Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3234203d3e20323636383337.roa
File:                     34352e3233382e31322e302f32322d3234203d3e20323636383337.roa (raw, json)
Hash identifier:          clow+gwiLVFiYvF2TGZg4s5UElwqXN0oA9EdiHXp1A8=
Subject key identifier:   75:85:3C:B9:30:EB:DC:2D:27:8C:02:FB:80:A0:7F:4D:4E:5C:22:7B
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       3F16DCD404B6A05F31B2AA8D48FE8152AB43D26F
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3234203d3e20323636383337.roa
Signing time:             Tue 05 Mar 2024 18:07:58 +0000
ROA not before:           Tue 05 Mar 2024 18:02:58 +0000
ROA not after:            Tue 04 Mar 2025 18:07:58 +0000
asID:                     266837
IP address blocks:        45.238.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:16:dc:d4:04:b6:a0:5f:31:b2:aa:8d:48:fe:81:52:ab:43:d2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Mar  5 18:02:58 2024 GMT
            Not After : Mar  4 18:07:58 2025 GMT
        Subject: CN=75853CB930EBDC2D278C02FB80A07F4D4E5C227B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:86:2d:85:00:df:d0:f2:a6:c5:72:74:ec:
                    dd:c6:df:39:0c:36:2f:b1:e5:3d:f4:04:fe:d6:0b:
                    21:e6:b5:63:81:b2:64:12:dc:63:1a:32:dc:1d:d1:
                    8f:38:b2:8e:a8:71:a7:1a:16:de:e6:5d:e4:d9:05:
                    87:73:db:ae:47:74:31:cf:45:78:fb:3e:fc:a3:a6:
                    03:c6:c3:c2:68:40:09:a8:b2:71:42:72:c7:9e:0e:
                    77:05:dd:07:49:ea:ad:d3:60:34:21:4f:15:a4:87:
                    f1:ad:e9:be:e3:04:bf:53:88:2b:8f:14:33:ea:84:
                    26:88:38:56:7e:11:1c:c7:f3:19:82:07:1d:b0:8b:
                    88:6a:20:67:f3:77:3b:6a:11:35:a5:86:b9:1a:b3:
                    88:97:85:c0:e0:80:de:75:12:d4:6d:08:fb:29:6f:
                    ff:e1:80:c7:e4:34:5a:e1:ed:ae:d3:90:5f:03:d2:
                    fe:6d:7f:2f:cb:9e:e3:d7:cf:1c:3c:b0:bc:8c:92:
                    31:9c:a4:e4:90:e9:e8:4a:c2:ba:45:a2:60:4d:c0:
                    17:ba:2f:97:11:95:b8:18:fc:02:e8:59:25:34:70:
                    fc:94:37:2f:a7:25:53:b3:d1:cc:5c:95:27:b2:2a:
                    76:29:b8:40:c2:f1:d3:4c:97:5e:88:7a:bc:0c:ee:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:85:3C:B9:30:EB:DC:2D:27:8C:02:FB:80:A0:7F:4D:4E:5C:22:7B
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31322e302f32322d3234203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:af:6b:94:d1:24:53:33:d3:cc:02:a9:0e:0d:e9:bc:93:
         b6:17:e4:9d:f0:9a:53:85:02:8c:e7:7f:68:ba:6b:31:4d:c5:
         4c:02:39:03:14:23:6c:22:af:d9:a9:12:dc:75:cb:c7:fa:b3:
         19:6e:91:c2:95:62:c4:4c:d3:ab:1d:9a:7a:ba:81:34:cb:13:
         d2:ef:9d:8e:cf:75:44:e4:63:ca:ea:b1:4f:df:f4:76:e3:36:
         c0:9b:36:27:8d:90:20:94:20:55:54:d0:bd:41:2f:c1:b6:65:
         80:15:e9:74:34:9b:d0:fb:d6:7b:37:5a:74:1e:b7:55:7c:38:
         ff:9d:ba:4f:93:f7:cf:95:c2:14:1f:05:b9:81:39:78:94:7e:
         91:c2:20:61:6a:99:e0:b1:53:c4:ab:ac:3c:a1:9b:80:df:16:
         e0:c2:45:c5:48:e1:42:6e:15:21:8d:57:b7:a1:5c:96:56:ee:
         79:9b:5a:8a:a2:48:ec:17:db:ed:92:cf:cf:67:e6:7c:ff:5a:
         3a:d7:ce:43:77:f8:3e:43:31:da:19:0b:8a:40:35:df:29:5f:
         07:f0:15:20:66:d7:29:1e:f2:4b:c7:12:06:67:58:69:bd:fb:
         d8:fd:7a:a6:11:03:b6:a5:d5:7c:e2:3c:27:d9:80:e1:e4:21:
         69:91:24:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 20:53:55 2024 by rpki-client on console-ams.rpki-client.org