Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa
File:                     34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa (raw, json)
Hash identifier:          YB0h05hStW35kIur/Ct88spf9iA3/yiuum8aL79eM3A=
Subject key identifier:   E7:F5:E0:E7:8C:F7:C2:A8:57:66:32:1D:FD:2E:04:03:D5:76:43:7A
Certificate issuer:       /CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
Certificate serial:       213A395F7AC26FE9204BD74676223904E7DF1C20
Authority key identifier: B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa
Signing time:             Tue 05 Mar 2024 17:52:32 +0000
ROA not before:           Tue 05 Mar 2024 17:47:32 +0000
ROA not after:            Tue 04 Mar 2025 17:52:32 +0000
asID:                     267929
IP address blocks:        45.179.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:39:5f:7a:c2:6f:e9:20:4b:d7:46:76:22:39:04:e7:df:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3B26F6DCE0D551DF8808E116531308AEF126A54
        Validity
            Not Before: Mar  5 17:47:32 2024 GMT
            Not After : Mar  4 17:52:32 2025 GMT
        Subject: CN=E7F5E0E78CF7C2A85766321DFD2E0403D576437A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:f8:2b:b6:00:7e:7d:ee:37:2f:29:82:bc:
                    fe:28:d4:67:f8:c0:70:2d:d1:26:8e:eb:fb:50:8e:
                    5d:37:fb:26:36:10:d7:d6:ac:bd:79:95:c6:96:a9:
                    e9:60:17:f4:cc:3d:5b:db:b1:23:26:72:ee:c5:d0:
                    8f:2c:e4:3e:87:67:57:be:1a:a8:1c:a4:2f:7c:0b:
                    7e:11:1f:6f:29:3d:c5:30:70:9f:ea:10:90:41:58:
                    f6:cc:d1:65:f2:a6:c9:15:b7:66:37:40:70:a8:48:
                    27:29:5f:1b:18:48:8a:96:2b:93:aa:8a:09:8e:93:
                    ed:42:74:81:17:1b:55:7b:20:45:02:f3:af:2d:e8:
                    b5:f6:f0:94:7b:31:96:c1:5c:93:5b:6d:e7:a4:97:
                    f9:9a:ae:7b:04:a7:c0:1a:01:29:ee:11:66:b2:06:
                    25:e7:3c:c4:05:2b:15:75:1e:9b:7c:72:b8:14:8d:
                    8b:d2:a8:ec:fb:f3:60:53:7b:46:50:02:fe:63:fb:
                    3e:31:e2:d7:a3:cd:b2:32:bb:7a:37:45:c4:d8:12:
                    dc:dc:a1:d1:84:70:21:94:30:fb:6e:9e:68:af:43:
                    6e:72:e7:ca:4a:e7:89:d3:23:10:87:08:3c:98:6c:
                    43:d7:12:3e:60:21:76:cc:cc:f7:96:e0:18:1d:3e:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:E0:E7:8C:F7:C2:A8:57:66:32:1D:FD:2E:04:03:D5:76:43:7A
            X509v3 Authority Key Identifier:
                keyid:B3:B2:6F:6D:CE:0D:55:1D:F8:80:8E:11:65:31:30:8A:EF:12:6A:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3B26F6DCE0D551DF8808E116531308AEF126A54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DD292B211724DECDC303751DB85B62ACD69B3210F8A70B4BD72E6FD73412E0A/0/34352e3137392e3234352e302f32342d3234203d3e20323637393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:5c:78:84:f4:b5:04:09:dd:cf:34:bd:e8:a3:1c:0e:e2:
         77:ce:23:57:ce:ec:39:6e:41:fc:6e:af:5a:1f:b3:c3:48:54:
         42:45:4b:1e:c1:63:18:43:f8:39:dd:ec:8a:b8:27:21:e3:55:
         c4:f6:4a:ef:bf:90:39:34:19:c9:30:17:01:9b:ef:db:27:2e:
         05:f7:2b:4d:b6:67:b6:16:40:b3:9f:6a:81:23:30:89:e1:08:
         bf:1e:c0:92:fd:8e:25:8a:7e:f2:bf:4f:e0:b4:2a:8d:76:1b:
         86:ca:ab:c6:8a:db:d6:ec:77:4a:f9:d4:0e:11:14:cc:9a:d0:
         e8:52:13:3f:3d:b3:62:d3:24:9f:28:2b:76:b1:2d:42:55:37:
         91:00:b5:2b:96:28:a4:03:d2:91:ad:40:4c:f4:2a:8f:e5:8b:
         6e:64:bb:2a:f8:da:07:48:6e:bc:8b:c1:da:f2:d8:e4:8d:9c:
         29:0c:ae:99:7e:32:f3:56:68:16:89:ea:bd:ad:0a:01:13:98:
         06:87:fc:b4:02:31:d5:33:bd:42:63:5e:82:a9:91:dd:3a:c5:
         96:8d:11:c0:c7:e2:67:83:72:70:dc:5f:fc:b9:a9:24:91:71:
         b3:ee:cc:4d:94:56:b7:75:e9:a7:cc:7e:2b:a0:3d:2d:68:8a:
         88:2e:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:42:11 2024 by rpki-client on console-ams.rpki-client.org