Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa
File:                     34352e36382e34302e302f32322d3234203d3e20323733383637.roa (raw, json)
Hash identifier:          ZEwKVVMXBsc4TZGAyGUEaXAnTpCX4B+VlnHsxupmd14=
Subject key identifier:   DC:23:D9:78:5A:E0:CF:10:A6:6D:91:75:C9:4D:1F:AD:91:13:21:21
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       34A788010F3AF369FDE3EE155E21170BC94C27E1
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa
Signing time:             Mon 01 Jul 2024 21:20:00 +0000
ROA not before:           Mon 01 Jul 2024 21:15:00 +0000
ROA not after:            Mon 30 Jun 2025 21:20:00 +0000
asID:                     273867
IP address blocks:        45.68.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a7:88:01:0f:3a:f3:69:fd:e3:ee:15:5e:21:17:0b:c9:4c:27:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jul  1 21:15:00 2024 GMT
            Not After : Jun 30 21:20:00 2025 GMT
        Subject: CN=DC23D9785AE0CF10A66D9175C94D1FAD91132121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:16:e0:2e:bb:49:05:0d:9e:53:c3:9d:0a:
                    d8:a7:76:aa:6b:b6:e5:d7:a8:d2:21:f2:f3:ff:c5:
                    79:45:bc:08:d6:1f:ea:0d:25:a0:6d:41:31:79:58:
                    d1:01:f8:e3:39:c8:23:6f:89:49:7f:34:d9:7b:ce:
                    ca:ff:cd:f1:79:a9:85:3d:3b:4c:a1:16:33:d5:a8:
                    fc:17:ef:c4:33:b8:64:9d:0d:a6:8a:91:63:45:ef:
                    71:f6:dd:f5:9e:d7:fe:c4:34:19:b3:25:55:9e:d5:
                    bb:d9:79:03:c9:41:62:c7:92:4a:0e:09:60:e0:88:
                    02:0d:17:52:2c:0e:14:4f:70:e8:1e:e5:99:95:1c:
                    78:b2:70:40:27:05:4c:4c:90:0d:4f:df:ca:6d:08:
                    eb:e3:4b:d8:7b:a3:6a:fc:21:0c:7d:06:8c:a1:27:
                    5c:ad:62:4a:2a:78:99:98:11:b2:24:4d:68:71:3c:
                    5f:ab:34:3f:e2:cb:2f:07:53:8e:95:cf:eb:43:9c:
                    0f:fd:06:ad:1b:6e:c1:06:39:d6:3b:f6:96:02:95:
                    4f:c8:0a:42:0a:bf:4f:96:d9:ba:5a:4d:29:09:77:
                    f5:cd:86:23:f3:8c:28:db:7d:64:08:a8:59:eb:e2:
                    75:9d:a0:8b:d5:e7:d7:c4:c1:c2:07:ca:3b:5c:e8:
                    86:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:D9:78:5A:E0:CF:10:A6:6D:91:75:C9:4D:1F:AD:91:13:21:21
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32322d3234203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:5e:4d:58:29:94:8f:aa:5e:d8:87:ea:2c:5e:4e:01:25:8b:
         dd:2a:4f:f5:9b:7f:c6:57:7e:0f:e5:06:dc:c1:a9:93:7b:65:
         6b:dd:81:fb:3d:2f:66:73:0a:31:04:4f:98:14:0d:11:b3:2e:
         2f:fb:84:ca:9c:76:c2:31:da:ff:b5:dc:4e:85:e1:e3:08:3f:
         ad:62:d2:87:38:92:52:40:f7:db:7b:3a:07:ba:a4:80:af:9c:
         7b:c4:35:9b:06:24:78:4b:8c:94:87:c8:3d:7d:40:93:c0:87:
         ac:31:7c:8d:a2:e7:4e:f1:da:b7:c4:cb:20:15:ec:de:41:96:
         92:6e:c1:ef:d0:20:c0:74:d4:f2:5a:c3:1d:dc:ae:61:56:db:
         a5:51:d3:27:58:e9:2d:16:a7:ff:a3:c9:36:5f:5e:97:e7:1e:
         ed:ca:62:9f:a2:af:73:56:f5:35:c5:b6:2e:a3:50:af:f9:44:
         44:5b:a1:89:e8:e1:70:92:39:22:85:19:9f:9a:44:26:8e:fb:
         37:6b:34:3f:fa:f1:24:18:bd:58:d7:87:0d:2a:fb:8f:6e:ac:
         55:42:f6:66:28:e3:c2:a2:4f:03:ce:8f:e6:bd:8d:35:ad:fb:
         d0:98:9b:6d:e9:83:1e:40:d4:47:a6:b4:48:db:ee:07:57:d9:
         ce:2c:c3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org