Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e392e302f32342d3234203d3e20323732393935.roa
File:                     34352e3137332e392e302f32342d3234203d3e20323732393935.roa (raw, json)
Hash identifier:          SetWYQaI94sHafhr2G/RsDWMqwykP+R918OeMgiuxG4=
Subject key identifier:   B0:C8:54:3E:48:DA:5A:40:76:AA:B0:EA:A5:E1:E9:49:A0:30:19:EB
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       7927BBE0BD5A78E1D1FE75897DAF13CD848E1F59
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e392e302f32342d3234203d3e20323732393935.roa
Signing time:             Tue 05 Mar 2024 17:43:59 +0000
ROA not before:           Tue 05 Mar 2024 17:38:59 +0000
ROA not after:            Tue 04 Mar 2025 17:43:59 +0000
asID:                     272995
IP address blocks:        45.173.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:27:bb:e0:bd:5a:78:e1:d1:fe:75:89:7d:af:13:cd:84:8e:1f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: Mar  5 17:38:59 2024 GMT
            Not After : Mar  4 17:43:59 2025 GMT
        Subject: CN=B0C8543E48DA5A4076AAB0EAA5E1E949A03019EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:7d:d6:9f:05:91:e4:91:b4:37:97:74:7f:
                    23:ac:6f:f0:a6:2c:62:8c:22:65:a6:c5:17:24:16:
                    c5:53:f8:71:e3:ca:a2:0f:97:98:31:bf:2e:2f:55:
                    62:cb:2f:e3:b6:0e:5d:a7:d7:c7:f7:6c:a0:aa:f2:
                    78:46:ff:30:dd:1b:d1:d5:8a:dd:d3:40:e5:53:fe:
                    55:69:e1:19:a1:d2:b5:a0:59:e2:98:13:57:5b:4d:
                    b3:c3:6b:4b:dc:f6:c1:f1:99:11:7d:85:42:27:39:
                    80:a8:21:32:07:bb:7c:68:24:aa:09:0d:81:ea:0f:
                    1b:b5:1f:8e:85:87:9d:16:8d:be:eb:29:14:bc:1a:
                    2e:c9:7a:52:d3:cd:71:c5:27:31:b6:57:53:10:c1:
                    1a:c8:07:20:5c:48:80:ad:7c:c3:c2:e8:65:ca:5a:
                    79:cc:cb:b5:db:1c:cb:b5:19:9e:3c:75:27:7b:62:
                    53:44:ff:df:c1:20:f3:3e:54:48:40:ed:05:ff:79:
                    63:8b:89:b8:0d:bf:5a:55:ca:46:1c:ac:b2:07:78:
                    15:01:f5:91:c1:e9:5c:af:2b:dd:6b:2e:fd:cc:b7:
                    25:1d:d7:be:a7:a0:b8:57:0c:41:70:de:62:24:3d:
                    91:49:5e:7d:ba:0b:d3:57:33:7b:42:36:97:22:fa:
                    23:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C8:54:3E:48:DA:5A:40:76:AA:B0:EA:A5:E1:E9:49:A0:30:19:EB
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e392e302f32342d3234203d3e20323732393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:bd:62:f7:17:b2:5b:8d:fb:ea:65:30:fc:57:4c:13:73:52:
         64:0d:39:1e:83:a8:89:05:5e:1c:6c:fc:e3:4d:93:c0:97:60:
         45:b9:08:d2:f3:b3:36:7f:57:c9:f9:18:56:c1:fa:c7:90:94:
         93:f7:5c:a5:be:8d:03:f4:78:34:a0:ab:f1:64:77:ab:48:39:
         f5:9f:c4:78:25:e6:3a:cf:4c:42:b3:bd:de:e6:cc:d0:f3:7c:
         b9:3d:11:58:69:cf:bc:83:94:30:24:74:76:0f:89:59:38:99:
         ef:08:84:47:30:a6:29:6a:9f:3f:a3:66:27:1e:3d:19:0b:4f:
         84:98:ad:5c:8f:8e:3e:7c:9f:eb:33:31:1c:1e:77:33:90:cc:
         17:09:ec:16:b1:ae:bb:ff:4f:98:f7:d1:77:a1:3c:74:86:a1:
         79:20:53:3a:a9:c1:e9:08:33:34:b4:2b:29:3c:cb:55:86:6e:
         b9:1b:ac:8c:4c:3a:45:c6:05:48:99:51:cf:2d:08:59:88:e3:
         44:56:60:0b:2a:20:11:c1:1b:fa:26:7e:2e:1d:94:8b:f1:19:
         e3:c6:5a:62:04:83:de:fe:f1:f0:b1:dd:75:a8:48:eb:e4:9d:
         96:70:a2:78:72:72:69:36:64:e6:d2:ac:d1:91:40:20:9e:68:
         1f:1a:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:53 2024 by rpki-client on console-ams.rpki-client.org