Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32322d3232203d3e20323637363830.roa
File:                     34352e3136332e33362e302f32322d3232203d3e20323637363830.roa (raw, json)
Hash identifier:          fDfVLdG1qyp+cvosmaRirfzDOoCqbu7QQpfKC1RBMtE=
Subject key identifier:   23:BC:CB:5F:C7:24:7A:88:E6:D9:8F:C1:FB:40:CA:8F:AB:1E:02:D8
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       2D0FE42494EFE97E073464EE7002B08B37ACD8AD
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32322d3232203d3e20323637363830.roa
Signing time:             Tue 05 Mar 2024 17:46:42 +0000
ROA not before:           Tue 05 Mar 2024 17:41:42 +0000
ROA not after:            Tue 04 Mar 2025 17:46:42 +0000
asID:                     267680
IP address blocks:        45.163.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0f:e4:24:94:ef:e9:7e:07:34:64:ee:70:02:b0:8b:37:ac:d8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Mar  5 17:41:42 2024 GMT
            Not After : Mar  4 17:46:42 2025 GMT
        Subject: CN=23BCCB5FC7247A88E6D98FC1FB40CA8FAB1E02D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:f6:69:ea:3d:c8:67:7c:da:ae:15:8f:88:
                    8f:4d:35:6c:0e:d6:97:f0:1d:23:aa:31:60:75:04:
                    2c:54:0f:8a:2e:db:47:f2:16:21:bd:5f:ac:9a:23:
                    da:fa:eb:39:b7:b5:8e:bf:93:e7:2a:aa:b8:3c:f8:
                    21:89:7e:dc:e0:52:4c:ba:e2:4c:3d:0a:09:44:e6:
                    fd:97:57:95:78:49:dd:d7:bb:c5:d9:0f:6a:39:d4:
                    b1:13:00:f2:35:35:ef:44:44:4a:65:93:f5:51:b5:
                    44:d1:3b:c7:cf:d0:60:5a:0c:70:40:e7:86:c7:a3:
                    0d:21:fd:fe:9a:26:47:36:23:d7:7a:64:dc:0a:7d:
                    b2:46:73:af:21:a2:b2:18:27:ce:3d:9d:da:fd:e6:
                    29:f8:dc:ee:d4:f9:9c:61:d0:c9:5e:05:90:9d:84:
                    52:65:76:94:be:1b:27:89:87:06:77:96:b4:4c:b2:
                    85:0a:e8:49:bf:64:6c:d6:d2:62:6c:b0:b2:fd:fb:
                    8c:69:ed:f0:15:6a:67:9e:78:ed:f2:76:00:1e:e4:
                    5e:20:95:62:18:26:d1:d6:4f:23:06:37:bd:d7:d8:
                    cc:8a:84:37:3a:32:60:bb:87:1f:8b:c5:62:73:d6:
                    8f:13:66:75:9e:c3:41:5a:7b:51:cd:50:3f:c8:34:
                    bf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BC:CB:5F:C7:24:7A:88:E6:D9:8F:C1:FB:40:CA:8F:AB:1E:02:D8
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33362e302f32322d3232203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:65:b5:cc:54:66:9c:aa:f3:f1:21:1b:48:e2:c7:12:9b:a6:
         cc:0a:38:5c:90:5a:f2:3b:cd:36:0f:b9:54:14:54:74:6a:c0:
         c7:51:73:e1:bb:0f:65:57:96:e4:68:92:a6:59:34:ee:1b:9c:
         1c:34:e7:ae:6c:5a:f5:c7:83:1b:04:9a:1a:ca:d0:29:d0:2e:
         eb:19:d2:1a:31:03:32:26:ba:1a:89:62:90:0d:dc:c0:fa:aa:
         48:c8:34:48:f4:8f:9d:f9:dd:e0:49:db:fd:90:34:95:d0:b6:
         d3:89:21:ef:28:68:75:14:9b:50:46:82:87:6b:af:af:e7:e6:
         f6:2b:5d:9a:e9:91:51:4e:da:e7:50:10:fd:c6:19:38:e9:ec:
         ba:d2:bb:02:05:53:8b:fd:1f:33:45:f0:ab:3b:d0:17:0a:9b:
         09:5a:2e:9d:7a:fa:c1:d6:a4:69:3d:b2:6e:22:90:cf:64:6f:
         b9:62:6b:11:93:f7:dc:7e:83:61:ec:a9:a1:20:f2:9f:ef:34:
         6d:58:ae:83:cc:f6:67:ba:2b:e1:90:06:b0:e4:b6:0b:66:fb:
         78:da:df:82:43:3b:30:88:81:7f:b9:33:69:7e:61:81:2c:46:
         59:95:02:b7:6b:66:99:ef:af:86:14:4a:75:ed:e2:4a:6f:e4:
         32:c5:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org