Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E167A5E070434C18153DFC1A3739BE409ECE98A1697687590FE42D7B2C4BA433/0/34352e3138312e34332e302f32342d3234203d3e20323639373430.roa
File:                     34352e3138312e34332e302f32342d3234203d3e20323639373430.roa (raw, json)
Hash identifier:          4j9L/29+PHjt0eRBc90L4suzqECY3UZjSEjtX4WcXWw=
Subject key identifier:   D5:40:DD:56:D4:1E:B6:F4:94:62:A9:98:71:62:B6:1F:AD:42:E0:CF
Certificate issuer:       /CN=78CF4EA015985FAC98DCF06050F3112A011F3F9F
Certificate serial:       2BDF5E637311CF6D1CB24F389D76C7C8E9F4395B
Authority key identifier: 78:CF:4E:A0:15:98:5F:AC:98:DC:F0:60:50:F3:11:2A:01:1F:3F:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78CF4EA015985FAC98DCF06050F3112A011F3F9F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E167A5E070434C18153DFC1A3739BE409ECE98A1697687590FE42D7B2C4BA433/0/34352e3138312e34332e302f32342d3234203d3e20323639373430.roa
Signing time:             Tue 05 Mar 2024 18:06:16 +0000
ROA not before:           Tue 05 Mar 2024 18:01:16 +0000
ROA not after:            Tue 04 Mar 2025 18:06:16 +0000
asID:                     269740
IP address blocks:        45.181.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E167A5E070434C18153DFC1A3739BE409ECE98A1697687590FE42D7B2C4BA433/0/78CF4EA015985FAC98DCF06050F3112A011F3F9F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E167A5E070434C18153DFC1A3739BE409ECE98A1697687590FE42D7B2C4BA433/0/78CF4EA015985FAC98DCF06050F3112A011F3F9F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78CF4EA015985FAC98DCF06050F3112A011F3F9F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:df:5e:63:73:11:cf:6d:1c:b2:4f:38:9d:76:c7:c8:e9:f4:39:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78CF4EA015985FAC98DCF06050F3112A011F3F9F
        Validity
            Not Before: Mar  5 18:01:16 2024 GMT
            Not After : Mar  4 18:06:16 2025 GMT
        Subject: CN=D540DD56D41EB6F49462A9987162B61FAD42E0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:90:c2:a0:3e:3c:99:d7:11:18:6e:2e:7d:
                    60:a6:fe:27:18:59:55:03:75:de:b6:88:6c:c7:86:
                    38:f1:0a:80:cc:00:3a:36:bb:07:8d:14:6c:35:17:
                    9d:9f:84:a3:d7:fe:5a:56:28:09:73:13:0f:18:4a:
                    a6:73:87:8f:d7:86:37:5f:cd:3d:66:74:15:95:53:
                    e4:28:a9:77:71:71:be:d6:ac:da:3b:78:f5:45:1d:
                    b4:43:aa:be:d3:6c:66:fb:f2:47:6e:db:40:d3:34:
                    c8:52:dd:05:01:69:de:78:ba:b0:1d:b2:a5:1f:09:
                    42:74:a6:06:18:6a:e0:fc:b7:45:e4:ee:50:85:b3:
                    94:77:11:9a:6b:1a:31:02:28:0c:36:62:d2:36:c6:
                    a9:79:bb:70:6d:4b:ca:6d:98:30:7a:4a:18:34:69:
                    6c:79:0b:e7:7d:78:d9:05:45:ea:a6:4c:08:43:95:
                    0b:8d:fa:32:7a:6e:97:85:03:e3:f7:84:09:9d:74:
                    55:c1:0c:51:bd:ec:d9:b7:43:54:13:9e:b4:17:f0:
                    07:df:84:49:1c:23:6d:3a:dd:2a:89:49:f4:15:35:
                    c4:96:26:1b:65:14:78:b7:82:cc:42:5c:ed:2f:b6:
                    7a:1e:12:28:78:15:e7:4d:e2:b4:2e:dd:c8:9e:7f:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:40:DD:56:D4:1E:B6:F4:94:62:A9:98:71:62:B6:1F:AD:42:E0:CF
            X509v3 Authority Key Identifier:
                keyid:78:CF:4E:A0:15:98:5F:AC:98:DC:F0:60:50:F3:11:2A:01:1F:3F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E167A5E070434C18153DFC1A3739BE409ECE98A1697687590FE42D7B2C4BA433/0/78CF4EA015985FAC98DCF06050F3112A011F3F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78CF4EA015985FAC98DCF06050F3112A011F3F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E167A5E070434C18153DFC1A3739BE409ECE98A1697687590FE42D7B2C4BA433/0/34352e3138312e34332e302f32342d3234203d3e20323639373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:20:e8:2e:68:c8:3f:16:7f:f8:7e:8c:90:c0:4d:09:19:2f:
         7d:ff:38:99:72:87:2a:37:8f:df:d1:96:77:50:0d:f9:59:db:
         ac:04:01:3a:63:8b:e0:a5:2e:96:15:5c:d5:12:16:26:41:c3:
         ff:56:4d:67:67:65:bd:4a:5c:ca:16:cd:59:e7:63:a8:89:69:
         52:d4:a1:df:eb:e2:66:4d:e6:84:ae:f3:4a:cb:aa:4b:b8:00:
         a4:13:3d:e5:85:c3:24:43:1f:af:17:c4:06:95:a1:d9:5a:2f:
         f1:b3:e1:86:ed:61:de:89:33:28:f7:10:23:25:48:1d:ed:e1:
         57:83:5f:02:af:5b:43:b7:73:de:dd:2f:03:45:f8:29:5f:27:
         e8:32:10:ef:8b:3a:7d:d5:80:9d:8f:a9:94:51:94:cb:34:39:
         84:c0:7b:dd:a6:1f:5d:7d:36:88:65:0c:66:8c:60:fd:7b:8b:
         35:9a:af:6f:c4:31:29:fb:d5:d2:df:c2:89:b2:9f:16:ed:55:
         fe:e2:c7:18:fb:fa:95:ac:67:bb:de:ad:ec:56:9c:63:5b:4e:
         7f:16:b3:60:f9:e8:9c:68:15:0b:35:4d:5f:99:c2:33:fc:9e:
         84:d9:d0:d3:00:a1:11:5f:73:88:12:4b:32:d0:4d:74:b1:1c:
         1d:ef:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:47 2024 by rpki-client on console-fra.rpki-client.org