Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323635373033.roa
File:                     34352e3233382e3137362e302f32332d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          NWPMbii7LiH1xUAC32a/Xhp7y4+bDCCP82nyOohnv1Q=
Subject key identifier:   94:75:99:C3:E7:ED:9C:B7:65:EA:8A:E0:F9:52:FC:9B:0B:08:95:51
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       36553526ED6485434DB0BD20D0DE5EB23DC78496
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 17:48:20 +0000
ROA not before:           Tue 05 Mar 2024 17:43:20 +0000
ROA not after:            Tue 04 Mar 2025 17:48:20 +0000
asID:                     265703
IP address blocks:        45.238.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:55:35:26:ed:64:85:43:4d:b0:bd:20:d0:de:5e:b2:3d:c7:84:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Mar  5 17:43:20 2024 GMT
            Not After : Mar  4 17:48:20 2025 GMT
        Subject: CN=947599C3E7ED9CB765EA8AE0F952FC9B0B089551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:d5:94:1b:14:9d:7a:2d:32:48:d8:22:ee:
                    46:64:c6:90:4d:77:1f:e0:fb:01:f0:26:e9:8b:af:
                    a1:b4:f1:aa:49:07:58:2d:73:7b:c5:f5:6d:8b:8b:
                    0c:8f:43:3f:c3:51:67:08:97:3a:33:38:aa:41:52:
                    86:d4:7e:51:d5:62:52:05:58:f6:59:13:ba:ce:14:
                    cc:c6:dd:b2:74:45:d8:4d:8e:81:20:6d:bd:2c:82:
                    f2:aa:2e:cc:9b:ae:75:15:b0:01:02:67:2b:79:6a:
                    47:30:e7:2a:a3:66:9e:f8:be:96:8e:76:8f:25:aa:
                    14:5d:d6:29:4b:55:6b:45:ca:6c:f0:28:e2:e8:ff:
                    9c:d5:02:c8:52:a7:d6:d9:21:94:b4:b1:4f:45:95:
                    d5:39:02:82:a5:fa:e9:14:e0:80:fd:00:75:b6:55:
                    dc:45:cf:1e:c7:ec:d3:90:b2:a0:00:fe:86:f9:6f:
                    cc:97:d8:96:25:22:37:bf:ca:17:58:1f:f0:af:74:
                    7b:58:60:57:49:66:4c:8a:12:11:f5:a4:a8:b0:db:
                    fa:a3:53:be:5f:cd:00:9c:6c:d4:1a:cb:3a:25:68:
                    0a:22:1f:02:60:9f:74:03:02:2f:06:dc:f5:b3:d9:
                    c0:3a:8d:70:9b:e7:df:ca:77:51:a0:5b:8d:84:1d:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:75:99:C3:E7:ED:9C:B7:65:EA:8A:E0:F9:52:FC:9B:0B:08:95:51
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:6b:13:c0:99:26:5e:4a:ce:ff:31:4c:0b:bd:97:16:42:7c:
         5a:c7:cc:1f:f0:88:ac:40:e8:75:b1:b1:19:39:68:ba:e5:77:
         da:6d:8a:04:b7:88:3b:74:c2:d3:fc:c6:ce:a4:c5:63:07:45:
         b2:1b:78:2b:fa:85:7d:1f:2e:a5:4c:88:0c:7e:2d:af:7a:d5:
         3e:76:07:6a:3a:06:08:81:e3:8b:fe:01:1a:cd:fe:cf:ce:8a:
         24:95:66:0c:6d:cb:0f:cc:94:88:b7:2f:be:ca:58:54:87:bf:
         1a:8e:9b:ca:53:d9:0c:1c:5a:32:6f:16:24:29:bb:f4:2f:ac:
         9e:a1:1c:66:d0:4d:7c:17:6a:c0:ca:a6:9b:e6:23:96:79:db:
         e3:54:73:6a:1e:25:d7:cc:90:07:e9:3c:b7:25:c7:75:00:ee:
         20:5b:9c:68:e9:86:b4:44:9f:d7:10:a3:68:c3:b9:4e:25:3d:
         11:d9:27:ff:44:c9:b3:1d:d7:4a:7b:74:21:e7:3a:92:37:7e:
         87:4a:23:3b:09:de:99:a4:fe:32:ca:62:b4:2c:1d:27:2a:6e:
         4e:ef:2d:1b:cb:44:76:01:fb:eb:98:c1:bf:d3:0e:d8:1e:43:
         9b:ea:79:57:38:c0:ff:fe:dd:cf:ac:86:a1:0b:67:12:ad:e2:
         a1:1d:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:11 2024 by rpki-client on console-fra.rpki-client.org