Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa
File:                     34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa (raw, json)
Hash identifier:          IsZd+QAyOgzrYmiCU+aXf/UJPFWc0PQ6+Is+54n5Bjs=
Subject key identifier:   98:16:4A:F1:B8:A8:F9:E3:00:44:65:CD:39:82:32:07:53:74:BA:28
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       7874C30B9BB5CBDEC4F1BD48B77BA7316A30EDF2
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa
Signing time:             Tue 28 May 2024 17:35:02 +0000
ROA not before:           Tue 28 May 2024 17:30:02 +0000
ROA not after:            Tue 27 May 2025 17:35:02 +0000
asID:                     266694
IP address blocks:        45.229.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:74:c3:0b:9b:b5:cb:de:c4:f1:bd:48:b7:7b:a7:31:6a:30:ed:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: May 28 17:30:02 2024 GMT
            Not After : May 27 17:35:02 2025 GMT
        Subject: CN=98164AF1B8A8F9E3004465CD398232075374BA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:07:32:ba:4d:4a:ec:33:9b:2c:e9:58:b5:
                    70:3e:e0:97:5d:4c:69:1d:62:64:1b:4d:96:e0:31:
                    bf:a0:1f:36:6c:4b:29:61:44:11:19:cc:6c:14:03:
                    dd:97:2d:3d:01:69:83:f2:16:f9:b9:44:a1:8e:04:
                    89:42:ce:6b:d2:e7:36:bd:ac:6a:d2:b9:5e:e2:c3:
                    5a:b9:d2:f9:eb:8d:73:ac:95:2b:69:e4:67:7d:30:
                    d6:e7:dc:ab:74:aa:16:c1:5f:d5:ce:e8:87:df:50:
                    12:e6:0c:f9:b6:fa:ae:e6:ae:59:ed:5f:e4:a6:da:
                    be:c6:1a:59:41:48:e3:2d:9c:53:3b:e5:dc:09:b5:
                    a4:0d:a6:64:0c:87:50:85:46:6f:86:ca:7a:53:43:
                    64:65:08:e4:08:8e:b0:7e:ee:da:56:6a:85:0d:e6:
                    f3:c8:7b:69:9b:bb:91:1a:e3:4e:e9:5b:ba:63:70:
                    68:3f:0b:d8:4d:6a:6f:29:8b:95:3c:cf:10:d8:dc:
                    f5:7e:30:25:75:90:98:c4:6e:6a:e7:5b:fa:7d:62:
                    28:9d:af:f1:c4:5d:3b:79:58:61:26:30:34:9d:94:
                    c1:70:a1:75:fe:0a:44:4a:7f:f9:88:50:f4:11:fd:
                    ca:b2:a1:af:4b:c2:d8:0d:cb:ec:02:cc:fe:5b:d8:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:4A:F1:B8:A8:F9:E3:00:44:65:CD:39:82:32:07:53:74:BA:28
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3137302e302f32342d3234203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2e:e6:a6:d4:60:e4:9d:f7:c8:f5:1b:ee:f2:fe:24:19:6b:
         fd:26:45:ef:74:fc:2c:b7:ed:c5:90:5a:77:0c:58:84:0f:90:
         53:f6:28:67:c6:e0:2e:08:6c:f2:00:04:8f:62:4d:b0:20:b7:
         5c:57:f4:e1:f2:40:61:e7:6d:4e:04:14:62:06:92:88:c2:09:
         e2:61:f3:3d:d6:99:f5:cc:f8:69:a1:da:d9:9d:8a:03:57:d3:
         12:7c:a2:eb:30:41:a0:23:2e:b5:ad:0b:8f:60:b9:1b:6c:7b:
         e4:26:86:ab:4b:3f:f4:fe:8d:18:97:6d:7c:32:c4:71:c7:31:
         c9:bb:54:80:2e:45:5c:6d:6e:dd:f3:99:60:6b:4f:10:e9:73:
         8f:0d:3f:13:ca:1e:66:0e:e4:0b:10:56:84:8f:98:2a:f9:ff:
         b1:25:d7:4c:48:7f:33:d9:2d:66:10:0e:b7:af:b8:b9:15:bf:
         cb:f6:ec:51:95:cc:ab:84:e7:ef:fe:df:e2:f6:78:1a:0a:c4:
         1f:57:23:f9:72:8c:a1:3f:90:34:12:8b:07:70:98:c1:c2:e1:
         8b:f4:df:e5:96:71:5b:50:4b:ae:fb:d1:83:c2:92:0c:29:d8:
         c1:3b:47:9a:16:46:e4:fb:e5:9b:ab:9e:f5:cb:38:2c:8e:31:
         6c:59:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:29 2024 by rpki-client on console-fra.rpki-client.org