Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa
File:                     34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa (raw, json)
Hash identifier:          FT+6mGBM01SmQfSp+oPtYCDnqO7ILdxflR8VMFs4vvo=
Subject key identifier:   0B:2D:36:EC:23:9A:77:8C:6F:45:1F:E7:14:25:B7:8E:F9:43:BC:75
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       03BFE0DD4CE5E86D2E10E24D498884D283323E37
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa
Signing time:             Tue 05 Mar 2024 17:52:32 +0000
ROA not before:           Tue 05 Mar 2024 17:47:32 +0000
ROA not after:            Tue 04 Mar 2025 17:52:32 +0000
asID:                     267929
IP address blocks:        45.179.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bf:e0:dd:4c:e5:e8:6d:2e:10:e2:4d:49:88:84:d2:83:32:3e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Mar  5 17:47:32 2024 GMT
            Not After : Mar  4 17:52:32 2025 GMT
        Subject: CN=0B2D36EC239A778C6F451FE71425B78EF943BC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:da:cb:57:10:39:bc:cb:b5:2a:e6:13:80:
                    5c:63:07:f3:fc:b8:ee:36:cc:7f:e7:b1:b5:71:a6:
                    8f:22:5c:04:57:dd:b4:94:d9:b3:99:1d:72:dd:3b:
                    00:95:6b:60:ae:66:c4:c2:a0:d9:57:f9:5c:8f:47:
                    7b:24:65:b0:8b:63:d9:01:7b:81:d9:c9:9b:2a:26:
                    b9:5b:d1:9a:eb:d9:88:c7:ad:7e:37:87:76:55:d1:
                    b1:69:59:b1:6b:66:5d:d3:b2:33:e4:2c:8e:8c:9c:
                    2c:8d:a8:a1:62:41:4e:d6:c6:d2:f7:ca:8b:30:7d:
                    03:51:73:4c:b8:26:da:aa:c9:b0:f7:de:1b:f6:c2:
                    ee:df:70:f8:70:bc:e7:43:18:5e:f8:12:bd:cf:f0:
                    51:73:0f:67:34:6a:53:6d:99:35:0b:d5:48:f4:c9:
                    f3:bf:a2:f5:c8:aa:cc:5c:55:4d:82:ee:4d:44:7c:
                    51:3d:0f:ea:5a:fe:cc:86:a8:ed:80:a5:48:7a:ff:
                    f4:4f:9a:bd:01:1b:27:d5:48:ca:77:ab:da:1e:6e:
                    09:2f:d7:48:88:9d:2b:50:7b:22:78:0f:30:37:61:
                    81:45:3f:c3:63:8a:77:7e:bf:3b:44:17:99:a1:89:
                    e7:de:a6:f9:2c:a7:c2:54:6e:77:40:6b:ac:55:de:
                    42:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2D:36:EC:23:9A:77:8C:6F:45:1F:E7:14:25:B7:8E:F9:43:BC:75
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234342e302f32322d3232203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:81:ea:93:3d:4b:41:df:03:56:da:9e:68:be:86:ea:6c:63:
         7d:9d:bc:50:d9:04:9c:1e:09:59:e4:29:21:36:51:36:a4:7f:
         1b:c7:57:70:6d:c3:d0:1d:72:97:1a:76:38:35:38:77:c9:91:
         70:f3:73:68:80:63:99:99:ee:29:b2:fb:88:07:1b:28:07:7f:
         e8:f5:a2:52:3f:c6:71:8d:ff:46:5f:9d:3c:ac:12:ee:39:af:
         db:ac:f4:ec:0e:c1:c6:96:80:d8:4a:da:b5:58:b5:56:a5:4a:
         5f:d9:d2:3f:c1:cc:56:f2:90:20:0a:94:1c:b6:27:3f:fc:ac:
         64:5b:37:74:7d:07:61:2c:e7:ad:86:a6:61:c9:2a:74:65:45:
         42:e0:d4:22:6b:cc:00:6a:44:c5:25:eb:37:cd:bf:fe:7b:b6:
         f7:bd:12:25:77:49:1b:d5:39:6f:b8:e0:a8:2a:cc:a9:60:66:
         aa:a6:a0:bf:76:19:c5:31:52:4e:88:ea:a5:32:46:cf:94:0f:
         b7:09:b1:b8:18:48:32:97:ac:a3:0e:18:2a:8a:29:06:a4:80:
         20:19:4c:3b:a3:e5:1b:6d:b8:74:38:ae:8d:9d:88:bc:ea:06:
         64:3e:b1:d0:6b:27:3d:7c:68:cd:2e:38:52:43:90:c6:75:82:
         cb:2a:4d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:42:11 2024 by rpki-client on console-ams.rpki-client.org