Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa
File:                     34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa (raw, json)
Hash identifier:          hFiNNx21BqfAPuepvz0k5TQYQJ4Dyi0vNlMKqryppZo=
Subject key identifier:   CF:BA:74:7C:DD:6F:48:E1:8F:35:C5:68:CB:71:CE:B3:0F:72:57:B8
Certificate issuer:       /CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
Certificate serial:       73B67DA75A379C27C6F45D6E45E5ECD87543122C
Authority key identifier: B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa
Signing time:             Thu 07 Mar 2024 04:50:00 +0000
ROA not before:           Thu 07 Mar 2024 04:45:00 +0000
ROA not after:            Thu 06 Mar 2025 04:50:00 +0000
asID:                     269815
IP address blocks:        45.186.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 11 Jun 2024 05:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b6:7d:a7:5a:37:9c:27:c6:f4:5d:6e:45:e5:ec:d8:75:43:12:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F0C9DD73F6C1475F1456103DA6BB622464669F
        Validity
            Not Before: Mar  7 04:45:00 2024 GMT
            Not After : Mar  6 04:50:00 2025 GMT
        Subject: CN=CFBA747CDD6F48E18F35C568CB71CEB30F7257B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:7d:f7:3e:37:6a:c9:2c:4b:0b:d7:b8:c1:
                    14:cf:ab:5a:e2:9f:ce:69:de:e7:66:e0:ff:a0:47:
                    5d:03:db:88:28:2e:52:f2:27:77:2e:53:46:74:12:
                    6a:13:42:12:7e:82:b1:39:8b:ad:92:c0:fa:bb:16:
                    61:70:98:56:ac:81:c0:a1:80:b1:8f:48:20:a0:fa:
                    64:84:81:9b:93:8d:62:b2:28:6d:04:db:26:ae:5d:
                    51:f2:65:85:cb:01:8d:46:6c:3c:09:d0:50:95:0a:
                    d9:ee:66:3b:56:23:b3:8d:06:c2:3f:76:b5:9d:71:
                    27:8d:a7:24:63:38:59:57:43:dc:fd:50:66:ff:2b:
                    44:9f:b4:5f:34:1f:b7:ec:87:5d:bb:59:0e:db:d5:
                    d6:94:9b:ff:d1:1d:56:ac:39:0a:90:a9:61:7a:b1:
                    79:65:67:a6:25:0f:10:fd:50:8c:e8:78:66:16:9a:
                    1f:9b:bd:4a:2c:66:e2:1a:a4:32:0e:ea:7c:ad:fd:
                    d3:fd:50:a7:e9:c5:03:d2:ed:b5:87:3b:52:e1:9d:
                    83:64:bf:aa:8b:12:7b:35:d8:5a:70:3d:9a:de:8b:
                    77:31:04:66:8b:31:12:68:e2:d9:4c:cc:8e:a0:5c:
                    27:3a:7c:93:a8:d1:26:4c:9d:64:a3:8e:b3:5c:ed:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BA:74:7C:DD:6F:48:E1:8F:35:C5:68:CB:71:CE:B3:0F:72:57:B8
            X509v3 Authority Key Identifier:
                keyid:B0:F0:C9:DD:73:F6:C1:47:5F:14:56:10:3D:A6:BB:62:24:64:66:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F0C9DD73F6C1475F1456103DA6BB622464669F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41DE5B6320238A27C8AE45A967621C8E37BE70F7397924BCF524D04C4BA7390/0/34352e3138362e3130382e302f32322d3232203d3e20323639383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:3b:d5:5c:ae:24:25:12:4b:ba:20:1c:86:b3:86:b6:de:
         26:59:e9:df:15:8c:3d:70:b7:de:70:2c:6f:96:1a:0c:4e:e4:
         9c:9f:8c:12:a8:dd:a7:74:ca:c3:24:0a:3d:87:cc:5f:78:c6:
         6b:6a:e8:53:77:f7:a2:a5:c1:04:83:f0:78:98:12:b9:b0:3c:
         f9:4f:a8:ce:76:3a:93:8a:2b:08:bb:da:8a:e4:a7:b5:db:50:
         7b:91:ff:a8:30:af:ec:ad:8d:18:00:46:fe:2c:e6:e9:5a:f0:
         d4:c9:bc:7b:db:52:af:fc:ce:fa:e6:2f:e8:49:6a:27:57:c1:
         a7:4a:ec:c1:04:6a:84:8e:3d:f6:1c:98:cc:e9:c5:ef:1f:16:
         de:eb:ae:9e:a9:53:1f:9d:d6:79:31:5e:2b:c7:89:7d:ae:ce:
         38:67:cf:19:71:4c:32:95:a4:df:86:b3:75:d3:b8:05:d7:b3:
         0d:25:88:67:f8:ca:97:3e:3d:10:fe:7d:98:17:c4:02:9f:d1:
         03:e5:47:59:56:f3:c9:86:75:b7:45:11:bb:94:d6:e0:46:34:
         88:f1:93:84:b8:19:77:d2:b1:7c:02:4c:22:bc:59:0a:4d:e1:
         c5:ae:83:ef:36:1f:ab:cb:2b:e7:06:9f:20:65:e1:1b:fd:2e:
         66:27:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 02:18:13 2024 by rpki-client on console-fra.rpki-client.org