Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3234203d3e203631343638.roa
File:                     34352e3233352e3134302e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          UYyWkV74ecPO8dr1WOYCbRTPJtmCB0gkuTHh16/qwRk=
Subject key identifier:   56:38:E6:0B:C7:CD:39:0E:07:6D:30:6E:62:72:67:D4:D2:53:DE:D6
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       31E154882907B4B393C3A0ED05C648E9F9D27140
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3234203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 17:53:13 +0000
ROA not before:           Tue 05 Mar 2024 17:48:13 +0000
ROA not after:            Tue 04 Mar 2025 17:53:13 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e1:54:88:29:07:b4:b3:93:c3:a0:ed:05:c6:48:e9:f9:d2:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Mar  5 17:48:13 2024 GMT
            Not After : Mar  4 17:53:13 2025 GMT
        Subject: CN=5638E60BC7CD390E076D306E627267D4D253DED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:68:51:db:5e:73:0f:ec:ed:a9:ca:4f:68:
                    72:ca:ac:7a:72:1f:a7:a8:77:a4:2a:f9:34:a8:87:
                    87:42:79:20:a9:fb:85:0b:3b:ba:59:0b:3d:79:9a:
                    51:f7:03:92:ee:0f:52:96:18:64:a2:87:c0:26:c7:
                    4f:df:ee:2a:f4:84:49:7b:a4:29:f4:7c:53:79:b9:
                    e5:b5:0e:1f:d6:12:6e:27:db:39:d7:50:08:74:d5:
                    8b:1e:fb:9e:26:6c:11:50:ec:c7:22:cc:47:5d:7f:
                    3d:e4:00:8c:8f:df:3a:11:0b:9f:76:a1:59:30:15:
                    6d:e5:df:b1:23:89:d2:99:7c:c4:ac:cb:ff:ec:16:
                    d8:a9:2c:96:67:77:92:74:79:33:9d:3a:c6:0f:2a:
                    32:fd:ab:78:34:94:f8:9f:0e:c3:fb:90:60:c1:10:
                    45:44:81:b4:48:89:d5:d2:b4:c9:c5:aa:5a:16:a1:
                    cf:5d:f1:49:43:d8:da:9f:06:98:2e:a7:77:e9:00:
                    28:8b:2e:98:80:53:dc:39:e2:eb:7a:cb:96:0c:c7:
                    c8:ee:3f:35:2d:69:c2:4a:32:8c:aa:d0:85:13:14:
                    86:9c:f1:85:cb:19:64:85:20:44:85:aa:9b:14:f1:
                    0b:7f:ac:55:9c:9a:45:3c:ed:2d:b2:a7:2e:5a:c2:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:38:E6:0B:C7:CD:39:0E:07:6D:30:6E:62:72:67:D4:D2:53:DE:D6
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:34:c8:22:12:38:91:f8:aa:5f:db:ba:09:e1:55:d1:ea:9c:
         f3:cd:2a:c2:02:15:6b:b3:d9:31:06:8b:1f:5b:8c:54:6f:71:
         35:0e:4f:37:44:21:17:38:ee:93:cc:4c:c9:3f:21:77:4d:26:
         a8:aa:e2:cf:59:ae:57:40:38:6f:5a:d7:94:58:a4:8c:8b:23:
         ad:7d:c9:6c:b8:39:de:05:f7:98:5b:cb:7e:91:a0:6a:30:68:
         2b:87:73:7e:13:36:bb:d0:0a:98:16:a0:f5:9a:4b:3e:6f:29:
         63:e4:08:cc:b6:45:25:7d:2e:01:90:14:37:8a:44:6c:fd:14:
         ee:09:a4:9d:22:0d:46:8c:90:57:7a:18:50:af:69:9f:57:b6:
         bd:1d:db:20:a2:e3:12:14:83:74:c5:14:81:25:ca:b5:59:ba:
         a2:0b:85:3e:bb:83:0a:4e:cd:89:b4:15:e3:57:75:92:e0:f6:
         3c:2e:44:f7:be:31:ca:98:ac:5d:b3:33:0f:e5:12:05:06:a3:
         a1:85:eb:28:a5:cf:9c:17:d7:3e:fe:46:17:51:69:7f:d8:8b:
         4d:03:bf:12:17:a0:53:d0:bb:16:7c:f2:db:cd:e9:48:28:4c:
         a9:e7:15:39:93:43:4c:34:8e:37:72:10:5f:6c:76:67:07:2a:
         7e:2d:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:09:49 2024 by rpki-client on console-ams.rpki-client.org