Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3138382e302f32322d3234203d3e20323639373335.roa
File:                     34352e3138312e3138382e302f32322d3234203d3e20323639373335.roa (raw, json)
Hash identifier:          AnkCEN1FeDvoY/B+78lf5CsUYUD3jwdS/s4qr+PGrbA=
Subject key identifier:   0E:E5:1D:72:16:F3:22:17:E6:A7:C5:D8:15:5C:C7:A5:B1:2B:4F:4C
Certificate issuer:       /CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
Certificate serial:       1E318970BE7EED9BB46EABB34A27D2FD41965391
Authority key identifier: 6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3138382e302f32322d3234203d3e20323639373335.roa
Signing time:             Tue 05 Mar 2024 17:48:01 +0000
ROA not before:           Tue 05 Mar 2024 17:43:01 +0000
ROA not after:            Tue 04 Mar 2025 17:48:01 +0000
asID:                     269735
IP address blocks:        45.181.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 May 2024 05:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:31:89:70:be:7e:ed:9b:b4:6e:ab:b3:4a:27:d2:fd:41:96:53:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
        Validity
            Not Before: Mar  5 17:43:01 2024 GMT
            Not After : Mar  4 17:48:01 2025 GMT
        Subject: CN=0EE51D7216F32217E6A7C5D8155CC7A5B12B4F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:22:58:88:d5:ac:2e:65:c8:bb:db:f0:18:71:
                    f8:09:f4:a3:63:53:f4:25:94:64:af:bc:77:ac:bf:
                    d4:da:6f:8c:2d:bf:54:a0:d7:64:06:3b:f6:7e:ac:
                    d4:60:96:1a:3f:db:79:3f:13:06:19:9e:6e:d0:b8:
                    96:37:af:88:9f:44:43:e6:d6:cc:90:be:17:a9:9d:
                    eb:a6:da:92:0b:be:a2:0e:ab:5f:4d:29:3b:e1:2e:
                    5f:7a:ea:47:dc:71:fa:f3:17:3f:8d:1a:10:bc:8f:
                    7b:ca:02:79:4f:79:cb:aa:be:76:8f:96:ea:f7:f2:
                    f6:52:ce:b1:02:4f:2c:47:bb:62:4b:64:30:31:76:
                    2a:11:05:aa:8e:88:44:20:b9:4a:32:33:28:e4:1f:
                    d9:53:4b:3c:58:ea:97:28:63:69:f2:f4:04:92:9b:
                    41:17:c0:ba:17:44:00:3d:5d:fa:a6:11:16:54:f5:
                    97:90:91:65:94:96:42:30:b0:d3:fa:38:5c:90:67:
                    1c:49:2a:0f:1d:f4:df:2d:2d:45:e3:41:70:be:d8:
                    4e:72:b0:77:7d:fe:9b:0f:90:0f:0b:4e:76:c6:53:
                    56:62:b2:0d:bf:f0:44:0f:f5:ab:2d:32:ca:ae:31:
                    ca:7e:f7:a4:e0:8b:50:4b:e8:b9:88:97:19:59:4e:
                    76:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:1D:72:16:F3:22:17:E6:A7:C5:D8:15:5C:C7:A5:B1:2B:4F:4C
            X509v3 Authority Key Identifier:
                keyid:6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3138382e302f32322d3234203d3e20323639373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:b7:54:a0:39:2a:db:46:f5:06:63:df:12:27:23:d0:2a:d5:
         76:7d:8d:a6:db:7e:99:7d:a7:01:60:68:be:4c:84:4b:b9:d6:
         8e:82:a9:77:96:be:ff:3a:30:e4:12:96:32:90:7b:3d:00:27:
         88:72:5b:3b:f7:a7:9e:4d:8d:d8:8c:c2:5a:ed:12:69:4b:30:
         e5:c2:32:c7:66:5a:48:fb:15:a6:5e:e4:b5:05:20:88:fb:4b:
         73:d8:69:e8:b0:11:4f:a9:aa:eb:49:8b:d5:0e:c0:ff:4d:59:
         ba:3c:27:80:16:6b:b5:6c:5b:3f:4b:ad:84:ad:52:bb:ef:30:
         b2:9d:cb:b0:76:96:54:5b:e4:ed:74:d4:b0:bf:f4:9e:29:26:
         b7:2a:3e:2b:21:c1:18:b6:1b:f7:56:63:bd:c0:d9:51:28:0f:
         72:b8:9b:11:5a:8f:d8:9c:4f:76:f0:ff:d7:cc:37:80:59:37:
         c7:d1:07:44:f5:ed:19:4e:6e:2c:8c:ef:3f:05:d2:aa:45:22:
         ee:31:8d:e7:fd:d7:73:9b:f8:7c:04:9b:5e:8e:89:d7:3b:e2:
         58:7f:38:fb:d1:59:83:7b:d9:02:08:08:93:0f:a8:e8:0e:6b:
         9b:99:b5:0a:f1:65:0c:b2:42:7f:27:e6:63:09:ff:cc:60:a3:
         bd:10:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:35:51 2024 by rpki-client on console-fra.rpki-client.org