Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32322d3232203d3e2033323537.roa
File:                     34352e3233382e3135362e302f32322d3232203d3e2033323537.roa (raw, json)
Hash identifier:          7BJZ+J01BbEFpiyNUOpmRP9xUZ8ErVgJrCFniWoO/us=
Subject key identifier:   15:FA:CE:41:83:EE:43:7A:19:EE:88:77:CD:D8:FF:5E:E4:CB:A0:3F
Certificate issuer:       /CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
Certificate serial:       7EC675605865AD0C9515CB1C169615B3836A726C
Authority key identifier: 99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32322d3232203d3e2033323537.roa
Signing time:             Tue 05 Mar 2024 18:08:43 +0000
ROA not before:           Tue 05 Mar 2024 18:03:43 +0000
ROA not after:            Tue 04 Mar 2025 18:08:43 +0000
asID:                     3257
IP address blocks:        45.238.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c6:75:60:58:65:ad:0c:95:15:cb:1c:16:96:15:b3:83:6a:72:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99AC90C6431B27F29FD3D3C3FECE807D86BFE025
        Validity
            Not Before: Mar  5 18:03:43 2024 GMT
            Not After : Mar  4 18:08:43 2025 GMT
        Subject: CN=15FACE4183EE437A19EE8877CDD8FF5EE4CBA03F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:98:60:0c:c3:06:fa:47:0f:50:87:5e:d3:e1:
                    03:a7:86:53:b5:53:a2:2b:98:6c:d8:9a:9a:ee:da:
                    93:60:fa:cd:d3:22:99:d1:1c:a3:49:52:62:69:bd:
                    39:e8:79:e8:e0:47:71:aa:b5:9b:a1:85:68:b5:09:
                    25:b2:63:83:3a:ae:f7:19:a9:14:64:8e:28:93:71:
                    60:24:44:69:22:a9:2f:2a:06:d3:43:d3:8d:9d:9d:
                    69:5b:5a:6e:8b:f4:89:67:df:04:f2:fd:28:99:f7:
                    19:87:0d:f4:69:41:8e:87:6f:c0:d9:fd:41:6f:18:
                    4c:8d:9d:fe:83:09:c9:a6:0e:b5:5c:2a:19:98:62:
                    ca:9e:51:3d:45:e6:e5:6f:2c:34:8b:ec:9a:a4:a1:
                    a2:08:a2:2d:e9:d3:cc:7e:f5:ab:12:ab:09:5d:25:
                    30:c2:ff:52:90:13:e2:93:35:3c:c3:92:fd:ee:c7:
                    c6:75:d5:4a:48:3b:ce:84:e2:2c:d1:29:85:08:a2:
                    f5:35:fc:2c:54:0b:58:cc:ad:d9:b8:59:09:cd:05:
                    67:29:a0:3f:11:04:03:13:2b:67:87:92:c9:34:4b:
                    4f:1e:d7:ad:7a:18:65:aa:15:0d:4c:c2:80:74:89:
                    81:d8:98:a3:52:4a:c9:02:a8:0d:c9:21:50:7e:4f:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FA:CE:41:83:EE:43:7A:19:EE:88:77:CD:D8:FF:5E:E4:CB:A0:3F
            X509v3 Authority Key Identifier:
                keyid:99:AC:90:C6:43:1B:27:F2:9F:D3:D3:C3:FE:CE:80:7D:86:BF:E0:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99AC90C6431B27F29FD3D3C3FECE807D86BFE025.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB80E8ADAA77BD517BB952045EA56E0FD41A53E4B9AE5E7E1544A0EF08CA7C3A/0/34352e3233382e3135362e302f32322d3232203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:a3:09:df:b3:21:4c:77:70:bd:8f:62:07:c1:22:38:1d:
         5a:d2:bd:8b:3b:0c:a2:04:a0:6b:a1:ec:9e:ab:a7:31:fa:75:
         6a:6c:e1:fb:b5:72:12:f8:38:ed:b5:ed:66:82:33:17:02:52:
         17:38:6f:04:7d:87:e7:8d:8a:5a:7d:e7:3e:e1:42:da:41:4c:
         23:4b:c4:dd:3a:b7:75:96:13:ae:48:57:1f:1a:bc:b5:cd:43:
         38:e9:7c:0b:42:76:29:96:78:22:84:ab:a4:e0:01:51:f1:00:
         ef:3d:aa:2d:46:1a:09:bb:76:b4:79:e4:ef:9f:61:a6:d8:67:
         41:1e:05:fd:64:a7:2a:64:12:3e:36:cb:d8:0d:b7:d9:af:ab:
         f1:cf:3f:82:c6:f3:2b:c3:dd:60:06:35:1f:b1:a5:34:b0:87:
         9c:14:e1:d3:1b:72:cb:af:d3:26:f9:df:c3:4e:f1:2f:8a:86:
         6c:b0:33:7f:30:05:53:39:b0:8a:58:3c:83:72:6e:67:9c:fb:
         86:ab:ef:0d:13:74:ab:27:f2:c4:41:de:27:8b:0a:71:cc:a5:
         61:62:5c:64:8e:c8:88:f1:28:07:36:88:8a:2d:40:7d:f5:79:
         1f:ea:81:72:28:e8:2d:fd:20:18:b1:0b:a6:d6:72:c5:af:c6:
         3a:77:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:29:39 2024 by rpki-client on console-fra.rpki-client.org