Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa
File:                     34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa (raw, json)
Hash identifier:          Q5A/Ig7UnlEKFqgvXa+m9oIudYRB+PCUD+WjOr8szH8=
Subject key identifier:   9B:FB:BB:E7:1B:E4:74:2A:CE:E6:E2:D8:63:C2:0A:3C:A0:7A:39:DE
Certificate issuer:       /CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
Certificate serial:       0E0B8FD085AFAB762568632B6B4B4587B383D315
Authority key identifier: 92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa
Signing time:             Tue 05 Mar 2024 18:22:54 +0000
ROA not before:           Tue 05 Mar 2024 18:17:54 +0000
ROA not after:            Tue 04 Mar 2025 18:22:54 +0000
asID:                     262204
IP address blocks:        45.170.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0b:8f:d0:85:af:ab:76:25:68:63:2b:6b:4b:45:87:b3:83:d3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
        Validity
            Not Before: Mar  5 18:17:54 2024 GMT
            Not After : Mar  4 18:22:54 2025 GMT
        Subject: CN=9BFBBBE71BE4742ACEE6E2D863C20A3CA07A39DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:e7:c5:74:d0:e4:6c:d4:d8:52:64:f6:dc:
                    1b:f4:b9:ce:57:8d:51:37:13:7e:5c:ab:df:25:47:
                    aa:4e:7a:bf:13:29:97:3e:f9:b0:a7:c0:82:29:76:
                    5d:aa:23:3d:a7:c1:4a:4d:63:2a:00:75:d1:bc:81:
                    d1:0b:2f:d3:b3:ee:54:c0:1c:96:36:9c:4f:84:ba:
                    f0:be:2c:7b:78:44:c1:3d:f4:ff:d5:79:1e:f9:1b:
                    b8:38:e4:0e:73:ed:ee:98:51:12:fb:48:27:61:c1:
                    be:23:13:ff:13:b3:97:ee:51:6d:98:5c:81:0b:5b:
                    cc:ea:20:f1:c0:6e:e8:7c:d8:9e:38:a0:46:7f:df:
                    53:29:3b:ed:57:71:c9:82:57:3c:b0:03:72:72:7b:
                    d0:38:fe:f0:a5:af:88:c4:c6:4b:cc:3f:03:57:7c:
                    88:06:60:58:63:03:84:1a:aa:86:00:a4:cc:9a:57:
                    01:c5:20:c1:54:0a:33:7d:9c:65:48:03:d4:ad:3c:
                    de:fa:8c:94:8c:5f:74:21:73:4e:ff:2e:2c:92:06:
                    b1:b7:8d:84:0b:c5:67:7c:dc:f8:9a:d3:1e:3a:8e:
                    34:2f:00:b5:4e:c7:0b:20:4a:17:5f:76:24:09:88:
                    26:fd:82:9e:57:e1:f9:f2:4b:4f:98:f9:36:86:da:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FB:BB:E7:1B:E4:74:2A:CE:E6:E2:D8:63:C2:0A:3C:A0:7A:39:DE
            X509v3 Authority Key Identifier:
                keyid:92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323632323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:5e:43:b7:e2:e3:cc:09:7e:f6:f6:ef:f1:f9:37:3e:a9:b8:
         ab:5b:3b:e4:e5:39:f6:83:ba:9b:b6:c8:7e:08:25:c6:dc:49:
         2f:de:70:55:0f:d6:6a:e0:6c:8e:bc:c8:8e:68:29:40:3f:b0:
         98:09:04:bb:d9:ed:a9:b6:13:ee:ef:92:aa:87:86:f0:19:c5:
         e5:d5:d0:1b:8c:83:d5:a2:fe:de:fe:40:52:84:e7:9e:b3:e6:
         a6:5e:37:59:36:13:39:53:5b:6c:4a:ee:16:81:65:65:71:dd:
         0e:36:57:61:72:5a:7d:cf:41:1f:60:01:b2:ea:ba:e4:c6:55:
         6c:bb:72:53:9f:0c:20:4f:9d:20:02:5e:7a:3a:60:fe:de:61:
         b0:cf:56:57:17:a6:23:39:9e:8f:55:01:2f:ca:c1:42:71:6b:
         9c:f1:bf:9e:5f:98:92:c9:cc:f7:10:d9:0e:a4:60:2f:ac:3e:
         47:58:b4:4c:4e:9a:bf:42:32:50:3e:37:fe:9e:aa:28:6b:b8:
         d4:f7:88:b5:d9:72:89:3b:80:f7:a0:70:45:04:69:c9:1d:d9:
         fb:68:d0:30:f0:48:53:1e:db:2a:10:d5:84:2f:e7:43:6e:a8:
         34:9c:b3:33:a9:fd:49:06:7b:f9:17:80:a3:5e:ed:0c:8d:17:
         0f:19:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org