Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33362e302f32322d3234203d3e203532343638.roa
File:                     34352e37312e33362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          /3JHw7RAWsdEhxAGRf0KE5dhQhndWO3Dgyt6PE3mjo4=
Subject key identifier:   0E:68:D8:4F:04:15:F0:1D:73:B2:5B:94:D8:45:DF:CF:E8:0A:D5:99
Certificate issuer:       /CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
Certificate serial:       2B2230B6BA52C6ED850DFD024206789A7794EADE
Authority key identifier: DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33362e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:48:27 +0000
ROA not before:           Tue 05 Mar 2024 17:43:27 +0000
ROA not after:            Tue 04 Mar 2025 17:48:27 +0000
asID:                     52468
IP address blocks:        45.71.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:22:30:b6:ba:52:c6:ed:85:0d:fd:02:42:06:78:9a:77:94:ea:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A
        Validity
            Not Before: Mar  5 17:43:27 2024 GMT
            Not After : Mar  4 17:48:27 2025 GMT
        Subject: CN=0E68D84F0415F01D73B25B94D845DFCFE80AD599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:89:b4:eb:7a:41:23:fd:8a:9c:0b:47:75:
                    09:d8:49:53:af:0e:9f:77:ee:f3:97:8e:cf:d6:58:
                    1e:09:36:29:ab:55:14:54:8c:99:60:90:8b:ab:b5:
                    bd:5c:25:2b:71:53:d8:26:a8:64:0e:c6:8e:66:59:
                    25:ba:1a:d5:8b:b7:cb:8d:be:e8:25:07:47:01:9c:
                    6b:5e:c6:ad:76:eb:b1:61:0a:ac:b2:eb:15:fd:a9:
                    bc:63:8a:26:ed:48:f5:0c:1e:f3:1f:e3:bb:0a:2a:
                    30:fb:41:5d:81:56:f5:47:fd:39:65:fb:17:de:f1:
                    4e:8e:e1:0d:4f:1e:49:a8:24:e3:78:3f:b3:9b:e8:
                    33:7e:09:70:2e:44:0f:10:e8:6f:22:37:6a:69:cb:
                    32:55:5a:95:07:47:4c:92:61:96:fc:b2:fc:e9:f4:
                    7a:e4:23:25:18:19:fe:14:de:f7:64:43:0b:92:09:
                    60:dc:46:99:b2:ce:9d:57:89:bd:07:28:bf:60:e2:
                    d0:a5:45:c0:46:5a:ff:0a:23:82:ba:47:d6:dc:e1:
                    af:b9:b3:ce:f5:29:9d:51:d3:ec:7f:52:cb:be:28:
                    ef:fa:51:a1:97:fc:bd:e9:71:74:c3:31:97:5d:7c:
                    f9:a3:7a:79:f3:d8:9e:63:ec:45:43:fb:fe:87:42:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:68:D8:4F:04:15:F0:1D:73:B2:5B:94:D8:45:DF:CF:E8:0A:D5:99
            X509v3 Authority Key Identifier:
                keyid:DD:74:39:3A:EC:4E:41:A4:1C:6F:1F:D0:2E:0D:9D:28:06:ED:9D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD74393AEC4E41A41C6F1FD02E0D9D2806ED9D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07C0096B91EEE14598A448131C1F2250BEC9AE9D2F5809CE4A43201C1092A294/0/34352e37312e33362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c7:3d:03:b6:0f:83:4c:b1:5f:e6:65:3b:2d:dd:0a:45:d8:
         3e:95:d6:86:18:72:ed:80:9f:46:ba:94:14:97:cd:19:26:72:
         a6:1c:4c:3d:87:24:cc:f7:48:f9:c9:06:13:73:75:35:ca:ea:
         95:6b:74:d8:89:0b:c2:9c:27:85:d2:1f:21:84:2e:1d:5e:b8:
         f5:2e:46:cc:b8:9a:c7:08:1d:77:65:e1:1a:1c:d7:a4:85:d5:
         5b:81:59:53:8a:48:97:4f:5e:6a:2e:56:1c:21:0c:18:89:b5:
         79:fa:95:e7:40:06:32:26:15:22:b4:aa:58:ae:a6:d4:05:65:
         8c:ab:9f:75:ee:ad:36:bc:2e:d2:8b:8d:a7:34:cb:01:b5:b0:
         37:4c:e1:fe:37:8a:0a:91:5a:2d:03:0f:93:c9:30:25:70:c3:
         7a:84:dd:62:f5:7b:81:ee:2f:fb:ac:2b:18:35:22:be:fb:b6:
         7b:52:d6:e3:f5:2e:53:67:7b:6a:af:b2:47:8a:6f:eb:ed:f3:
         da:63:43:08:ed:ca:0d:39:9c:06:73:20:c5:51:0e:d7:0e:34:
         98:68:de:11:80:b4:08:a2:88:cc:5e:48:b8:fd:b4:ee:f0:e6:
         4d:aa:51:46:af:22:f4:42:08:95:b0:34:63:f2:e2:ce:08:ca:
         4e:b5:d0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org