Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39332e302f32342d3234203d3e20323633373235.roa
File:                     34352e3136362e39332e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          hh9WReEfCWY6o8REFnmNbDp8SeQkWX/0rME2s0S3iWE=
Subject key identifier:   FD:41:50:AE:6D:95:42:85:DC:B9:9C:BA:FB:41:FA:AF:65:7B:3A:0D
Certificate issuer:       /CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
Certificate serial:       7DCE7D77BE5FCA7482B7E2693FCD4510A02AD288
Authority key identifier: 30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39332e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:02:13 +0000
ROA not before:           Tue 05 Mar 2024 17:57:13 +0000
ROA not after:            Tue 04 Mar 2025 18:02:13 +0000
asID:                     263725
IP address blocks:        45.166.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ce:7d:77:be:5f:ca:74:82:b7:e2:69:3f:cd:45:10:a0:2a:d2:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
        Validity
            Not Before: Mar  5 17:57:13 2024 GMT
            Not After : Mar  4 18:02:13 2025 GMT
        Subject: CN=FD4150AE6D954285DCB99CBAFB41FAAF657B3A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:c9:97:85:8a:4b:8e:ac:6d:a4:c3:91:25:
                    cf:3c:34:c3:f1:53:ce:18:30:8e:28:82:cd:1c:38:
                    21:86:22:bb:9e:cb:f2:68:c2:81:d6:f6:c5:05:41:
                    b9:73:d3:33:8b:d8:da:db:a7:0a:4c:36:3d:ba:3d:
                    3b:bf:86:d1:49:f9:a0:5b:68:57:da:12:77:eb:53:
                    e8:b7:89:86:e0:88:01:bf:57:95:51:bc:e1:30:25:
                    ac:1f:de:fe:04:b3:23:27:9c:02:92:91:f3:67:a8:
                    02:06:9b:f4:67:42:d7:bf:91:d1:60:6e:d5:b0:53:
                    ee:4a:73:34:f7:39:92:53:70:55:cb:1e:89:31:b1:
                    81:05:9a:5e:02:54:dd:ad:2e:9f:65:05:30:ce:ce:
                    dc:0c:6f:63:96:a5:12:0b:d1:7b:c4:1d:48:7d:69:
                    7e:b0:b9:f9:ad:d6:62:70:bb:3e:94:74:b0:f5:e6:
                    bd:be:60:40:00:4f:e3:d9:bc:2b:98:b9:cf:61:b8:
                    73:34:f7:af:10:04:b2:0b:3b:d1:4f:9b:8b:60:45:
                    88:6f:d0:83:29:94:78:8e:96:1f:51:89:72:28:8d:
                    b9:b5:15:dc:a5:34:67:94:18:a4:a9:35:7b:eb:59:
                    e7:b2:54:a9:3d:e2:e4:4c:3f:f3:08:23:f3:69:21:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:50:AE:6D:95:42:85:DC:B9:9C:BA:FB:41:FA:AF:65:7B:3A:0D
            X509v3 Authority Key Identifier:
                keyid:30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39332e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:a2:02:2a:50:9e:54:4b:5c:08:02:4a:bd:79:45:89:66:
         29:12:bb:e5:57:9a:f5:05:a3:a3:37:3d:3d:4a:d6:6d:b1:05:
         2e:5e:b4:1a:26:d2:14:ab:29:2f:65:45:d2:f3:2e:b1:ff:f1:
         2d:e1:37:80:ee:28:b5:d9:8b:6f:1a:2d:b6:93:f4:53:4f:f1:
         bc:f7:f2:07:d1:9b:b5:27:d7:e4:dc:9d:df:b6:8a:79:50:a8:
         a4:75:1b:11:98:36:c2:63:a3:e2:22:66:98:85:0d:f1:13:b4:
         45:92:67:86:dd:87:e5:5b:34:77:04:36:c3:6c:68:a9:24:7a:
         e2:ee:03:bd:66:84:94:66:48:b4:9e:64:a2:52:01:0d:c0:32:
         ef:89:3f:2e:55:ab:93:cb:fd:e8:9b:a2:93:1b:ef:61:ca:f0:
         90:58:6c:4f:b4:8c:20:71:3b:72:42:9f:03:49:30:68:6b:22:
         3b:1b:ca:15:00:68:93:19:d9:e1:09:06:33:78:0f:bc:3e:71:
         d5:48:0e:e6:5f:7c:dc:02:7d:4d:a3:27:0a:cf:82:41:e6:3a:
         cf:51:f6:41:b9:39:dd:97:59:cb:8f:8e:84:6d:61:be:4c:a1:
         c1:c6:91:73:12:c6:0c:60:e0:fd:17:19:06:58:84:65:b7:ba:
         d7:75:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org