Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa
File:                     34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa (raw, json)
Hash identifier:          rRfthX15R6zMgQCQ5eUOILgDZ4PZWDqa57sC8GwGMug=
Subject key identifier:   26:58:FE:C1:A8:61:A9:50:AB:20:F3:31:4E:6B:E9:69:95:7D:5A:1E
Certificate issuer:       /CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
Certificate serial:       7D6C05A00E8B6C6C93DF9A6C8399441A9D0C545C
Authority key identifier: AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa
Signing time:             Thu 21 Mar 2024 13:30:00 +0000
ROA not before:           Thu 21 Mar 2024 13:25:00 +0000
ROA not after:            Thu 20 Mar 2025 13:30:00 +0000
asID:                     269786
IP address blocks:        45.188.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6c:05:a0:0e:8b:6c:6c:93:df:9a:6c:83:99:44:1a:9d:0c:54:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF75F7E85911B6D6A42FE6E1822724A7A7950D96
        Validity
            Not Before: Mar 21 13:25:00 2024 GMT
            Not After : Mar 20 13:30:00 2025 GMT
        Subject: CN=2658FEC1A861A950AB20F3314E6BE969957D5A1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:76:0b:f1:c2:6f:96:6e:4e:46:35:37:cc:a6:
                    a3:4e:c9:d9:67:66:23:87:a1:c3:b9:2d:27:fa:9d:
                    65:d2:cb:b2:1c:e9:ba:16:d1:19:9e:27:17:db:14:
                    fd:1e:32:5e:15:a1:1d:4a:18:ae:1b:c4:30:4b:5d:
                    04:53:ad:c3:2c:39:0d:3e:37:84:5a:d3:59:5f:6c:
                    98:94:04:a7:85:0b:05:aa:4e:53:a7:b2:df:2b:57:
                    12:cd:38:6a:6e:ce:61:a7:43:f5:ce:8d:a4:bf:29:
                    c4:5b:29:72:78:7f:2a:1c:d0:20:90:13:18:9c:5b:
                    ad:fa:42:c7:17:d5:7e:b8:0b:6a:0e:a9:29:ee:8c:
                    c1:44:88:65:53:99:98:48:d8:9c:f5:c7:d3:e3:30:
                    1e:dc:90:12:5a:fb:47:1f:ef:34:ab:70:5e:26:78:
                    d2:f4:9b:0b:c3:ac:fb:bc:7b:0b:d7:77:34:be:e2:
                    97:46:b9:60:0a:b6:cd:81:d6:29:68:3e:a1:a0:c6:
                    fa:81:db:4d:d1:7d:c7:0d:b9:f0:59:29:06:4f:96:
                    d7:79:d7:96:63:df:08:96:27:d4:2a:a1:ea:90:61:
                    e6:c0:91:66:14:59:21:c1:3b:92:bd:aa:48:80:94:
                    ac:44:88:8d:7e:7e:a0:46:a6:a3:75:82:5a:db:9e:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:58:FE:C1:A8:61:A9:50:AB:20:F3:31:4E:6B:E9:69:95:7D:5A:1E
            X509v3 Authority Key Identifier:
                keyid:AF:75:F7:E8:59:11:B6:D6:A4:2F:E6:E1:82:27:24:A7:A7:95:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF75F7E85911B6D6A42FE6E1822724A7A7950D96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F21CF4DE4782DFFEAE465FCA269A675117EA5A36F3D16EC27FD789FFED99483F/0/34352e3138382e3231302e302f32342d3234203d3e20323639373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:64:36:1e:dc:99:4c:9e:ef:f0:21:ee:fd:83:67:ab:3f:
         41:ed:b5:be:89:19:63:10:0d:4d:28:4c:1b:f8:d3:da:0a:7a:
         07:6d:e4:e8:14:92:f2:cc:0c:b2:c5:8b:7b:a2:c5:72:be:ba:
         02:35:27:00:22:99:2c:6c:fd:ea:7d:48:38:5b:3e:df:c3:0a:
         cb:38:7d:8c:e3:47:3f:d7:bb:f8:cb:a3:25:1a:c6:e2:d8:36:
         52:5f:c6:f5:aa:bb:a9:fc:25:63:f5:2d:c8:54:89:99:8b:fe:
         0c:88:46:54:cd:93:2a:b9:2e:70:8e:14:e5:35:ab:92:f9:4b:
         09:13:52:ef:80:65:27:d7:6a:b6:fb:8c:89:a0:f1:e5:dc:39:
         ac:7e:78:21:b6:4b:9f:f8:ed:87:d2:a5:1b:ca:cc:60:4b:3e:
         37:7a:04:44:8e:44:63:a7:39:35:b9:05:47:e7:e6:36:89:65:
         a0:82:1f:fc:4f:5a:d4:29:e1:7f:9a:10:f0:d2:cf:44:88:99:
         9e:42:e6:a3:10:fc:eb:8e:cf:fc:e6:0c:a0:cb:f5:2f:95:20:
         23:57:5d:93:27:55:f5:87:18:6c:3c:a7:44:c9:33:e8:d5:c0:
         66:b6:ff:58:18:bb:06:01:7b:a2:09:d3:08:d3:2a:62:84:6c:
         38:51:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:44:08 2024 by rpki-client on console-ams.rpki-client.org