Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa
File:                     34352e3232392e32382e302f32322d3234203d3e20323730303839.roa (raw, json)
Hash identifier:          qyh8vs5LFlm3CtDslLyjhFOzX+Vi+XMDWwoVT7v1Dq0=
Subject key identifier:   31:9E:81:B0:96:E7:B5:58:11:8A:1A:BE:78:2F:43:2F:3E:43:A0:51
Certificate issuer:       /CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
Certificate serial:       3E5C63A69B1B0CDBC8D17DFA742A9BFD5B077D0B
Authority key identifier: A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa
Signing time:             Tue 05 Mar 2024 18:22:16 +0000
ROA not before:           Tue 05 Mar 2024 18:17:16 +0000
ROA not after:            Tue 04 Mar 2025 18:22:16 +0000
asID:                     270089
IP address blocks:        45.229.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5c:63:a6:9b:1b:0c:db:c8:d1:7d:fa:74:2a:9b:fd:5b:07:7d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
        Validity
            Not Before: Mar  5 18:17:16 2024 GMT
            Not After : Mar  4 18:22:16 2025 GMT
        Subject: CN=319E81B096E7B558118A1ABE782F432F3E43A051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:f8:91:a6:a5:74:84:b5:5c:d8:b8:32:21:
                    6c:e0:99:a0:3e:9f:7c:a2:8e:b1:40:5d:b0:95:39:
                    36:53:d8:fc:9b:86:7a:a5:a3:a3:52:88:d7:fd:4b:
                    7c:a2:db:58:88:63:4e:81:8b:aa:25:33:11:95:0f:
                    a4:35:d0:a8:0e:d0:c4:8f:33:a9:d0:da:ec:09:f0:
                    7a:5f:a3:b9:c3:ec:77:0b:c5:c2:98:2f:9e:6d:a1:
                    d4:61:bf:e3:c2:a6:16:5a:84:dd:02:c9:61:f6:f8:
                    8f:fb:64:c0:e0:7d:1c:24:16:cd:d2:de:a7:cc:cd:
                    90:61:df:2b:f6:7f:06:5a:ae:b5:0d:ae:3a:2b:ba:
                    5c:ce:21:00:cf:be:40:bc:49:70:a5:18:7c:67:ca:
                    63:ff:ce:60:dc:96:85:12:2f:d1:93:f9:ba:c8:c3:
                    c1:4d:8e:0d:04:99:73:84:70:92:f2:f0:af:c9:2f:
                    8b:dc:ef:ad:f1:a1:89:0a:2c:48:66:32:ed:09:4b:
                    80:f7:7c:a2:1d:0f:a0:99:2b:09:bc:01:db:03:6b:
                    a1:af:78:b5:b5:94:29:77:ca:6a:27:de:23:52:5b:
                    a8:bd:43:3f:13:3b:9e:ba:c7:85:22:6c:bd:7d:c9:
                    31:8e:2d:94:d3:31:4e:00:6e:af:59:76:76:62:9e:
                    93:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9E:81:B0:96:E7:B5:58:11:8A:1A:BE:78:2F:43:2F:3E:43:A0:51
            X509v3 Authority Key Identifier:
                keyid:A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:de:0b:17:7b:14:f5:33:6b:49:63:f9:e3:59:bb:81:c0:1b:
         98:82:c5:d5:36:59:33:c8:dd:e1:e7:09:ef:3d:1e:42:3e:13:
         d7:bb:a3:c7:6a:e9:d1:46:06:2a:b7:56:75:93:8b:f5:cc:c0:
         ce:66:34:0c:e2:89:6b:83:78:e6:a5:57:c3:e2:d7:cd:93:e0:
         ee:64:1f:72:9d:6f:e4:cc:c9:65:3d:cb:5c:93:b0:2a:ad:31:
         34:14:4a:92:f0:fb:a1:06:38:e6:b6:76:5a:5a:41:81:1e:08:
         78:94:f5:a6:bf:3b:e6:21:dd:55:77:07:71:fe:00:96:30:f2:
         78:02:54:1f:4f:90:b3:e2:98:9e:c8:0e:4c:62:98:97:41:0b:
         c1:54:bb:af:48:d2:c4:36:60:59:69:80:3c:10:ff:ad:ae:79:
         d5:be:75:fd:71:99:b6:2b:03:d0:27:ef:5e:5c:71:6a:51:ec:
         8d:04:78:95:50:79:df:76:20:4f:28:3f:f5:a5:b6:5b:11:91:
         a7:f6:94:88:3a:0b:64:0c:18:c5:77:da:d1:a9:53:5c:79:b3:
         3b:89:ca:ae:60:f1:a4:48:88:a0:42:3c:89:53:00:43:65:c6:
         43:1a:86:1e:af:e2:52:a7:24:d3:99:24:d7:e9:9b:ad:53:91:
         22:af:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org