Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38322e302f32332d3233203d3e20323637363832.roa
File:                     34352e3136322e38322e302f32332d3233203d3e20323637363832.roa (raw, json)
Hash identifier:          4ssB/6qfzQumOdRhCZ11TAATB5QQ2Bgp4o2DtQwv9H4=
Subject key identifier:   68:08:1D:52:6C:32:AD:96:CE:ED:28:7A:04:15:1C:53:BC:DA:A3:76
Certificate issuer:       /CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2
Certificate serial:       48186090B9138052524D89AF618023685DFF6CA4
Authority key identifier: 97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38322e302f32332d3233203d3e20323637363832.roa
Signing time:             Tue 05 Mar 2024 17:58:16 +0000
ROA not before:           Tue 05 Mar 2024 17:53:16 +0000
ROA not after:            Tue 04 Mar 2025 17:58:16 +0000
asID:                     267682
IP address blocks:        45.162.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:60:90:b9:13:80:52:52:4d:89:af:61:80:23:68:5d:ff:6c:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=973FCCE5E0F1738CFECC159289BB269F8C0B1FE2
        Validity
            Not Before: Mar  5 17:53:16 2024 GMT
            Not After : Mar  4 17:58:16 2025 GMT
        Subject: CN=68081D526C32AD96CEED287A04151C53BCDAA376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:58:a6:b7:9d:ca:d8:fa:90:ed:26:1b:96:
                    29:98:a7:08:16:50:da:94:6b:e3:6c:2f:18:75:35:
                    48:b0:29:9b:42:22:8c:84:80:6e:de:a8:6f:47:fb:
                    cb:a0:db:a9:16:1e:a0:19:c2:79:7d:7a:83:4b:74:
                    53:25:b9:6e:f6:b3:08:01:af:8c:0a:88:97:86:25:
                    e6:c7:cb:b4:69:1c:18:53:fb:f4:be:75:41:c7:34:
                    ee:9d:97:a1:ba:6d:a1:72:49:dd:b7:a9:ba:55:44:
                    3a:86:63:1f:af:74:72:df:de:24:23:16:ae:eb:41:
                    53:ac:59:2f:f9:e9:52:14:f3:79:2f:a4:6e:4f:66:
                    6b:fd:61:c2:23:51:1f:48:86:67:d0:e3:b5:5f:88:
                    b0:12:97:1e:07:1f:04:9f:50:ae:a2:b7:2b:96:4d:
                    ac:7e:64:f6:9f:e7:4e:8f:1e:1e:90:c4:aa:32:af:
                    47:58:bb:07:13:b0:be:cd:4e:8f:a8:81:6e:c5:79:
                    b7:bf:7a:b8:ef:38:58:35:ad:e4:bf:6b:c2:55:60:
                    5b:88:f5:9f:e7:ad:44:9e:99:ec:ba:d6:53:30:43:
                    14:48:45:0a:d6:1d:00:a1:57:1f:a5:c0:c8:3a:c1:
                    f7:d9:d9:85:df:4d:84:46:b1:10:24:b7:1c:c7:de:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:08:1D:52:6C:32:AD:96:CE:ED:28:7A:04:15:1C:53:BC:DA:A3:76
            X509v3 Authority Key Identifier:
                keyid:97:3F:CC:E5:E0:F1:73:8C:FE:CC:15:92:89:BB:26:9F:8C:0B:1F:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/973FCCE5E0F1738CFECC159289BB269F8C0B1FE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBF91B1720D91202ECF4C44852533CBF0B7540C5DD3A1EDDA62F6AD23A325FF0/0/34352e3136322e38322e302f32332d3233203d3e20323637363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:14:73:ec:1f:29:1f:7b:e8:96:c2:53:3e:3a:4d:e6:74:
         ba:ae:0b:2a:ad:e0:b4:38:2d:d2:c4:f0:07:a5:da:53:8c:96:
         c1:f7:bf:43:31:dd:65:39:df:fd:19:3d:cf:42:0d:52:12:44:
         36:53:64:22:88:36:da:c7:98:a2:0e:69:29:67:3b:b0:93:6c:
         26:94:7d:49:06:8c:e7:2a:7e:81:5d:54:6e:c5:29:40:11:68:
         2b:b6:64:c2:2f:b0:08:d0:10:69:07:66:8d:8d:31:41:96:b5:
         35:69:b6:7b:e6:e1:37:e9:35:79:df:2e:65:f5:2c:c7:4d:79:
         cf:dc:88:ab:ed:32:5a:33:9d:6f:e9:7b:39:d1:67:f6:fc:84:
         39:28:5e:64:dd:f8:c0:93:31:82:c7:a0:02:9a:bd:b0:9a:d3:
         e7:c7:b9:17:fd:dd:ee:45:a6:7e:1a:4c:43:8d:f0:2d:d7:78:
         05:e8:3f:dc:6d:e2:23:fe:68:58:0b:e2:b9:cc:50:be:b5:e8:
         f4:02:b5:da:08:4b:02:34:b4:19:ae:55:1a:51:c9:78:2f:6d:
         40:2e:66:64:cd:26:8d:ea:a4:64:cb:78:69:1e:a6:1c:31:d7:
         8a:af:b7:10:69:22:7d:7a:99:52:0c:86:f9:df:e9:24:e3:89:
         ad:b1:f4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:53 2024 by rpki-client on console-ams.rpki-client.org