Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa
File:                     34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa (raw, json)
Hash identifier:          9PkTep/37MChhCLwdLiHpNMnj4KbQ6+wzFfGrItWqas=
Subject key identifier:   B8:7D:49:26:B8:94:33:F8:FB:6F:CC:D9:B6:AF:7E:23:A9:19:A7:7E
Certificate issuer:       /CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
Certificate serial:       7375078A2BF21625990B3E1E7B40FFCD7573FE4A
Authority key identifier: D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa
Signing time:             Tue 05 Mar 2024 17:48:20 +0000
ROA not before:           Tue 05 Mar 2024 17:43:20 +0000
ROA not after:            Tue 04 Mar 2025 17:48:20 +0000
asID:                     266846
IP address blocks:        45.238.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:75:07:8a:2b:f2:16:25:99:0b:3e:1e:7b:40:ff:cd:75:73:fe:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D81AA43DF031E03121B10374C05B52BBB17ACBEA
        Validity
            Not Before: Mar  5 17:43:20 2024 GMT
            Not After : Mar  4 17:48:20 2025 GMT
        Subject: CN=B87D4926B89433F8FB6FCCD9B6AF7E23A919A77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:1d:46:7c:da:56:59:3c:78:be:9f:d5:0a:
                    c0:6d:71:f8:52:f6:07:e2:43:50:8d:71:2d:bd:43:
                    67:59:57:0a:1d:4a:59:1f:c3:1d:28:0c:ca:5c:a0:
                    58:d0:2b:8e:f6:da:4c:4e:0e:97:48:8f:5d:51:8d:
                    d7:05:a9:24:cc:40:3e:4a:30:c3:b0:09:36:6a:7a:
                    e1:8e:74:ee:d6:49:73:e2:97:52:25:f5:00:a7:48:
                    b2:03:d7:15:3c:fe:db:8f:e7:f9:db:23:72:da:18:
                    bc:d1:9f:f2:a3:22:b9:b5:0d:0e:d9:89:d0:f7:ec:
                    a0:12:ed:f8:09:fa:7a:19:09:f0:e4:b6:ec:a8:bb:
                    0e:f9:1f:3b:cb:ab:de:98:e4:4e:5d:9e:9f:a2:fd:
                    b7:c1:06:35:a1:dd:3b:55:b6:5e:73:9a:6a:09:4c:
                    6b:90:c8:fc:e1:34:18:33:cb:c6:89:68:f5:ac:02:
                    c9:c7:04:02:d8:c0:be:41:e0:e9:c5:b0:46:08:ec:
                    a9:e8:73:75:62:a5:07:5f:84:b5:a9:41:89:a4:e5:
                    3b:5f:1d:c8:a8:7b:e0:9f:fc:fa:ec:a1:db:b2:db:
                    f0:b9:52:4e:cc:24:ab:06:90:6d:c5:e5:8d:b6:75:
                    97:c5:ca:e5:9d:44:76:d8:72:21:4e:ef:d6:55:a8:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:7D:49:26:B8:94:33:F8:FB:6F:CC:D9:B6:AF:7E:23:A9:19:A7:7E
            X509v3 Authority Key Identifier:
                keyid:D8:1A:A4:3D:F0:31:E0:31:21:B1:03:74:C0:5B:52:BB:B1:7A:CB:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D81AA43DF031E03121B10374C05B52BBB17ACBEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFF1B81EAB88ECD114088D99260FFAB48D680EDF516A43ADB29187AD25591E1B/0/34352e3233382e3137362e302f32332d3234203d3e20323636383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:f3:0c:bb:a1:5d:70:85:c7:d0:47:17:4c:75:fb:b2:3a:c8:
         64:ea:98:27:67:24:1d:d8:0a:a3:8d:44:eb:0f:43:f8:ba:cc:
         1c:2e:85:b8:58:5d:2d:27:d7:09:51:2e:83:9b:88:10:52:e0:
         91:92:a1:1b:d6:4a:f5:05:cf:cd:fc:8c:3c:42:2f:0a:00:b5:
         d8:10:82:77:16:1a:55:c1:71:af:99:ce:1c:3b:4b:9a:ed:72:
         bf:ff:4b:3b:12:ff:61:e2:38:5b:c7:1f:1d:63:69:6f:91:14:
         0b:eb:e3:39:e8:cf:83:26:a2:d1:7f:1f:f9:7e:fa:85:30:2c:
         1e:9b:a4:ca:56:86:75:2c:3a:5b:33:f0:b8:f2:8b:33:d6:8e:
         74:9b:aa:d2:55:9f:8e:60:c3:93:be:4f:90:b7:d8:d6:7b:12:
         42:92:1e:89:8a:20:16:8b:5b:37:b9:65:23:59:8a:c9:c6:92:
         5d:97:1f:ee:0d:47:a2:61:37:ae:ad:67:29:d9:c9:6d:4b:d6:
         05:31:ea:6d:6e:88:35:6e:41:98:ec:c0:b3:14:e5:8c:85:29:
         b5:80:d8:52:d7:64:3e:25:01:e1:a2:e1:08:0c:03:4b:d4:d8:
         37:84:8f:27:d4:b3:18:d9:ee:42:2e:d6:19:0d:24:2c:70:d4:
         77:87:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 01:52:47 2024 by rpki-client on console-fra.rpki-client.org