19:19:9D:D4:BC:94:BB:F2:85:B8:09:DD:2A:08
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138312e302f32342d3234203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0b:b4:77:bc:ce:98:68:b3:7e:be:e6:8b:4a:c5:20:62:49:
         10:10:9c:ff:86:29:8d:2e:07:6e:4b:ce:32:68:25:ed:20:01:
         7f:17:cf:cc:27:43:79:79:df:46:aa:ea:6a:13:24:4d:64:8a:
         28:8e:f3:73:0e:fe:e4:43:98:03:ac:13:1b:0b:e6:1d:d2:f1:
         a7:60:56:97:8a:da:01:48:1a:c0:d8:93:f6:71:c2:4d:00:15:
         12:5a:a9:ea:ce:24:90:65:5e:1f:fd:b2:2d:9e:88:44:e8:8e:
         84:d3:52:5e:38:03:2f:41:55:d1:03:52:6e:a3:dd:1f:d2:f0:
         98:39:a2:8b:5e:f3:f1:ae:1f:38:19:67:27:78:0a:06:f1:7b:
         ce:2c:bd:66:58:98:c7:15:d9:6e:28:88:de:59:58:e6:6c:ec:
         dc:5f:52:fe:c2:72:48:75:54:86:36:a2:1f:37:85:20:a3:20:
         49:d8:4f:a2:35:67:41:32:a1:10:1a:4b:48:f2:7c:2e:da:9e:
         44:98:5a:e3:7f:6e:7a:60:67:18:94:4b:f6:6a:cc:98:d2:da:
         96:e6:a0:de:c4:ed:1a:b4:55:29:cd:ce:72:23:66:9e:45:94:
         6b:20:8b:1e:9f:93:c7:3b:56:f5:97:3b:42:b5:9b:39:69:fd:
         d4:30:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org