Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33342e302f32332d3233203d3e20323636373931.roa
File:                     34352e3233362e33342e302f32332d3233203d3e20323636373931.roa (raw, json)
Hash identifier:          j0iqmpaZFJF3X/i/1g5JgqIS59ANUn+7qiXDBMZc5qQ=
Subject key identifier:   80:58:C6:BE:95:C8:C7:04:35:3F:29:5E:12:09:3A:57:FA:7C:30:88
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       5C1B504C08E0947EA31AA3663B5C8A246A5A5892
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33342e302f32332d3233203d3e20323636373931.roa
Signing time:             Fri 26 Apr 2024 16:25:00 +0000
ROA not before:           Fri 26 Apr 2024 16:20:00 +0000
ROA not after:            Fri 25 Apr 2025 16:25:00 +0000
asID:                     266791
IP address blocks:        45.236.34.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1b:50:4c:08:e0:94:7e:a3:1a:a3:66:3b:5c:8a:24:6a:5a:58:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Apr 26 16:20:00 2024 GMT
            Not After : Apr 25 16:25:00 2025 GMT
        Subject: CN=8058C6BE95C8C704353F295E12093A57FA7C3088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:e6:8b:9e:ed:5c:9c:14:9c:b6:ab:73:cf:
                    a7:b4:3e:f9:4e:6f:47:1b:b6:d5:f8:a7:14:01:da:
                    27:dc:7f:cb:6b:ad:dd:44:8a:ba:ba:8d:8e:91:6e:
                    69:2e:19:69:e2:83:cf:5c:71:14:1f:9c:d8:3c:72:
                    49:57:5a:83:a6:4f:b3:68:46:34:bd:99:ec:1d:ca:
                    9c:5c:d2:60:90:08:68:46:e0:f5:8d:dc:a6:1b:4f:
                    2b:b4:e5:38:5d:3e:93:5e:5e:b5:e0:4c:5a:06:14:
                    6f:2e:37:56:cc:f4:a6:7c:bc:7c:5b:9a:2f:f3:b4:
                    1b:22:db:10:fa:74:8a:3e:c2:4c:84:8e:a8:17:0a:
                    79:2a:d3:7e:1a:33:43:e0:b7:5d:bf:51:90:1d:91:
                    ff:68:b8:65:a0:67:1e:d3:b5:59:ab:00:92:d7:1d:
                    18:ad:ed:c0:c9:bf:5b:79:92:00:4b:a6:22:1a:9b:
                    a3:94:3c:15:2c:01:a9:12:88:f0:e9:6e:8e:aa:ee:
                    17:2b:50:d9:d2:89:c5:b7:60:17:98:d1:f2:7e:62:
                    db:dc:c0:c0:a3:3f:3d:9c:a7:0f:37:21:6c:45:d7:
                    59:7c:3e:7f:2b:13:84:a6:6f:bc:b2:9f:e4:31:fb:
                    9f:c9:43:80:51:5a:d9:e1:01:4d:c2:72:8f:d3:f6:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:58:C6:BE:95:C8:C7:04:35:3F:29:5E:12:09:3A:57:FA:7C:30:88
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33342e302f32332d3233203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:34:0a:e9:62:e3:94:30:f4:88:b7:17:4d:4d:be:8a:84:
         42:b4:fb:57:82:25:1b:03:60:a6:d7:4f:b8:3f:9e:8a:73:93:
         eb:bf:95:da:ad:d3:05:fe:35:af:27:fc:04:94:e5:16:05:5d:
         51:08:a9:52:b8:42:7c:b1:36:9b:be:7d:04:1e:5b:49:1b:a4:
         89:32:57:64:36:3e:0c:29:c0:c0:7c:5c:89:36:ec:8e:7a:fb:
         4b:51:57:7e:b7:d2:19:53:6a:2d:a0:b0:42:9d:bd:91:6a:05:
         d2:8a:86:2a:4a:0a:a0:b1:09:6a:34:01:6a:c6:06:aa:ec:6f:
         d3:37:cc:ca:9a:43:15:cb:75:e4:17:ae:7a:23:9f:06:9c:6f:
         2f:7c:b2:5f:70:01:13:a3:74:54:bc:15:4b:09:cd:4a:53:12:
         59:57:cb:45:fa:b3:70:2f:a1:85:24:09:2d:39:f9:d5:1e:8e:
         d5:13:3d:ce:13:c9:f9:a0:b4:4a:cf:fa:08:08:b2:c9:82:50:
         35:7b:b5:bb:1a:ce:48:a3:fb:e7:2a:df:fa:9f:ab:81:3e:fc:
         d4:e3:a7:15:4f:0f:c5:86:56:46:dd:21:6a:af:e6:c6:2f:b8:
         c7:33:7f:1a:50:41:31:2d:4f:10:bf:91:fb:1d:dc:6f:ec:da:
         d5:ca:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:57 2024 by rpki-client on console-ams.rpki-client.org