Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33372e302f32342d3234203d3e20323637363830.roa
File:                     34352e3136332e33372e302f32342d3234203d3e20323637363830.roa (raw, json)
Hash identifier:          hP/hC5Td09R3U5vCS6n52pR91FMMuiGJxLHDWwaHKT4=
Subject key identifier:   47:4F:2B:AF:EB:B3:EE:6F:D3:58:40:B2:E8:29:D0:E6:48:1E:65:95
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       0F38AD828EF4220599A1EF63D08E084DFEDE82F1
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33372e302f32342d3234203d3e20323637363830.roa
Signing time:             Tue 05 Mar 2024 17:46:42 +0000
ROA not before:           Tue 05 Mar 2024 17:41:42 +0000
ROA not after:            Tue 04 Mar 2025 17:46:42 +0000
asID:                     267680
IP address blocks:        45.163.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:38:ad:82:8e:f4:22:05:99:a1:ef:63:d0:8e:08:4d:fe:de:82:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Mar  5 17:41:42 2024 GMT
            Not After : Mar  4 17:46:42 2025 GMT
        Subject: CN=474F2BAFEBB3EE6FD35840B2E829D0E6481E6595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:f7:ef:c9:bd:01:a0:51:36:02:e9:a0:90:
                    7c:da:75:47:72:0c:6e:99:02:c2:63:19:3e:ee:82:
                    eb:18:aa:f2:57:f0:b3:58:bb:23:60:86:78:74:67:
                    01:71:4b:c9:a1:e9:e6:db:3f:95:8d:e2:eb:22:e6:
                    b2:f3:f9:37:ec:23:d5:87:30:36:cb:af:9c:cc:08:
                    8c:8c:0d:37:bd:2e:b4:28:eb:c1:f6:26:f1:79:c4:
                    72:81:95:42:ec:15:a9:2f:39:49:1e:12:d2:18:ed:
                    3b:06:67:ff:6e:fb:b6:ba:dd:6e:e6:c7:c4:10:4d:
                    4c:4e:56:37:56:ec:47:5f:44:b5:3f:0b:0f:bb:1e:
                    cf:fd:f1:bf:aa:87:8b:3d:b1:a4:32:48:18:4b:48:
                    53:e1:05:11:a1:5b:18:19:30:de:3e:0d:72:44:0f:
                    bf:83:95:a0:75:ab:34:46:06:51:01:9c:64:bb:bf:
                    35:e3:45:55:52:0a:a3:62:a3:64:27:8f:d0:2e:38:
                    2a:07:36:0f:72:c1:af:4f:99:83:89:6e:7a:9d:2b:
                    ee:99:92:f8:17:a5:74:e7:ab:49:fc:a4:ed:e0:60:
                    0d:91:91:7d:55:d0:cc:0c:84:39:ba:4e:d3:2c:2e:
                    33:98:32:aa:fd:3f:49:53:05:64:9b:e7:26:13:64:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4F:2B:AF:EB:B3:EE:6F:D3:58:40:B2:E8:29:D0:E6:48:1E:65:95
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33372e302f32342d3234203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:34:ee:4b:4b:55:cc:02:be:1d:d0:f2:2d:4e:84:72:67:
         b0:f5:9a:ed:c6:c5:94:b6:29:2f:c8:19:30:9f:4c:2a:bb:7f:
         6b:73:55:ea:cc:29:a8:ec:2a:c4:71:61:7b:06:3d:46:e7:4d:
         07:08:15:61:4d:cd:1c:6b:b3:45:a1:4d:77:0b:0e:a1:fa:c9:
         28:ea:ad:21:d5:6d:f5:2c:ad:c6:0b:f6:53:83:df:93:11:0f:
         c7:58:52:e0:cf:1d:83:be:7e:c1:7b:24:a2:25:1e:e5:6b:87:
         73:e6:5e:d5:22:62:1b:08:24:a9:a5:39:72:f6:bf:08:05:e0:
         70:5f:9b:03:6f:20:d4:8f:3c:d2:55:f0:ec:14:29:f7:62:1f:
         2b:27:be:39:49:d5:49:50:38:15:8c:5a:99:eb:81:b5:32:4a:
         fe:e3:79:44:32:71:23:25:46:33:67:e0:2a:25:29:b5:45:dc:
         09:1e:84:72:8c:57:29:a4:68:3d:90:f7:bc:d5:b7:22:45:7c:
         c7:f9:82:80:a8:6b:68:4b:8f:2b:f1:8d:1c:9b:96:09:63:8d:
         a2:0a:0e:16:1a:f5:3a:05:a7:da:c0:a4:7e:69:d1:e7:f5:a6:
         3c:25:51:32:4f:2a:3d:f3:d8:28:6b:61:5b:dc:94:a7:4d:7c:
         c0:da:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org