Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa
File:                     34352e36352e3232342e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          6z4WrkB8L5nais6x5ekgKg+GviUi1bWMGyhDmaA/Z5Y=
Subject key identifier:   73:F9:43:82:3B:95:BB:D8:CD:7C:DA:D8:A7:7D:00:A9:5E:7F:00:8E
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       5557A320A743FFE8129C4B946ED64C23D5860D5C
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     266725
IP address blocks:        45.65.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:57:a3:20:a7:43:ff:e8:12:9c:4b:94:6e:d6:4c:23:d5:86:0d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=73F943823B95BBD8CD7CDAD8A77D00A95E7F008E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:18:b0:c8:00:a5:3a:0f:93:36:75:d9:90:
                    01:92:12:d9:03:d1:1f:d6:fb:86:16:f7:82:98:9d:
                    a5:a9:82:10:c8:c6:fe:c3:21:6d:36:e8:53:0e:82:
                    a2:6b:f1:ee:99:5f:44:d2:cd:4a:58:91:36:9e:d4:
                    ed:7f:f0:34:44:41:37:dd:a0:59:20:66:04:91:1e:
                    9e:86:6b:43:2c:ee:25:d0:a1:10:a1:6f:42:dd:6f:
                    2e:fd:cc:68:47:46:49:96:18:e3:2d:a6:6d:1f:97:
                    a5:8a:fe:da:9d:34:af:d9:57:47:c9:9e:50:f2:2b:
                    79:f6:8d:53:59:99:e7:31:61:df:47:d6:e5:8d:95:
                    1f:31:42:4a:15:a6:62:03:9b:81:8b:52:ed:fa:51:
                    90:9c:b8:73:36:7b:a5:d7:1b:e2:80:5e:04:13:1f:
                    91:45:11:77:fe:b2:61:0d:5a:5f:53:9c:ac:a1:9f:
                    19:f2:cb:19:4c:6a:88:21:f8:01:14:17:2a:9b:8d:
                    d9:ff:a4:b7:00:d3:67:67:b9:9c:17:4a:94:bf:5b:
                    a0:04:d0:fa:ef:50:4c:f7:a7:49:a7:e5:ef:bc:63:
                    9f:b2:83:73:07:46:90:96:4d:c6:4c:da:c1:23:1d:
                    de:38:46:37:48:64:dd:94:a4:14:84:73:d4:08:0e:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F9:43:82:3B:95:BB:D8:CD:7C:DA:D8:A7:7D:00:A9:5E:7F:00:8E
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:2e:fb:8a:69:b2:4c:ba:83:bd:7c:fb:03:4c:77:73:5b:69:
         88:7c:e4:fb:c6:53:05:9d:56:80:ec:49:8d:9a:3e:dd:11:68:
         a7:22:f7:e8:b3:13:2f:05:67:e6:44:d2:1d:0e:16:10:23:a9:
         96:b0:cb:8c:90:24:2b:ef:0c:7b:6a:e2:c1:2c:56:3b:d0:94:
         ba:2f:dc:11:a0:b8:83:a5:c5:6d:68:2b:3c:78:a4:e8:82:1b:
         68:86:db:64:53:82:96:9e:d6:05:8d:91:2e:51:cb:f1:69:06:
         c3:05:2e:63:fd:8c:18:a1:ab:f7:6f:a7:99:d0:79:52:b4:b5:
         00:8d:54:88:65:3d:4b:f6:33:b1:84:9c:ec:03:49:d5:16:8a:
         b9:22:33:17:95:96:7d:a0:1b:8b:70:5f:f3:b0:93:4f:94:54:
         33:da:17:d9:a5:fc:1a:6a:52:ef:f3:78:b5:fc:04:6c:87:fc:
         33:6a:85:82:26:12:9c:81:76:29:86:3c:17:ed:b1:2a:a1:01:
         73:dd:61:d5:e0:95:8b:59:8a:12:42:05:55:54:4f:5b:d1:af:
         62:dd:9b:63:b4:23:86:51:59:e6:49:3c:35:15:63:89:d1:f9:
         a0:3c:14:72:6e:65:25:7c:04:ab:65:86:ed:bc:0b:dc:5e:fb:
         b6:8c:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:38:07 2024 by rpki-client on console-fra.rpki-client.org