Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa
File:                     34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa (raw, json)
Hash identifier:          XNZoYjdJcPJUO0wtV6eq3V5aNkMbH/ZSWkZHeMmbBHM=
Subject key identifier:   9A:21:6B:D4:74:B1:0A:05:65:7C:FB:27:14:13:51:7C:FA:0F:1A:C9
Certificate issuer:       /CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
Certificate serial:       3814D42F0927C0C455EA81B93DD742FE8629961C
Authority key identifier: 6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa
Signing time:             Fri 15 Mar 2024 13:20:00 +0000
ROA not before:           Fri 15 Mar 2024 13:15:00 +0000
ROA not after:            Fri 14 Mar 2025 13:20:00 +0000
asID:                     266793
IP address blocks:        45.234.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:14:d4:2f:09:27:c0:c4:55:ea:81:b9:3d:d7:42:fe:86:29:96:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
        Validity
            Not Before: Mar 15 13:15:00 2024 GMT
            Not After : Mar 14 13:20:00 2025 GMT
        Subject: CN=9A216BD474B10A05657CFB271413517CFA0F1AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:a3:01:9d:19:eb:a9:27:34:28:f3:aa:96:
                    2c:9a:5d:57:63:b2:e9:be:1a:40:df:81:d5:02:3f:
                    31:bd:88:21:30:bb:b1:e8:d6:fb:ac:3e:be:d8:d3:
                    a1:d7:f8:37:20:f3:7d:d3:5f:57:10:58:88:90:ce:
                    e3:85:b3:e4:73:a6:91:b6:bf:43:32:15:51:6f:d2:
                    ca:8b:a4:10:55:5b:b7:3e:b3:88:07:9b:a6:d2:49:
                    e1:d5:a0:d4:9d:c8:26:3f:fe:89:23:19:b9:64:4b:
                    7a:a5:c2:79:6a:d3:bd:34:08:a5:71:5d:f4:3b:e5:
                    ba:4c:67:94:6b:61:37:11:57:3f:44:03:87:a0:03:
                    1b:f8:e2:4e:eb:4c:34:65:02:eb:60:bb:ee:be:a7:
                    a8:08:1a:95:38:0b:6b:1d:8d:a3:17:69:86:59:ed:
                    8b:c6:b8:62:e0:34:e3:f9:96:ba:c8:27:a4:98:b7:
                    94:12:d6:e2:65:1b:72:81:a0:37:95:9f:f7:23:56:
                    2c:78:52:59:cd:02:8a:69:44:1b:88:e3:8d:56:0b:
                    c6:81:45:c5:e8:5d:3c:e8:ef:1a:3d:4b:ad:bd:64:
                    f8:b7:ed:aa:5c:ca:75:a3:86:96:75:d5:99:93:c7:
                    ea:f2:56:af:72:43:d1:ab:a3:1d:f4:90:ad:26:3d:
                    bf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:21:6B:D4:74:B1:0A:05:65:7C:FB:27:14:13:51:7C:FA:0F:1A:C9
            X509v3 Authority Key Identifier:
                keyid:6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:10:c5:bf:ef:67:1a:f6:b7:f9:2e:ef:1f:8e:33:43:a2:bf:
         4c:87:ca:ae:f1:62:05:89:76:4f:ca:66:64:ac:1b:e2:74:af:
         1d:4e:d5:4e:fc:b3:16:35:1d:3d:9d:9b:09:67:9c:d5:1f:46:
         96:19:f8:f9:dc:07:52:4c:c6:7c:bb:cb:68:78:80:4f:57:11:
         01:3c:e2:ca:a9:5f:cd:56:91:ca:dd:81:5b:5b:cf:9a:77:d7:
         0b:87:ab:28:e8:53:fb:b0:f1:f2:c7:ae:dc:12:e9:bc:46:17:
         18:29:7b:5c:76:a7:cf:16:5c:33:b2:e1:49:6b:87:9f:7d:2e:
         83:36:99:2a:8f:01:a9:59:cf:9d:6a:a2:42:b2:18:80:53:8d:
         e7:83:df:7b:d0:b0:d4:15:78:49:0a:a4:7e:53:63:cd:4b:97:
         01:99:86:b2:a0:4a:93:e6:6b:52:7c:e2:21:f0:68:37:35:ad:
         94:2d:8b:b2:9c:c2:2b:5c:a4:d2:c6:af:62:9e:34:bd:d1:e4:
         35:d9:0b:78:38:67:b4:04:3e:af:78:83:73:f4:a0:22:5a:e7:
         d7:6f:e4:b1:70:12:e9:d7:95:c3:16:f1:0a:f9:f0:07:4c:a2:
         0b:f1:67:1c:ce:44:e4:f0:c8:5f:43:56:f9:06:53:ba:5e:56:
         2d:e1:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org