Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e203431303935.roa
File:                     34352e3233362e3137322e302f32332d3234203d3e203431303935.roa (raw, json)
Hash identifier:          oCJ7hfiqhBUi0ufidlAtvIUc99+/qAYXgH8L9gJlIm8=
Subject key identifier:   DF:36:83:B0:F5:FE:84:81:54:74:F5:15:52:C2:13:0A:ED:1D:01:B3
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       3645F99FFE01BFD9C11E2BAC162E622D38E258D1
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e203431303935.roa
Signing time:             Tue 05 Mar 2024 18:21:27 +0000
ROA not before:           Tue 05 Mar 2024 18:16:27 +0000
ROA not after:            Tue 04 Mar 2025 18:21:27 +0000
asID:                     41095
IP address blocks:        45.236.172.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:f9:9f:fe:01:bf:d9:c1:1e:2b:ac:16:2e:62:2d:38:e2:58:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Mar  5 18:16:27 2024 GMT
            Not After : Mar  4 18:21:27 2025 GMT
        Subject: CN=DF3683B0F5FE84815474F51552C2130AED1D01B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:71:a5:07:a8:52:dd:61:9a:56:a9:0f:5a:
                    b5:ae:04:da:1f:11:3a:46:39:22:f9:ac:57:46:f1:
                    ff:0f:0d:3a:9d:28:74:b3:df:c8:c0:0a:04:08:3e:
                    20:a5:fc:c8:56:06:82:3e:dc:18:79:6e:82:a2:ca:
                    55:1a:98:f2:5f:44:7d:a1:48:91:bb:dc:c2:d4:40:
                    04:59:ca:1c:86:8b:8c:fa:82:b0:91:bb:54:19:2f:
                    af:ee:9c:a5:f1:31:3c:82:8e:98:e4:b7:fd:4e:e9:
                    46:67:f9:de:4b:d6:2c:dc:b2:84:cf:47:69:4c:d1:
                    78:f1:5f:b6:ef:c5:0a:35:e2:c7:eb:48:39:04:9c:
                    d4:5c:af:ff:2b:b0:f7:0e:13:9c:38:be:1b:e2:5c:
                    49:5b:68:1b:10:51:bf:d9:0a:e7:eb:14:9f:2c:cc:
                    ee:bb:6c:55:b7:56:ab:e0:dc:0f:89:a3:87:2f:b8:
                    7a:4f:f3:cf:02:22:eb:42:87:39:13:87:74:d7:c3:
                    45:49:3b:f2:30:bc:b5:df:a9:d0:db:9e:a9:0a:97:
                    c4:f1:40:d8:05:23:41:bd:13:f8:89:20:39:05:8e:
                    03:52:de:cb:38:8c:f5:80:c0:8c:72:f8:c8:f1:c6:
                    f2:99:bf:4c:40:30:a7:77:31:ac:4f:48:a4:b1:52:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:36:83:B0:F5:FE:84:81:54:74:F5:15:52:C2:13:0A:ED:1D:01:B3
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:a2:c9:ac:ab:3a:bc:d4:93:ba:9a:0a:72:be:25:aa:1f:
         11:2f:bf:b2:1f:54:1e:05:4a:1b:63:a3:fd:4e:92:56:6e:38:
         51:93:18:42:ec:22:6c:54:45:be:ae:48:b7:d0:15:21:8a:fe:
         91:af:0b:83:8b:02:9b:64:ef:69:d6:0d:09:7e:f3:b6:6b:87:
         5f:58:5c:7f:0d:d8:51:33:5f:ff:48:20:25:cb:d6:93:4b:89:
         fe:c8:f1:63:2f:dd:fb:67:a9:93:d5:6b:3b:6a:9e:08:af:41:
         d6:c8:f9:f2:a3:60:2a:76:3c:31:bc:29:ed:2b:1e:4f:0b:b8:
         36:43:c3:4e:14:d8:36:14:bf:a6:93:6a:36:b5:26:c8:a3:05:
         50:5f:df:cc:bb:e5:ee:5e:f2:dd:e5:dd:da:8b:fd:d3:dd:39:
         23:5b:63:6d:e8:bd:0f:31:c4:7e:70:56:df:c6:ff:31:d0:69:
         ee:c5:4d:ed:ee:45:f8:e4:c8:91:8f:58:92:80:5d:a9:a6:10:
         5a:f5:c2:25:3d:b7:bb:ea:6e:e5:b9:82:ea:59:97:bf:1c:97:
         76:0b:af:49:a2:20:1e:10:03:21:ec:34:59:f7:24:76:76:c2:
         bb:16:ce:2d:38:b6:f6:04:4b:d4:da:ee:4d:a6:36:9c:20:58:
         75:cf:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org