Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235332e302f32342d3234203d3e20323732393534.roa
File:                     34352e37312e3235332e302f32342d3234203d3e20323732393534.roa (raw, json)
Hash identifier:          E8KeqrF3Rcr/SpsC8e5V8s2AwOfJrsGf/gZyDyiT5lc=
Subject key identifier:   DD:B6:9E:19:A8:F6:FD:A2:64:29:64:BC:58:53:4B:11:56:FC:51:FD
Certificate issuer:       /CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Certificate serial:       2D301BB5FC346F8D0368B3E6B79A6B9B0459C564
Authority key identifier: 89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235332e302f32342d3234203d3e20323732393534.roa
Signing time:             Tue 05 Mar 2024 18:00:25 +0000
ROA not before:           Tue 05 Mar 2024 17:55:25 +0000
ROA not after:            Tue 04 Mar 2025 18:00:25 +0000
asID:                     272954
IP address blocks:        45.71.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:30:1b:b5:fc:34:6f:8d:03:68:b3:e6:b7:9a:6b:9b:04:59:c5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896E033E875BDBE6F2217610A8C83D959EB2168F
        Validity
            Not Before: Mar  5 17:55:25 2024 GMT
            Not After : Mar  4 18:00:25 2025 GMT
        Subject: CN=DDB69E19A8F6FDA2642964BC58534B1156FC51FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:e2:58:32:72:ac:2a:e3:61:f8:e5:0b:dc:
                    1c:b4:b0:97:31:01:84:44:44:0a:62:60:88:8e:7f:
                    48:dc:d6:4a:8a:93:60:a2:4e:bf:61:8a:da:fa:04:
                    16:90:75:54:a7:6e:28:9b:8b:00:97:22:a0:aa:8c:
                    3c:7d:fa:a9:31:81:3b:49:bc:f4:d7:96:6d:30:07:
                    5e:f9:ce:77:18:70:27:33:06:18:63:9e:26:29:09:
                    5c:f4:58:a1:46:60:fb:12:06:90:3f:10:ea:40:8e:
                    a4:9e:45:5d:0c:2a:ae:e4:20:0d:b7:ae:ed:7f:3b:
                    a5:dd:a0:47:f0:98:09:e4:2a:09:6b:04:f2:80:6a:
                    09:3c:de:34:c6:c1:a7:98:de:5e:b0:98:83:6c:db:
                    36:dc:89:af:0b:1c:ce:35:c4:1b:09:7c:ae:f0:8a:
                    62:47:45:8b:a1:b2:02:74:01:0b:0a:0f:cc:da:cf:
                    67:6d:62:a2:1f:93:73:cc:10:ae:be:28:ea:64:a3:
                    3b:41:1d:57:2e:bc:df:62:11:61:aa:11:18:66:0a:
                    b2:c5:2f:20:8c:4c:11:9c:60:b3:f8:cd:cd:10:68:
                    d0:da:3b:cc:f1:56:4c:f6:50:67:3b:1c:94:9c:c2:
                    62:8a:4b:d4:7d:be:c2:69:fb:a0:4d:26:e6:5b:3a:
                    76:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B6:9E:19:A8:F6:FD:A2:64:29:64:BC:58:53:4B:11:56:FC:51:FD
            X509v3 Authority Key Identifier:
                keyid:89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235332e302f32342d3234203d3e20323732393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:29:d4:d1:1c:d3:d4:f6:4a:ee:ea:1c:b4:0d:da:75:01:a4:
         ee:80:c1:d1:0a:33:d6:7e:c4:25:af:b0:60:0a:88:4e:ae:23:
         b0:b8:c0:6f:9d:9b:2e:bc:20:e4:2e:39:25:24:d5:e0:e2:f9:
         30:f7:4f:05:a5:14:06:b2:e5:dd:5d:29:53:33:5a:4e:24:74:
         cc:a0:00:c1:01:8d:85:aa:80:eb:21:b8:63:f0:4e:36:63:79:
         1e:a3:da:f6:cb:f2:81:1c:fa:e2:81:46:d8:3a:62:9d:85:60:
         44:1b:d6:26:c4:55:3c:a7:7b:6b:ef:3e:c3:4a:74:f4:38:ee:
         99:2a:56:a8:ca:16:55:6b:94:30:bc:ed:1a:64:8a:7f:42:47:
         78:47:59:6d:17:42:7c:69:a8:15:cb:81:91:55:9b:e5:d5:ec:
         82:7c:fa:fe:a2:dc:57:65:74:c2:1a:5b:28:d8:0f:76:a9:f7:
         50:7a:a9:9c:7c:3f:31:c1:75:81:47:8e:d6:4a:5f:02:db:70:
         89:c7:f3:15:66:c9:32:dc:dc:4f:07:4f:f2:de:df:c1:20:f0:
         6f:4c:9a:a6:72:85:67:8f:6e:e3:ac:60:82:0a:8d:91:9c:69:
         d1:78:76:3c:47:4d:1a:f0:7d:55:e0:ce:e4:7b:16:d7:ec:82:
         d3:53:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org