Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3137302e302f32342d3234203d3e20323636383136.roa
File:                     34352e3233332e3137302e302f32342d3234203d3e20323636383136.roa (raw, json)
Hash identifier:          LNidFDc1AdLVKfUV6cIjbmp5MhlFA2uUfgz5rO2YvrM=
Subject key identifier:   5D:06:AD:C5:84:5F:CE:1C:06:A3:1D:EB:B0:DC:D8:D4:42:42:70:30
Certificate issuer:       /CN=19CE919187E9F056A78CCAAFBDDADB939E099337
Certificate serial:       5F2B70F6BEE9522FCEB6ADB215AC2D6721F095CD
Authority key identifier: 19:CE:91:91:87:E9:F0:56:A7:8C:CA:AF:BD:DA:DB:93:9E:09:93:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19CE919187E9F056A78CCAAFBDDADB939E099337.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3137302e302f32342d3234203d3e20323636383136.roa
Signing time:             Tue 05 Mar 2024 17:40:26 +0000
ROA not before:           Tue 05 Mar 2024 17:35:26 +0000
ROA not after:            Tue 04 Mar 2025 17:40:26 +0000
asID:                     266816
IP address blocks:        45.233.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/19CE919187E9F056A78CCAAFBDDADB939E099337.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/19CE919187E9F056A78CCAAFBDDADB939E099337.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19CE919187E9F056A78CCAAFBDDADB939E099337.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:70:f6:be:e9:52:2f:ce:b6:ad:b2:15:ac:2d:67:21:f0:95:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CE919187E9F056A78CCAAFBDDADB939E099337
        Validity
            Not Before: Mar  5 17:35:26 2024 GMT
            Not After : Mar  4 17:40:26 2025 GMT
        Subject: CN=5D06ADC5845FCE1C06A31DEBB0DCD8D442427030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:88:ff:18:50:3e:06:7d:a2:39:4e:0c:0e:
                    c4:58:62:e0:b4:79:d6:f2:d3:fa:c4:00:f7:e2:29:
                    fd:46:38:1b:ec:a9:04:64:0f:2d:96:86:95:9b:e6:
                    e2:e8:6f:92:49:e9:9c:65:e3:16:7b:a1:64:8c:0e:
                    47:7f:91:1a:cb:01:dc:fb:e3:bb:0a:c9:7f:09:c2:
                    54:d1:ad:6e:06:9f:d9:d9:1c:74:22:de:57:03:ac:
                    4e:b5:61:3d:b1:db:48:fe:a5:2f:14:d6:c8:43:1f:
                    ed:e9:a4:f8:e0:f2:f1:39:ae:5f:35:ae:67:6b:a7:
                    3d:b0:27:29:71:fc:73:b6:91:28:02:1c:0d:0e:85:
                    90:d0:9b:80:1f:e0:cf:b9:10:8c:39:81:af:f5:2f:
                    0b:81:7b:1a:86:39:b2:07:b3:6f:4b:f2:0a:64:88:
                    03:2f:b9:5d:99:b4:85:bc:31:50:ec:06:98:f4:f2:
                    fb:4b:5a:eb:0d:34:9f:16:a3:0e:e1:94:24:c2:29:
                    bc:bd:a4:fb:01:18:3f:d8:43:c8:e8:9b:ac:f9:15:
                    81:7e:43:23:a2:5c:4f:e1:77:3a:bc:07:9d:96:52:
                    12:a0:ad:8a:33:88:1c:4f:56:2f:a5:6b:28:79:79:
                    ad:bf:6a:02:de:74:2b:bc:5f:04:9e:b0:47:8c:d8:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:06:AD:C5:84:5F:CE:1C:06:A3:1D:EB:B0:DC:D8:D4:42:42:70:30
            X509v3 Authority Key Identifier:
                keyid:19:CE:91:91:87:E9:F0:56:A7:8C:CA:AF:BD:DA:DB:93:9E:09:93:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/19CE919187E9F056A78CCAAFBDDADB939E099337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19CE919187E9F056A78CCAAFBDDADB939E099337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3137302e302f32342d3234203d3e20323636383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:10:3a:b4:68:23:91:bd:93:83:6c:9a:7b:d8:4e:12:3e:e6:
         39:86:5b:50:da:dd:c9:7e:6f:c9:19:64:75:75:55:2c:55:06:
         87:f5:13:0f:5d:ff:5c:36:c2:c2:88:b6:3d:41:0b:84:e7:7b:
         92:0f:57:46:87:c5:45:fa:b0:7c:e8:ae:22:8a:75:f8:79:36:
         aa:82:e3:3d:c8:ca:50:f9:48:63:1f:2b:73:2e:86:4b:b2:31:
         67:58:67:6e:5a:b6:fa:53:5b:35:74:8a:ba:9b:b8:a3:27:62:
         46:e1:fd:68:8f:70:3d:59:05:ea:ab:b1:a0:73:3b:23:5f:2e:
         43:ef:84:85:59:7a:ad:ac:59:7e:30:b1:e1:a8:82:ae:73:a5:
         01:cc:aa:98:ae:68:e1:07:8b:bb:ef:2a:9b:c4:02:92:c2:a7:
         6a:aa:95:fb:eb:cc:ec:bf:e0:f3:85:44:ad:a3:b0:53:9f:0e:
         f7:c3:15:8a:25:2f:53:f1:d5:a6:45:f0:b9:a5:91:bc:22:c9:
         c1:13:7c:81:d2:f4:e7:28:6f:30:fd:f5:7b:d2:44:85:ae:2b:
         3e:b0:0c:dd:cd:83:92:bb:76:ee:05:bc:10:43:ec:60:37:32:
         1d:d8:9e:3e:ad:4a:52:05:48:e1:f8:ab:d1:70:b2:d1:8b:7c:
         ce:bc:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:20:38 2024 by rpki-client on console-fra.rpki-client.org