Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32322e302f32342d3234203d3e20323635363835.roa
File:                     34352e352e32322e302f32342d3234203d3e20323635363835.roa (raw, json)
Hash identifier:          9z6kW+QL+XInd0lv4whjIDgZyCGAEXOSouR8AK/Tcv0=
Subject key identifier:   50:85:8D:7D:41:7B:D9:48:84:C2:69:E1:B9:77:FC:4D:6B:15:B0:03
Certificate issuer:       /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Certificate serial:       5A0A6DCA5F020485E339692782A790EE2D25DB45
Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32322e302f32342d3234203d3e20323635363835.roa
Signing time:             Tue 05 Mar 2024 18:15:44 +0000
ROA not before:           Tue 05 Mar 2024 18:10:44 +0000
ROA not after:            Tue 04 Mar 2025 18:15:44 +0000
asID:                     265685
IP address blocks:        45.5.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0a:6d:ca:5f:02:04:85:e3:39:69:27:82:a7:90:ee:2d:25:db:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
        Validity
            Not Before: Mar  5 18:10:44 2024 GMT
            Not After : Mar  4 18:15:44 2025 GMT
        Subject: CN=50858D7D417BD94884C269E1B977FC4D6B15B003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:bf:8b:29:a9:fb:0c:bb:9c:c2:ab:67:4b:
                    0f:77:e7:1a:67:b6:f2:27:70:e0:1f:31:df:d0:c0:
                    6c:b6:5b:1c:c0:1f:b8:f3:20:4d:52:f2:90:bc:02:
                    bc:3f:a9:a5:b9:7e:20:28:4a:07:22:bb:52:04:05:
                    5d:62:d3:22:44:63:ca:74:9b:97:21:51:3c:a2:48:
                    8e:20:38:bd:dd:af:eb:86:3e:ce:fd:0f:ae:c1:00:
                    80:ae:eb:29:39:61:f9:97:40:a5:7f:93:9f:bc:6e:
                    51:c2:ef:59:d4:24:7c:81:d7:2f:f5:ca:0e:26:86:
                    b0:3b:8a:ac:f8:10:35:dd:be:d7:d9:c3:a0:eb:2d:
                    40:fd:60:6d:2d:65:80:d1:59:2a:1b:53:6e:6e:01:
                    ce:b6:20:4a:e4:b3:79:d5:03:bd:9a:90:be:c9:ce:
                    68:79:2b:fe:f2:ba:d9:84:41:b2:17:0a:d2:70:8a:
                    fa:70:5b:9a:9e:26:3a:05:46:19:91:1e:71:51:d5:
                    b5:14:a7:3d:b0:8c:02:ea:1b:04:d5:81:6b:f2:3c:
                    bd:8e:db:68:88:2b:29:2e:da:5c:52:61:78:cb:3d:
                    1b:bf:d2:b3:4e:67:ee:77:37:d9:61:c9:64:1c:89:
                    54:19:c4:d5:54:70:cb:d3:b4:4f:ed:fc:6e:6b:0b:
                    54:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:85:8D:7D:41:7B:D9:48:84:C2:69:E1:B9:77:FC:4D:6B:15:B0:03
            X509v3 Authority Key Identifier:
                keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32322e302f32342d3234203d3e20323635363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:e1:75:85:60:40:f6:d6:d5:84:41:65:3e:0f:c3:15:11:
         e6:5d:8f:eb:3b:b0:b7:de:cb:76:84:97:29:03:bd:b8:87:a6:
         42:5c:44:5b:4d:7a:a8:d0:53:1e:19:3d:56:ae:cb:bb:3e:83:
         e6:6c:80:8f:6a:1f:86:96:ae:bd:94:bc:ed:5d:b3:f6:75:c4:
         b4:9a:99:6d:52:42:bc:61:e9:fa:44:53:ea:aa:a9:6a:43:bd:
         5b:b5:5c:89:6c:d2:5d:4b:65:1c:2b:4c:3e:f9:5b:fa:76:eb:
         68:75:de:4c:ed:d1:05:dd:47:e9:78:75:6c:da:48:e6:d0:c4:
         36:4f:99:2c:50:b7:1c:85:09:b6:db:a2:97:99:cb:9e:50:24:
         67:60:e6:a8:5e:77:99:4f:50:82:8c:fa:49:f0:47:97:b4:35:
         86:f9:33:ba:07:df:12:60:3a:75:fc:50:97:41:b2:a4:41:4e:
         cd:af:e1:6c:be:e6:8e:9e:4e:23:35:ea:31:dc:bd:3e:d6:5e:
         53:04:4c:66:93:b7:6a:aa:b6:30:a5:48:34:fc:94:8c:03:c2:
         4c:cd:03:75:e7:51:7c:50:41:8d:3e:1a:2b:b3:c6:36:6b:43:
         d8:65:f9:e8:48:2e:c5:54:c4:72:a4:c0:9a:2f:c8:0f:f7:c0:
         4a:8b:88:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org