Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32302e302f32342d3234203d3e20323635363835.roa
File:                     34352e352e32302e302f32342d3234203d3e20323635363835.roa (raw, json)
Hash identifier:          V47ergE+ZSuScuLgwCqtN1p031vbH3uvJavn5Mihu8U=
Subject key identifier:   09:35:8C:12:BD:59:47:B6:C2:E9:FF:5A:08:C0:ED:FB:BD:AF:41:C4
Certificate issuer:       /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Certificate serial:       2BB56B1EBCD74DD383793B45B36AEFAB36B50694
Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32302e302f32342d3234203d3e20323635363835.roa
Signing time:             Tue 05 Mar 2024 18:15:44 +0000
ROA not before:           Tue 05 Mar 2024 18:10:44 +0000
ROA not after:            Tue 04 Mar 2025 18:15:44 +0000
asID:                     265685
IP address blocks:        45.5.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b5:6b:1e:bc:d7:4d:d3:83:79:3b:45:b3:6a:ef:ab:36:b5:06:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
        Validity
            Not Before: Mar  5 18:10:44 2024 GMT
            Not After : Mar  4 18:15:44 2025 GMT
        Subject: CN=09358C12BD5947B6C2E9FF5A08C0EDFBBDAF41C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:1d:54:a4:b2:b7:ba:a4:ab:a5:20:bb:31:
                    5a:ca:4c:bb:0f:ff:d8:e0:0e:f7:22:11:89:d1:e5:
                    62:00:5a:8a:0d:af:d4:d5:da:61:42:89:4b:05:af:
                    17:a0:dc:bc:40:eb:65:a8:5a:38:3a:3b:a5:8f:4d:
                    2a:46:f8:c5:a8:68:48:b2:d8:99:8f:dd:cc:bb:a8:
                    fb:bf:7b:a7:90:71:36:3d:01:74:e6:c8:77:1f:e4:
                    22:4c:ef:fe:5b:f5:e8:16:87:00:70:a1:69:45:83:
                    75:e0:66:81:44:7a:53:de:15:57:c2:cf:3f:8d:a9:
                    f4:09:e9:7e:2e:14:4c:02:76:19:54:f8:00:61:d3:
                    da:2a:c1:5c:af:42:b1:01:9e:8f:2a:38:08:1b:49:
                    fd:f3:35:af:1d:32:7c:1c:f3:48:25:81:68:09:1e:
                    b0:e8:5b:a7:8d:6c:1f:9f:8c:60:a0:30:d4:ea:af:
                    f1:a4:59:dd:fc:ea:5e:2b:14:cb:64:ed:38:39:de:
                    a8:ba:3a:cd:d2:a0:b9:77:94:9f:88:39:14:8f:8e:
                    46:64:92:57:a4:91:c8:3a:a4:d8:ca:ff:48:64:1b:
                    21:47:c3:23:5e:a1:45:8b:24:a9:42:04:f1:09:19:
                    bc:8b:a2:9d:1b:8f:13:ca:8e:b4:d2:28:a2:50:c2:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:35:8C:12:BD:59:47:B6:C2:E9:FF:5A:08:C0:ED:FB:BD:AF:41:C4
            X509v3 Authority Key Identifier:
                keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32302e302f32342d3234203d3e20323635363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:41:a8:1c:91:78:e4:51:21:fa:c9:b2:7d:cc:01:a5:ed:f9:
         38:48:60:7f:cf:e4:6d:07:0a:a4:55:b4:5c:e0:8a:48:2c:3a:
         d4:1a:b2:a4:9a:14:79:d1:24:c1:f3:c0:6a:2d:ac:c0:9b:26:
         04:a7:3c:ba:54:0b:c7:3b:6a:66:82:65:70:1a:32:5c:83:bb:
         7e:f0:5f:90:a0:9f:10:7b:b7:db:56:ba:62:cc:aa:b5:51:89:
         01:53:c7:bd:82:1c:eb:e7:30:23:93:88:56:fb:7e:1f:78:45:
         fa:16:a8:03:a6:f3:65:1a:ac:22:cd:25:c6:73:c6:51:57:ba:
         be:f9:57:13:de:ee:ea:f3:5f:56:a1:f5:93:25:5c:5d:db:f9:
         87:5a:64:e0:b3:15:c0:78:3f:e1:02:65:01:73:3c:01:e6:46:
         f2:c8:b6:c1:bf:f4:36:d9:20:93:d6:d9:2a:ac:87:1e:ea:e2:
         2a:07:86:6a:85:c3:6c:b5:42:e1:0c:70:ad:55:1f:af:0b:13:
         20:e8:9f:26:25:1b:e4:62:2a:91:7b:a1:43:90:1f:73:10:c1:
         28:50:73:51:07:48:f7:b2:da:60:60:b2:f5:2d:3c:c3:f1:5f:
         c3:78:ab:1a:14:18:c6:0e:78:df:1e:af:d9:40:24:8c:f0:a0:
         d0:c4:66:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org