Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e203131303134.roa
File:                     34352e3233322e3230342e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          c9/oMrw0AR5+qVVSpnV4yNKtx2V1lo5pVzIV9Ka8ugw=
Subject key identifier:   D9:70:BF:0A:56:97:55:70:98:65:36:26:82:41:F7:37:3C:49:DC:36
Certificate issuer:       /CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
Certificate serial:       5AEEA57A6D01B89144D92598CE64BF52A1DE8E9D
Authority key identifier: 84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 18:15:27 +0000
ROA not before:           Tue 05 Mar 2024 18:10:27 +0000
ROA not after:            Tue 04 Mar 2025 18:15:27 +0000
asID:                     11014
IP address blocks:        45.232.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ee:a5:7a:6d:01:b8:91:44:d9:25:98:ce:64:bf:52:a1:de:8e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
        Validity
            Not Before: Mar  5 18:10:27 2024 GMT
            Not After : Mar  4 18:15:27 2025 GMT
        Subject: CN=D970BF0A56975570986536268241F7373C49DC36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:49:c5:08:b6:72:d1:3a:0e:75:a1:c5:cb:
                    35:7c:f7:6b:d2:21:a9:fc:98:95:d2:11:08:54:5e:
                    50:0d:e0:fc:c5:c9:01:be:d6:a5:52:a7:50:28:2a:
                    db:bf:08:86:b7:7c:6c:e8:e6:1f:6e:26:e6:7b:76:
                    f3:cc:39:81:4c:78:32:29:42:c9:2c:26:3c:19:0e:
                    51:4f:f6:8e:83:fe:77:2d:0a:8c:0f:fd:c4:47:75:
                    c6:63:98:c0:46:36:cf:ed:0e:0a:87:52:07:7e:de:
                    a9:db:ad:17:0b:3b:f7:c1:4d:28:06:df:a9:46:c9:
                    91:2e:c5:d4:51:b1:64:f9:f0:10:bf:a2:34:11:4e:
                    b3:9c:60:d1:58:ec:6d:4d:6c:f6:44:c8:1e:0b:1e:
                    63:12:ad:28:50:10:a2:58:94:06:a2:ed:fe:64:0d:
                    69:0a:b5:7b:e1:87:77:20:6e:4d:82:51:f6:d3:14:
                    69:e5:c1:24:73:17:0d:d1:36:f2:7e:d2:60:eb:1e:
                    3f:08:8e:a5:d0:f5:ae:69:48:32:45:43:82:fe:87:
                    23:06:ee:f9:75:22:99:fc:dc:69:d5:af:43:36:4c:
                    f2:35:69:c8:47:55:ea:97:d6:a6:67:28:37:b3:fa:
                    f2:be:87:2d:8a:1d:4e:47:48:71:40:7d:d7:be:a6:
                    c7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:BF:0A:56:97:55:70:98:65:36:26:82:41:F7:37:3C:49:DC:36
            X509v3 Authority Key Identifier:
                keyid:84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:6f:f5:57:6d:50:2c:b4:7d:e6:2a:82:73:31:72:69:69:
         25:f9:f4:87:99:33:b3:98:1e:71:de:fd:2f:de:32:82:70:e1:
         3b:be:97:c2:1c:19:cb:ce:1c:3a:41:77:8a:0f:0a:a7:67:50:
         d2:cf:79:91:22:3c:29:fd:40:1b:c2:ad:51:80:b3:42:62:ae:
         37:4c:68:18:19:05:7c:a4:cf:f6:df:b4:10:26:b8:be:59:d0:
         2c:6b:74:7d:cf:a5:4e:5f:cc:71:1c:0a:80:11:be:c4:16:2c:
         a9:63:68:27:e3:ad:95:1b:d6:22:2d:8f:88:48:55:d7:8d:06:
         88:62:36:ee:b7:8a:84:f0:96:a5:05:a6:c8:f4:ab:16:5c:d7:
         7b:88:82:11:9c:76:b2:43:32:df:2e:af:c4:d0:53:32:27:ac:
         1f:88:f5:96:42:fe:e4:46:b8:31:bd:8e:3e:e0:31:c9:93:ad:
         aa:9a:0a:0d:21:fa:e1:8b:7b:12:44:e6:47:62:a8:c6:84:d4:
         8e:1c:5d:31:c3:9d:52:df:cb:dd:dd:7d:e0:65:52:74:e5:7d:
         8b:62:93:78:1a:c6:42:9a:cc:ad:14:94:fa:58:08:6e:7b:bd:
         b7:c3:66:49:66:99:fd:f3:a4:7f:98:b9:5d:06:1e:24:a0:23:
         92:d0:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:37 2024 by rpki-client on console-fra.rpki-client.org