Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323033.roa
File:                     34352e3233322e3131362e302f32322d3234203d3e20323033.roa (raw, json)
Hash identifier:          JWXNQuWUbRjAydI44ZlDnB8qG7uxelMgomjOZPseuss=
Subject key identifier:   75:E1:FB:9A:2A:72:27:7D:D1:FE:B7:F6:1F:99:38:44:3E:E0:36:DB
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       7E610663BE37D46977417BCDB4FE84AC331CA57C
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323033.roa
Signing time:             Tue 05 Mar 2024 18:02:48 +0000
ROA not before:           Tue 05 Mar 2024 17:57:48 +0000
ROA not after:            Tue 04 Mar 2025 18:02:48 +0000
asID:                     203
IP address blocks:        45.232.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Jun 2024 23:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:61:06:63:be:37:d4:69:77:41:7b:cd:b4:fe:84:ac:33:1c:a5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:48 2024 GMT
            Not After : Mar  4 18:02:48 2025 GMT
        Subject: CN=75E1FB9A2A72277DD1FEB7F61F9938443EE036DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:e4:8a:00:58:00:19:83:3b:c9:cc:89:34:
                    85:3f:97:3d:f9:d2:63:bf:48:2e:4f:51:f8:fc:1f:
                    f7:51:62:f0:14:29:91:42:4f:70:c7:85:23:3a:e3:
                    66:fb:40:82:5c:d7:d0:bd:05:bd:2a:4e:bb:8c:15:
                    ec:5a:ed:66:07:7c:37:02:c4:21:74:ee:cd:85:f1:
                    f6:75:3f:f6:f0:f5:72:56:7f:e6:ea:36:47:1e:c7:
                    72:b7:8f:a2:2a:89:9b:8a:a3:e1:44:57:40:47:05:
                    70:f0:b4:aa:3f:5e:f1:5a:c0:66:0c:16:37:81:86:
                    03:40:cd:d1:dc:74:b3:87:46:9a:32:22:31:8c:6b:
                    5e:f9:33:aa:8c:ac:97:00:de:35:2c:a5:2d:52:d3:
                    c7:ba:de:45:4d:99:43:fa:2e:a3:1b:49:fd:ee:2e:
                    6c:d9:3c:ee:f9:fa:1e:03:3d:4c:01:4a:00:74:25:
                    e2:f4:02:96:f9:0c:8d:87:2c:c6:96:37:03:b8:86:
                    29:19:bd:8f:66:dd:4a:93:06:49:81:fa:db:80:3f:
                    36:93:55:35:9c:33:ff:7f:d6:22:46:51:52:72:45:
                    34:0b:4b:4b:d4:21:3e:5d:97:bd:56:fb:bd:f5:f9:
                    e5:dd:14:4c:00:a1:5b:a4:c8:20:62:0a:a5:47:df:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:FB:9A:2A:72:27:7D:D1:FE:B7:F6:1F:99:38:44:3E:E0:36:DB
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:14:b7:47:66:2f:6c:58:c7:b5:b3:54:99:bc:cc:36:dc:15:
         eb:52:d3:fd:8a:45:ad:ce:f9:39:29:a0:88:aa:39:b9:6d:a2:
         54:89:16:6c:cf:5e:27:08:8b:2f:71:ae:56:e5:2e:c1:0e:60:
         21:f5:d9:5a:bb:ef:1d:16:ee:75:75:ca:ab:87:40:c9:82:24:
         0f:94:b5:b0:aa:22:6e:99:84:41:1e:17:a0:a8:7a:d1:10:d3:
         4a:c2:a2:90:6a:15:f7:17:46:96:ed:07:02:27:06:15:db:0e:
         83:bf:44:ef:0f:ff:29:f4:d2:a6:42:b5:92:d0:be:5d:48:80:
         1f:9b:f7:9b:e0:bd:61:41:12:38:fd:5a:80:35:07:9a:b5:7e:
         ad:a9:9a:5e:74:59:00:1e:5c:4e:53:af:15:b8:38:f6:0c:65:
         bf:08:5e:79:13:19:2f:d9:4d:d5:5c:74:4e:0f:95:48:ed:70:
         25:ab:95:25:00:a3:80:8f:2d:a2:8b:59:b5:98:e0:dc:6e:15:
         76:69:01:4e:d6:39:ea:1d:f4:c1:8e:27:2d:bf:39:21:3e:31:
         f0:49:e9:9d:d6:27:84:c7:e8:cb:84:4b:06:85:88:07:47:97:
         83:c9:88:c5:ff:b5:60:79:29:0b:da:30:20:6c:50:4a:ec:9a:
         d9:78:37:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:09:58 2024 by rpki-client on console-fra.rpki-client.org