Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31322e302f32322d3234203d3e20323636373833.roa
File:                     34352e3233352e31322e302f32322d3234203d3e20323636373833.roa (raw, json)
Hash identifier:          614ZIqfNcuxILbtWsRpD9s1qilpwAEfomPOlTwoJO7w=
Subject key identifier:   AE:F9:68:B4:04:F0:6C:91:2D:9E:E2:E4:69:C3:C6:1A:C3:BC:AC:F9
Certificate issuer:       /CN=CBF31447B564264D0A347F323D8011AEBA5D1613
Certificate serial:       12AD56E8FDB5B195B262F5706C2CD6541EA990AD
Authority key identifier: CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31322e302f32322d3234203d3e20323636373833.roa
Signing time:             Tue 05 Mar 2024 18:20:42 +0000
ROA not before:           Tue 05 Mar 2024 18:15:42 +0000
ROA not after:            Tue 04 Mar 2025 18:20:42 +0000
asID:                     266783
IP address blocks:        45.235.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ad:56:e8:fd:b5:b1:95:b2:62:f5:70:6c:2c:d6:54:1e:a9:90:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBF31447B564264D0A347F323D8011AEBA5D1613
        Validity
            Not Before: Mar  5 18:15:42 2024 GMT
            Not After : Mar  4 18:20:42 2025 GMT
        Subject: CN=AEF968B404F06C912D9EE2E469C3C61AC3BCACF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:8d:2b:4a:b2:e1:14:af:66:8c:42:98:7f:
                    7d:12:a7:c5:a2:f1:cb:37:cd:33:a4:ab:ba:81:70:
                    8d:5d:ef:d9:df:00:90:53:c0:9f:1d:e6:cf:54:57:
                    98:94:d6:7c:2f:4c:25:6d:af:d4:a5:7d:e0:11:ea:
                    52:2c:6d:c9:9b:2e:a5:9d:4a:d0:25:e7:7e:ce:1d:
                    ec:30:81:3c:cc:f5:68:6a:c8:f7:df:69:e8:8e:5c:
                    b3:c7:49:41:30:19:66:22:26:8f:b6:d3:ec:92:93:
                    b5:ec:d6:76:e8:52:f3:b0:72:c1:9b:64:cd:24:d1:
                    86:90:eb:94:bc:da:b9:ba:30:8d:6b:ea:9b:16:c5:
                    0f:33:38:91:34:11:30:8c:09:4a:da:95:e7:bd:c5:
                    c9:0f:89:c3:21:de:19:bf:1e:fa:bf:3b:d8:f8:40:
                    5d:70:e2:0c:cf:c4:c0:9d:dd:19:e9:ed:cf:36:53:
                    2b:0c:85:4e:3d:5d:43:93:b3:6c:c9:40:2b:1a:4a:
                    cc:a0:3a:ca:74:f1:3a:52:14:c0:4e:ea:a8:2a:2b:
                    bc:1c:74:0d:29:70:39:25:e7:98:c6:1a:d3:ea:33:
                    21:a9:15:86:ac:be:cb:94:d4:bd:4a:2b:3e:fa:a3:
                    f4:2d:8b:7a:11:5e:52:c3:3d:83:bc:85:f1:b7:94:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:68:B4:04:F0:6C:91:2D:9E:E2:E4:69:C3:C6:1A:C3:BC:AC:F9
            X509v3 Authority Key Identifier:
                keyid:CB:F3:14:47:B5:64:26:4D:0A:34:7F:32:3D:80:11:AE:BA:5D:16:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/CBF31447B564264D0A347F323D8011AEBA5D1613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBF31447B564264D0A347F323D8011AEBA5D1613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06BAD717C8E73AF657DE82F7866307886E7CAC807F2B4CE4A313CE68646EFF6E/0/34352e3233352e31322e302f32322d3234203d3e20323636373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:57:e3:97:e7:1e:f8:a3:d6:38:97:20:4b:ba:e5:70:1e:f7:
         ae:c3:0d:73:a5:fe:ac:09:da:37:b1:18:97:e0:ab:45:7d:f8:
         c6:3d:37:dd:1c:4e:fb:5f:b9:ea:5f:0e:d2:4d:2a:db:88:af:
         fa:d3:6e:ad:98:7e:d8:0b:99:f7:1e:9a:5e:3c:c3:99:5a:a0:
         96:cd:01:13:36:92:b7:b4:e9:fd:4d:4c:ec:25:50:05:03:46:
         5f:52:c6:4e:63:35:2f:f8:c8:08:43:aa:3c:90:54:c0:06:77:
         49:cd:b2:70:49:93:d6:95:1b:0f:75:61:21:a6:e1:6d:2b:82:
         ec:5a:12:3a:08:b1:b9:04:5b:25:7d:ac:a3:9b:14:55:84:cc:
         af:a0:76:ef:24:86:1d:2d:b9:8d:67:f2:22:94:c6:99:2d:33:
         0f:80:47:96:c0:2e:cf:f7:d9:05:63:4d:6b:83:e4:ec:30:db:
         6e:4c:f0:66:b7:d3:0d:82:76:c4:82:4a:a1:b6:3a:79:b6:ca:
         71:e6:8e:52:93:a7:5c:90:5e:02:c1:f6:4a:df:cd:95:7a:21:
         39:49:c5:d2:09:72:f3:98:30:e1:fa:90:78:84:b9:0f:29:d3:
         42:e4:36:5d:9d:90:fa:3a:05:52:f3:4e:9b:29:fd:4d:bf:df:
         2a:f5:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:28 2024 by rpki-client on console-ams.rpki-client.org