Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3234203d3e20323639383232.roa
File:                     34352e36352e3233322e302f32322d3234203d3e20323639383232.roa (raw, json)
Hash identifier:          fe2et0NP2n3WYw0IoBLDn2LRmAuBzAvjZ9vjJYhUlgw=
Subject key identifier:   7B:6A:40:19:59:4F:64:E5:39:80:70:CD:44:91:AA:C4:15:5D:E7:B9
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       798CA9D8891FBBBA8704361EDA31D46820FC141D
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3234203d3e20323639383232.roa
Signing time:             Tue 05 Mar 2024 18:01:30 +0000
ROA not before:           Tue 05 Mar 2024 17:56:30 +0000
ROA not after:            Tue 04 Mar 2025 18:01:30 +0000
asID:                     269822
IP address blocks:        45.65.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8c:a9:d8:89:1f:bb:ba:87:04:36:1e:da:31:d4:68:20:fc:14:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Mar  5 17:56:30 2024 GMT
            Not After : Mar  4 18:01:30 2025 GMT
        Subject: CN=7B6A4019594F64E5398070CD4491AAC4155DE7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:e3:cf:2a:7a:f0:c9:29:aa:cd:3e:45:41:
                    2d:12:ac:8f:85:06:a8:d6:6d:2b:2c:6f:98:d9:8f:
                    4f:2d:2d:78:a5:9a:e8:c9:7c:9f:de:57:1b:b9:50:
                    ed:5c:0d:4c:e1:7a:a4:f8:ff:64:f1:e5:b8:16:f2:
                    1e:09:08:f8:fd:e4:9c:4a:4e:51:a5:af:ea:d8:c1:
                    ad:e4:9e:53:b8:7c:41:c2:a0:f1:db:c1:79:ff:39:
                    c1:ae:1d:e0:59:26:aa:6a:93:e2:84:9f:57:c4:6b:
                    74:33:80:d9:da:ae:25:79:32:b9:76:d0:6d:97:10:
                    80:6d:05:15:bc:92:0d:2d:6a:35:a7:54:f4:39:8c:
                    78:09:6c:e2:9e:49:61:b7:ea:a8:68:f4:a1:46:a9:
                    72:fd:3f:bc:0e:72:c8:01:bb:fd:33:b6:47:db:0e:
                    e8:a7:6a:06:a1:7f:cb:ea:f0:e6:17:c8:d4:9f:6f:
                    5b:d1:13:6e:9a:b5:8e:ff:94:98:06:16:9d:0b:7c:
                    62:c3:5d:6f:59:80:e9:02:a9:2f:88:b6:01:3c:b1:
                    40:46:3f:e5:1f:e7:cc:5a:d7:5b:7f:d3:4c:fe:58:
                    1f:3e:ce:9e:81:c0:3c:9f:fb:d0:bb:17:b7:77:f5:
                    98:4e:8e:fc:61:2f:98:d9:01:c1:0a:b4:7b:b7:34:
                    9e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6A:40:19:59:4F:64:E5:39:80:70:CD:44:91:AA:C4:15:5D:E7:B9
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/34352e36352e3233322e302f32322d3234203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:bc:d4:45:59:62:03:d7:50:17:ee:28:a4:18:fc:3c:05:
         28:31:27:73:d0:13:0a:80:4e:31:b8:3c:d7:03:b2:bb:b3:5b:
         c5:44:9a:5b:1a:97:1b:5f:af:bc:79:fd:76:21:03:98:ad:2e:
         24:70:16:4e:79:f6:36:d0:d0:41:ba:24:ac:37:9c:e7:b0:15:
         bd:6f:8d:a3:22:27:e6:0c:d3:a4:13:c7:de:ab:e1:3a:e4:1a:
         02:3d:a6:ac:ad:9b:66:48:83:9d:4a:69:b2:33:16:75:7e:61:
         11:e1:9a:8e:02:9a:8d:99:5b:88:ec:ad:d0:71:84:28:37:dd:
         35:d7:0f:ee:1b:46:60:eb:bb:0a:bf:6c:2b:2c:ac:bd:a0:d4:
         4b:14:c5:01:01:ae:c5:30:25:77:95:f1:55:f2:cb:05:88:e3:
         7f:ec:45:e0:ed:42:89:c3:77:6f:6a:cf:f7:58:30:9b:1c:6c:
         72:1e:b9:c2:b0:05:31:57:09:e0:ae:59:b4:29:fb:92:17:17:
         68:4d:d4:d6:e3:8c:00:43:94:27:db:d8:d1:e1:1a:ff:59:e2:
         73:ac:9c:fb:14:ae:9b:0f:63:a4:ce:38:73:39:03:02:c0:d4:
         42:bd:de:04:0e:b6:34:e8:60:71:94:a7:88:23:6a:29:8f:f5:
         dc:51:7e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org