Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/34352e37312e3230342e302f32322d3234203d3e203238313030.roa
File:                     34352e37312e3230342e302f32322d3234203d3e203238313030.roa (raw, json)
Hash identifier:          G9i6ySZw/xJSZoykcPMzBwwOGabohmO9RZWnc7N5fhk=
Subject key identifier:   D2:C6:62:1E:BB:2A:94:53:76:25:35:A8:0F:29:DA:87:0C:FC:81:78
Certificate issuer:       /CN=23F35C92F4627E1565E06AD98238DA016BDCC2B3
Certificate serial:       74A8774B9CB28F5C86B4A67C52183BA9AAEFC06D
Authority key identifier: 23:F3:5C:92:F4:62:7E:15:65:E0:6A:D9:82:38:DA:01:6B:DC:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/34352e37312e3230342e302f32322d3234203d3e203238313030.roa
Signing time:             Tue 05 Mar 2024 17:48:28 +0000
ROA not before:           Tue 05 Mar 2024 17:43:28 +0000
ROA not after:            Tue 04 Mar 2025 17:48:28 +0000
asID:                     28100
IP address blocks:        45.71.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a8:77:4b:9c:b2:8f:5c:86:b4:a6:7c:52:18:3b:a9:aa:ef:c0:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23F35C92F4627E1565E06AD98238DA016BDCC2B3
        Validity
            Not Before: Mar  5 17:43:28 2024 GMT
            Not After : Mar  4 17:48:28 2025 GMT
        Subject: CN=D2C6621EBB2A9453762535A80F29DA870CFC8178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:06:c4:59:4b:5d:05:d5:d6:6c:f5:7b:99:f0:
                    c2:b8:05:8c:c6:66:59:2c:13:b4:55:cf:fd:57:b2:
                    93:28:b2:ae:0b:b1:94:41:13:d0:b2:fd:a7:4b:38:
                    ea:df:c8:18:c9:bb:d3:30:17:39:a6:28:9d:21:ac:
                    f4:b9:89:ea:92:2d:dc:32:b8:ed:d6:ed:ba:a7:80:
                    59:7c:bd:41:28:19:0d:0c:09:d7:27:a5:5f:84:e7:
                    89:54:c4:51:2e:5b:a8:15:e7:df:08:87:95:07:9d:
                    21:3e:50:59:8e:29:97:df:8a:bd:f2:ed:5c:72:bd:
                    b8:81:72:f0:77:26:07:79:fd:bf:a3:5a:54:0f:83:
                    73:bf:b6:54:e5:eb:16:fe:e2:dc:c1:53:4f:a3:2b:
                    0e:0a:ee:80:a9:f0:bb:8c:e8:ba:88:62:6d:4d:03:
                    f9:bd:96:fc:ae:8d:47:81:bd:38:87:b6:44:8f:e8:
                    77:97:13:b5:7b:a0:ae:78:1e:dc:fd:12:bb:a9:20:
                    58:80:28:64:10:13:00:f6:3e:8c:e8:9b:80:57:a3:
                    77:87:01:1c:02:47:69:c9:2a:99:2f:2f:31:9d:c0:
                    a4:fc:7b:18:bc:bd:52:07:30:f4:9a:c1:d4:dc:db:
                    05:8f:25:24:2c:eb:74:81:5d:cb:4e:79:aa:29:96:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C6:62:1E:BB:2A:94:53:76:25:35:A8:0F:29:DA:87:0C:FC:81:78
            X509v3 Authority Key Identifier:
                keyid:23:F3:5C:92:F4:62:7E:15:65:E0:6A:D9:82:38:DA:01:6B:DC:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23F35C92F4627E1565E06AD98238DA016BDCC2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0930C6D701CE2265C2D06CF0BB9DA5BAFFDC79C92B043982D8056088319CA904/0/34352e37312e3230342e302f32322d3234203d3e203238313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:18:dc:91:15:87:7f:55:ee:9d:a6:dd:76:4c:4a:37:2a:
         2b:66:53:f3:40:ce:ef:3f:29:60:33:71:63:c3:87:c3:c3:4d:
         10:0a:4e:4e:ff:87:40:a4:83:cc:e4:9f:df:11:b5:22:df:d7:
         4c:5f:09:90:ad:9e:78:fc:44:25:70:67:45:23:df:ac:64:17:
         ed:af:03:8e:ae:f1:b8:30:72:a1:0f:d7:06:13:19:c0:d0:d6:
         de:ac:09:bb:31:e6:0d:23:ba:f9:0b:ce:e2:0b:16:60:1f:8f:
         fc:70:ea:75:eb:ad:90:ee:32:7a:59:85:07:c9:6f:57:a1:b6:
         de:f9:1e:95:54:7f:27:93:95:09:19:c9:bb:c2:6d:af:58:ce:
         2a:8d:2f:fd:34:92:8a:e8:82:49:8f:c0:51:09:e6:2c:85:88:
         92:1b:b3:7e:31:50:4e:cd:c1:79:9d:4d:c5:cc:7a:d1:ac:b8:
         80:72:7c:9e:2c:78:39:3b:de:f0:8d:01:9c:75:71:1d:62:08:
         aa:20:75:35:a4:e7:d1:f6:c2:1a:dc:9d:63:28:2a:c7:69:64:
         df:8d:32:b2:6a:6b:fa:09:75:4b:2b:2d:c9:f8:59:fa:96:cf:
         1c:08:57:6c:77:b1:5b:96:6b:0c:cf:a4:ec:ac:85:d3:ba:8e:
         ce:e8:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:39:58 2024 by rpki-client on console-ams.rpki-client.org