Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/34352e3233332e342e302f32322d3234203d3e20323731373830.roa
File:                     34352e3233332e342e302f32322d3234203d3e20323731373830.roa (raw, json)
Hash identifier:          uSUOTl1MHIG7vtPl2D/GcRK9G40CQaovbtKKpvOBwQ4=
Subject key identifier:   37:1D:13:DE:D1:CE:3D:04:E0:55:77:54:8A:BE:42:34:10:78:FD:8B
Certificate issuer:       /CN=CD721CE88C796E837A067F6BF32EA1016FA71013
Certificate serial:       5A334565C4FB16208F5B2881F875A87958508A00
Authority key identifier: CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/34352e3233332e342e302f32322d3234203d3e20323731373830.roa
Signing time:             Tue 05 Mar 2024 18:18:46 +0000
ROA not before:           Tue 05 Mar 2024 18:13:46 +0000
ROA not after:            Tue 04 Mar 2025 18:18:46 +0000
asID:                     271780
IP address blocks:        45.233.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:33:45:65:c4:fb:16:20:8f:5b:28:81:f8:75:a8:79:58:50:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD721CE88C796E837A067F6BF32EA1016FA71013
        Validity
            Not Before: Mar  5 18:13:46 2024 GMT
            Not After : Mar  4 18:18:46 2025 GMT
        Subject: CN=371D13DED1CE3D04E05577548ABE42341078FD8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:d0:77:29:cc:7b:85:f9:17:ad:79:ea:83:
                    08:de:42:20:a9:23:b7:4a:fd:af:f9:13:d9:c9:0a:
                    7c:94:fe:a3:d4:31:c1:7f:4e:c6:80:db:dd:c7:79:
                    33:28:29:7f:46:19:ba:e9:e1:54:3b:f2:80:fe:b3:
                    c2:c3:82:99:05:54:da:08:de:06:1f:17:9a:a2:8a:
                    91:f2:5a:5b:de:70:20:98:d6:c7:91:f5:39:95:30:
                    c6:d0:e2:db:05:5a:f8:ce:8a:aa:6e:30:c0:97:20:
                    bc:4b:71:b0:c7:8d:3b:02:6f:79:97:1e:09:b6:69:
                    d8:48:08:51:22:d4:92:5b:7d:19:0c:0f:92:d3:94:
                    e9:62:97:40:3d:72:83:05:85:0c:87:d8:ca:d9:4b:
                    48:c5:d9:56:bf:17:67:c1:b1:49:0e:d3:74:a8:79:
                    84:48:ac:36:7c:cc:4a:aa:88:f8:a9:20:26:4e:b4:
                    10:8c:bf:b0:7c:a9:b7:af:ca:9f:da:a1:d5:07:ad:
                    32:a6:c5:53:de:a5:57:20:91:97:dd:57:c5:91:93:
                    3b:13:b8:e4:9b:b8:9d:2e:f7:47:6c:18:b5:02:53:
                    20:47:ba:9f:30:29:3c:bd:58:f4:53:b8:b6:60:c1:
                    96:77:d4:81:9a:4b:54:12:64:7a:e8:50:a7:8d:2e:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1D:13:DE:D1:CE:3D:04:E0:55:77:54:8A:BE:42:34:10:78:FD:8B
            X509v3 Authority Key Identifier:
                keyid:CD:72:1C:E8:8C:79:6E:83:7A:06:7F:6B:F3:2E:A1:01:6F:A7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/CD721CE88C796E837A067F6BF32EA1016FA71013.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD721CE88C796E837A067F6BF32EA1016FA71013.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F487AF2A40DFE4A1145EC31823447F004EC1489CBB0CB643BEA19F9245162887/0/34352e3233332e342e302f32322d3234203d3e20323731373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:7d:68:c1:77:a4:14:3a:84:25:50:b0:db:6a:9e:55:17:76:
         33:0f:d0:b6:d2:b0:51:97:63:66:56:25:94:d0:b5:54:dc:6e:
         11:67:28:fd:e6:7e:46:fd:22:1b:53:4c:ba:75:f0:9c:03:59:
         44:af:e6:28:68:54:48:8d:1d:80:10:97:97:81:de:aa:67:d8:
         89:e0:62:f0:d6:fc:fe:53:94:46:7e:41:89:98:18:ec:2c:d8:
         d1:6b:5c:72:e5:de:f1:74:b0:29:9a:3a:d2:f0:c7:7b:3a:93:
         f8:68:2f:05:db:46:f8:fd:cc:c4:10:35:2f:79:c5:6d:b5:25:
         9a:f2:4d:94:58:83:54:4d:21:0f:db:44:71:8a:a9:46:ae:49:
         83:03:bb:66:2d:66:47:8b:9c:1f:c7:50:ce:15:1e:d5:ad:38:
         51:4c:61:16:7d:5a:8c:c0:72:98:3c:3f:f3:d2:f1:41:ed:6a:
         93:0a:97:c0:2d:ad:45:8d:3f:cd:14:97:b7:b8:be:1b:f3:fd:
         49:29:43:7c:9e:72:72:95:49:d1:a7:77:b8:9a:18:db:07:33:
         b6:ab:9b:24:77:4f:7c:94:3e:b9:d0:f0:a6:58:2c:ea:a1:c1:
         20:5b:8d:66:41:51:1f:12:d4:cd:cd:01:f4:6a:24:70:08:71:
         07:b9:81:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org