Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323636383035.roa
File:                     34352e3233362e3234342e302f32322d3234203d3e20323636383035.roa (raw, json)
Hash identifier:          tUzIuthtZ9zLVhk8s25KlGi74F7k3VNeZ94j5s/tsTE=
Subject key identifier:   85:B6:55:61:2F:8D:59:82:20:67:D8:4E:71:9D:79:7A:A5:6F:07:ED
Certificate issuer:       /CN=8B5877089EE5620C180446F9B30B225C6209D812
Certificate serial:       615821E67110CE2A96FCAC27F6D3D11DB73CF49D
Authority key identifier: 8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323636383035.roa
Signing time:             Tue 05 Mar 2024 17:39:54 +0000
ROA not before:           Tue 05 Mar 2024 17:34:54 +0000
ROA not after:            Tue 04 Mar 2025 17:39:54 +0000
asID:                     266805
IP address blocks:        45.236.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Jun 2024 20:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:58:21:e6:71:10:ce:2a:96:fc:ac:27:f6:d3:d1:1d:b7:3c:f4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5877089EE5620C180446F9B30B225C6209D812
        Validity
            Not Before: Mar  5 17:34:54 2024 GMT
            Not After : Mar  4 17:39:54 2025 GMT
        Subject: CN=85B655612F8D59822067D84E719D797AA56F07ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:b5:1d:f7:a8:fc:8c:50:91:3b:38:43:3c:
                    6e:3a:80:c2:d2:60:e4:a5:b7:4b:1b:b3:03:ba:92:
                    6d:35:66:e4:52:b4:3a:12:5b:29:35:1e:48:e6:ea:
                    f4:64:82:07:93:1a:3d:6b:51:ad:1e:91:27:7b:71:
                    ef:8a:db:7b:8e:19:b2:94:00:37:90:39:3f:90:a5:
                    ee:ff:a8:32:95:65:5e:fc:b3:4b:1c:4d:82:43:48:
                    1e:41:4f:86:1d:72:9e:18:fd:8b:7f:5f:0f:2a:53:
                    e1:24:56:4e:c0:3a:f4:90:7b:7d:1d:70:a2:43:6b:
                    dd:07:9c:0c:5e:f8:5a:3d:47:88:a9:3e:4c:fc:7b:
                    9b:5b:26:f9:db:da:c6:d5:cf:cf:a1:34:4d:e1:83:
                    01:1d:5b:0c:54:41:41:77:83:17:12:0d:09:4c:12:
                    8d:d2:c2:41:54:31:71:07:48:35:04:cb:8f:cb:c2:
                    e9:e3:96:84:f0:8b:c5:6b:ee:4c:20:c8:8f:36:05:
                    59:9c:1a:eb:41:70:3a:ea:06:3d:e8:cb:e2:58:42:
                    65:1a:7a:d7:fb:c1:f6:f3:71:d7:0f:3a:67:7e:3b:
                    4e:46:55:77:58:c6:13:42:93:2f:24:90:f9:92:e6:
                    68:37:c8:4c:e3:ce:b9:07:3c:a3:6c:f9:77:e2:27:
                    cd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B6:55:61:2F:8D:59:82:20:67:D8:4E:71:9D:79:7A:A5:6F:07:ED
            X509v3 Authority Key Identifier:
                keyid:8B:58:77:08:9E:E5:62:0C:18:04:46:F9:B3:0B:22:5C:62:09:D8:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/8B5877089EE5620C180446F9B30B225C6209D812.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B5877089EE5620C180446F9B30B225C6209D812.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FB710AFB895BCF01E90A112F91574F572F05758EE3793F8C2755C857489FD7A/0/34352e3233362e3234342e302f32322d3234203d3e20323636383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:89:12:2f:cd:1e:7a:00:9c:92:11:b8:ca:b6:db:c4:6a:
         43:56:c5:89:f0:15:c4:e0:77:f8:97:0d:4e:bf:1e:f7:62:23:
         42:83:2d:a3:d5:76:0a:8c:ac:d7:c1:6a:2b:19:50:5e:97:cc:
         a0:8b:d2:32:9f:52:e2:70:b3:06:af:3b:04:90:db:0a:a6:89:
         73:6f:3f:17:a4:17:9c:a6:3b:57:fa:8b:3d:15:17:60:2f:8e:
         9e:b7:09:fd:71:82:0a:fe:04:54:6b:f1:9f:ca:01:6a:dc:4b:
         c0:d6:49:37:a0:37:fa:07:eb:b4:71:49:b7:92:68:14:55:92:
         14:13:b9:33:9f:1f:8d:17:84:5f:9f:29:3a:69:3c:bc:da:70:
         1d:5a:9e:db:fd:e5:71:4b:8a:25:4d:ec:d2:37:e0:29:a1:e5:
         65:aa:1a:94:1e:7d:98:f6:3b:9b:ae:01:0a:a2:97:f0:c4:a5:
         a3:7c:39:da:9f:0d:26:bb:cc:54:d3:80:54:99:24:51:22:47:
         25:9b:d8:5b:19:b1:b1:ab:a3:8b:c7:b5:3b:ea:70:3e:ca:2a:
         91:20:27:9a:7d:43:bc:eb:23:1c:6d:5d:c8:a9:d6:fa:75:85:
         2e:67:8b:a0:9e:1a:10:cb:c7:9c:a8:80:0d:7b:97:13:55:ed:
         6e:8f:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 14:04:51 2024 by rpki-client on console-ams.rpki-client.org