Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33382e302f32342d3234203d3e20323637363830.roa
File:                     34352e3136332e33382e302f32342d3234203d3e20323637363830.roa (raw, json)
Hash identifier:          lay93Ht8aMDd5Kwub+ZpgDLkz7O3hg0+Pl17MwdqWq0=
Subject key identifier:   16:D1:60:21:C1:D6:B8:35:31:C0:14:0A:53:E6:3D:4D:36:C6:96:41
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       15EC6820DC9DEAEA55050601615210766CE297ED
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33382e302f32342d3234203d3e20323637363830.roa
Signing time:             Tue 05 Mar 2024 17:46:43 +0000
ROA not before:           Tue 05 Mar 2024 17:41:43 +0000
ROA not after:            Tue 04 Mar 2025 17:46:43 +0000
asID:                     267680
IP address blocks:        45.163.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ec:68:20:dc:9d:ea:ea:55:05:06:01:61:52:10:76:6c:e2:97:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Mar  5 17:41:43 2024 GMT
            Not After : Mar  4 17:46:43 2025 GMT
        Subject: CN=16D16021C1D6B83531C0140A53E63D4D36C69641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:84:40:50:7c:3d:da:0e:51:2b:6c:08:df:
                    43:9d:d7:1b:13:12:5f:70:35:b5:f0:e1:2b:34:c9:
                    2d:88:fb:a6:ab:1b:cf:b6:c3:18:1c:d7:fa:db:aa:
                    fa:dc:44:8d:e3:d1:2e:9a:23:2e:14:49:bb:81:26:
                    39:c4:c2:e8:3e:f6:ae:b1:5a:98:51:b6:ec:ed:70:
                    e4:e5:01:2a:29:63:36:3b:06:5b:6a:78:01:f9:20:
                    9c:6b:25:cc:bc:6f:87:41:6a:a0:12:e1:ec:df:82:
                    8c:11:75:8a:a6:a4:85:f5:4b:07:0d:83:6c:c9:48:
                    19:96:7d:a8:fa:9e:c6:d5:68:d4:c0:93:8b:f2:83:
                    62:73:ad:14:31:8e:4e:d7:cb:fa:40:b5:79:94:2d:
                    a5:6e:c4:2b:74:84:83:54:f1:4c:6f:75:bb:b5:ad:
                    2b:45:bb:6b:b2:83:09:bb:02:fc:39:fe:94:23:e2:
                    09:f8:e3:42:3d:52:6d:89:17:ae:9c:56:24:89:51:
                    b6:24:40:7c:50:4c:57:b2:51:c3:d1:6a:29:03:29:
                    97:0d:e6:e6:d5:3d:03:75:fd:99:69:22:a3:69:b5:
                    67:12:f3:2f:9e:47:09:b7:8e:6a:50:de:98:06:e2:
                    25:ed:cd:de:4a:cf:b9:76:ed:93:49:d5:19:98:e5:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D1:60:21:C1:D6:B8:35:31:C0:14:0A:53:E6:3D:4D:36:C6:96:41
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33382e302f32342d3234203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:7c:db:68:07:97:a4:21:de:7e:f5:4a:35:ea:81:3c:08:95:
         ea:bd:04:bb:42:c1:e5:a9:53:b4:85:d0:7a:96:a4:78:1b:f7:
         a6:13:02:38:59:59:66:40:c9:9d:4c:e0:38:8e:c5:56:af:a2:
         4b:89:b8:aa:e4:ff:d4:50:65:9d:97:26:79:72:fa:0e:56:c9:
         6e:78:24:35:30:b2:76:32:a0:11:d0:00:c4:e9:48:0f:a9:31:
         dd:5b:b0:33:2d:0d:72:10:b1:c8:9d:d8:e1:58:75:f3:59:08:
         03:da:1e:2b:e6:bb:da:fe:29:9e:2a:11:fc:28:be:35:20:63:
         60:6d:e7:be:f1:b2:00:7a:75:94:18:af:32:4a:1b:3e:ea:3e:
         fb:28:bd:f9:95:36:2c:a5:df:a7:65:fa:00:11:55:1a:d1:0f:
         91:57:69:fd:cf:51:bf:34:5e:c8:25:51:7b:fd:f8:29:cb:e1:
         e4:09:78:cd:30:c3:7f:d3:a7:ce:f2:da:30:36:c0:2b:c5:97:
         39:35:a1:39:22:ca:4d:bb:df:88:5b:f8:f0:d6:a4:ed:6c:c8:
         11:a1:61:76:45:39:f9:56:d0:f9:09:eb:e0:2f:81:b4:29:1a:
         cd:da:10:71:5c:a0:3b:a8:e1:be:02:b7:fa:d2:26:45:d8:9f:
         90:29:a9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org