Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/34352e3138372e39322e302f32332d3233203d3e20323639383239.roa
File:                     34352e3138372e39322e302f32332d3233203d3e20323639383239.roa (raw, json)
Hash identifier:          4QccbL3skBOr3C21iP8Q5ZtYn7BsZ88JNiiMxrGaZ7A=
Subject key identifier:   37:76:35:DC:56:42:57:AB:B7:C0:F5:69:61:AD:C6:45:9C:66:FC:99
Certificate issuer:       /CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
Certificate serial:       646A00A65CB5B046B834859465E1A9CDE3E3FFD3
Authority key identifier: 0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/34352e3138372e39322e302f32332d3233203d3e20323639383239.roa
Signing time:             Tue 05 Mar 2024 17:56:17 +0000
ROA not before:           Tue 05 Mar 2024 17:51:17 +0000
ROA not after:            Tue 04 Mar 2025 17:56:17 +0000
asID:                     269829
IP address blocks:        45.187.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6a:00:a6:5c:b5:b0:46:b8:34:85:94:65:e1:a9:cd:e3:e3:ff:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
        Validity
            Not Before: Mar  5 17:51:17 2024 GMT
            Not After : Mar  4 17:56:17 2025 GMT
        Subject: CN=377635DC564257ABB7C0F56961ADC6459C66FC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:d2:ab:59:75:da:90:c7:db:b3:dd:c4:f8:
                    e4:b4:37:a7:e2:b1:09:3b:bc:66:92:63:4d:ae:8a:
                    df:c8:57:b0:97:60:a2:71:3d:be:e1:da:a2:11:e3:
                    b7:13:a2:0e:2a:a0:f6:7a:3a:01:c9:50:0a:68:36:
                    ad:56:a8:51:7c:c4:c8:33:d7:57:08:e0:0d:e6:95:
                    5e:ff:a4:a6:71:e1:e4:e3:c6:1e:a3:a7:90:10:85:
                    a3:9b:91:cc:6a:89:c2:dc:e9:96:2f:13:25:b5:45:
                    03:49:fc:3a:cc:cd:e7:a3:18:bf:77:f5:f1:20:00:
                    4d:41:28:d8:d1:7f:e4:3b:4a:a3:9c:8e:4c:05:fe:
                    c6:4d:d7:36:b1:59:cc:a5:e2:72:27:5f:92:48:e2:
                    72:ce:32:90:1e:fc:13:45:ad:ed:7c:22:7d:be:98:
                    56:32:df:fa:39:55:7b:bf:41:39:fc:f5:bb:d9:f4:
                    93:fa:bb:6a:e3:50:71:b8:83:e5:c1:ae:3a:7d:49:
                    88:93:d6:b6:3c:20:47:89:d3:87:a5:db:d9:3a:a1:
                    19:da:b1:8f:97:6c:cf:c3:b8:5b:aa:50:11:0a:a9:
                    0e:bb:7f:4b:76:65:01:e3:9f:e7:8e:d4:14:b9:c7:
                    80:3e:3f:33:3e:8e:dd:38:ae:af:e7:a4:ad:05:6c:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:35:DC:56:42:57:AB:B7:C0:F5:69:61:AD:C6:45:9C:66:FC:99
            X509v3 Authority Key Identifier:
                keyid:0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/34352e3138372e39322e302f32332d3233203d3e20323639383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:89:3a:d1:58:ce:df:cc:76:29:d6:1d:20:8b:16:c8:95:
         31:00:28:d2:61:a8:f6:5f:51:36:47:be:45:f2:d5:14:36:52:
         90:aa:a0:9c:ea:c1:6f:ce:ad:cc:b8:a5:60:58:85:dc:cd:85:
         99:e1:ff:a7:0c:06:23:66:ab:15:5c:3e:94:9c:3d:a8:24:e3:
         c5:e8:0e:dd:01:40:40:94:03:ab:7a:f7:4a:70:b4:64:62:27:
         40:89:39:c5:d8:83:ed:8c:76:e7:2d:78:9d:72:f3:4f:3e:b6:
         b2:5b:dd:16:f8:57:10:3c:4f:30:93:0e:90:58:c3:53:ee:61:
         96:93:0e:5e:84:2a:91:e8:a3:3d:e6:3f:63:5b:9a:c4:8c:fd:
         c1:c8:57:76:7b:62:b8:76:d2:30:4d:18:54:74:04:5a:92:e8:
         aa:50:fe:98:8b:f4:d1:f9:6f:27:bc:89:2f:40:08:be:b9:7f:
         29:d4:50:bc:0d:26:7f:ea:dc:f3:aa:fd:d0:3e:4d:73:ea:7a:
         ec:14:35:fb:4a:15:ba:98:35:38:30:61:72:7b:6e:3f:10:04:
         4b:91:9d:54:84:f9:c0:99:24:91:fc:23:1b:ca:a3:b4:c6:e5:
         e6:3e:b4:f6:f4:ed:ab:43:06:6a:71:4f:b3:fa:0e:cb:bc:46:
         97:0d:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 13:01:11 2024 by rpki-client on console-fra.rpki-client.org