Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E597C2E55717FFA47EAD911355A0160D13BBE8BDEF6DE946352E9B3C6BB800F/0/34352e362e342e302f32322d3234203d3e20323635363836.roa
File:                     34352e362e342e302f32322d3234203d3e20323635363836.roa (raw, json)
Hash identifier:          txiEwMzpGQ51okzrIqmZvL2h6hHI7zzUNk8CtwRcswE=
Subject key identifier:   D6:8D:66:95:98:5E:A9:4B:CC:4A:DA:53:CB:A8:40:8C:1E:91:54:00
Certificate issuer:       /CN=402821049CC9FB75337290977B92EA2D1BEAFC7B
Certificate serial:       33FA0657011EBC0166CF21BADBF4E076D0C3975D
Authority key identifier: 40:28:21:04:9C:C9:FB:75:33:72:90:97:7B:92:EA:2D:1B:EA:FC:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402821049CC9FB75337290977B92EA2D1BEAFC7B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E597C2E55717FFA47EAD911355A0160D13BBE8BDEF6DE946352E9B3C6BB800F/0/34352e362e342e302f32322d3234203d3e20323635363836.roa
Signing time:             Tue 05 Mar 2024 18:15:39 +0000
ROA not before:           Tue 05 Mar 2024 18:10:39 +0000
ROA not after:            Tue 04 Mar 2025 18:15:39 +0000
asID:                     265686
IP address blocks:        45.6.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E597C2E55717FFA47EAD911355A0160D13BBE8BDEF6DE946352E9B3C6BB800F/0/402821049CC9FB75337290977B92EA2D1BEAFC7B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E597C2E55717FFA47EAD911355A0160D13BBE8BDEF6DE946352E9B3C6BB800F/0/402821049CC9FB75337290977B92EA2D1BEAFC7B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402821049CC9FB75337290977B92EA2D1BEAFC7B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fa:06:57:01:1e:bc:01:66:cf:21:ba:db:f4:e0:76:d0:c3:97:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402821049CC9FB75337290977B92EA2D1BEAFC7B
        Validity
            Not Before: Mar  5 18:10:39 2024 GMT
            Not After : Mar  4 18:15:39 2025 GMT
        Subject: CN=D68D6695985EA94BCC4ADA53CBA8408C1E915400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:d3:fd:b0:45:41:26:88:67:e7:8c:ea:0c:
                    9c:92:ae:54:7c:19:b6:76:35:d7:21:db:78:15:a2:
                    a4:07:4e:c3:6f:28:ec:22:ad:e2:e6:e7:62:b7:29:
                    36:71:8f:7a:30:2d:b8:83:0d:7d:a6:19:bc:c0:3d:
                    db:56:9c:e8:8e:49:98:39:a7:23:61:e9:d1:aa:66:
                    da:61:1b:40:3e:9a:c6:e5:79:41:71:0f:fe:51:6f:
                    16:0e:e5:06:80:a3:47:90:9d:43:fb:2e:12:48:9c:
                    c0:e4:fe:80:2c:bb:64:e4:1a:a0:9f:4d:2b:c1:dc:
                    e7:73:bc:75:76:c8:c3:36:c7:ed:c0:31:3d:21:fa:
                    2a:bc:21:79:14:21:c1:10:f7:c2:e0:59:3b:5b:b5:
                    7a:07:60:5b:d9:cf:59:f6:f0:b5:72:f4:7d:20:0d:
                    ae:51:16:5c:34:74:c4:ec:75:09:34:c3:94:8f:cc:
                    c5:31:65:55:a9:3a:17:b4:97:5c:18:3c:8e:ac:1c:
                    42:21:9d:06:43:70:01:20:10:55:58:a8:6c:4c:db:
                    3e:d0:12:9c:08:eb:91:dd:b8:c1:f6:33:9a:a2:dc:
                    26:32:e8:e4:f8:e6:ad:f2:f6:40:b0:4f:fb:15:e6:
                    20:5c:01:a4:cf:38:ae:cf:09:27:84:d9:43:8c:a2:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8D:66:95:98:5E:A9:4B:CC:4A:DA:53:CB:A8:40:8C:1E:91:54:00
            X509v3 Authority Key Identifier:
                keyid:40:28:21:04:9C:C9:FB:75:33:72:90:97:7B:92:EA:2D:1B:EA:FC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E597C2E55717FFA47EAD911355A0160D13BBE8BDEF6DE946352E9B3C6BB800F/0/402821049CC9FB75337290977B92EA2D1BEAFC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/402821049CC9FB75337290977B92EA2D1BEAFC7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E597C2E55717FFA47EAD911355A0160D13BBE8BDEF6DE946352E9B3C6BB800F/0/34352e362e342e302f32322d3234203d3e20323635363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:92:85:8f:e0:9d:39:a6:43:16:48:d2:11:d7:d3:1d:c7:
         ac:b9:12:a2:c2:1f:e0:36:1d:1b:9a:fe:f6:a6:a7:a6:f2:02:
         58:74:99:bf:77:11:28:9b:1e:2f:a8:b1:fa:9a:2d:57:93:5f:
         91:e8:6e:04:fb:dd:e1:34:a7:9c:65:e3:34:87:a0:3e:42:0a:
         15:0c:53:df:a8:55:3c:dc:f2:b1:61:e9:33:21:4b:13:7f:09:
         e0:49:04:0a:ef:10:d4:fc:ab:d3:a1:d5:cb:70:68:40:62:d0:
         75:ab:90:a0:0e:47:9d:d7:46:e1:bc:f4:2b:7c:dd:d0:92:05:
         ee:85:0b:b2:18:51:bc:9b:dc:c8:bc:05:a0:ab:65:ca:1b:69:
         e9:2f:63:45:95:ed:2f:ab:4e:1c:ba:05:6e:c8:12:80:eb:fa:
         3b:10:a4:66:21:8f:2b:43:b4:04:05:f3:ae:01:e0:d4:ba:1d:
         19:1e:1c:ca:8b:54:75:f4:1b:4a:2d:b0:04:a5:99:ec:a5:08:
         52:0d:28:12:cd:11:dd:b4:24:b2:85:a9:6a:5f:08:5b:16:9c:
         6a:29:8a:c1:c5:c1:97:a5:39:e6:92:4d:b0:ca:9e:b0:19:2f:
         4c:fe:53:cc:d2:1b:c7:76:e6:dd:11:5f:f8:4f:26:06:d8:96:
         61:7d:ff:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org