Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3136382e3232382e34352e302f32342d3234203d3e20323633373434.roa
File:                     3136382e3232382e34352e302f32342d3234203d3e20323633373434.roa (raw, json)
Hash identifier:          YhQfs5n2lbgZdgnJXtvHoii1SkQcuG3HyiKDrF4cfeE=
Subject key identifier:   DB:4C:15:59:50:4D:3D:CC:FB:A1:67:DA:4B:D1:CB:5E:09:E5:64:81
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       2FF71B2ACEAA3E31CBEF391E542DEEAA95F6C7FD
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3136382e3232382e34352e302f32342d3234203d3e20323633373434.roa
Signing time:             Tue 07 May 2024 15:30:00 +0000
ROA not before:           Tue 07 May 2024 15:25:00 +0000
ROA not after:            Tue 06 May 2025 15:30:00 +0000
asID:                     263744
IP address blocks:        168.228.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 16:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f7:1b:2a:ce:aa:3e:31:cb:ef:39:1e:54:2d:ee:aa:95:f6:c7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: May  7 15:25:00 2024 GMT
            Not After : May  6 15:30:00 2025 GMT
        Subject: CN=DB4C1559504D3DCCFBA167DA4BD1CB5E09E56481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:c4:81:b2:92:79:b7:16:a5:a3:73:6e:ff:df:
                    f9:4a:2f:97:ba:ac:a2:21:92:84:f4:ef:ca:46:16:
                    98:38:cb:31:1f:f0:d3:8a:cb:d5:34:34:ef:f4:87:
                    34:09:28:b4:52:9c:a0:85:d1:f3:4b:5f:f5:70:98:
                    9e:15:d4:1f:8f:a9:19:36:3b:d3:f2:f5:db:40:a4:
                    d0:69:53:60:73:ab:15:83:17:61:8a:cf:a2:eb:49:
                    ec:7b:9c:36:c0:34:3a:74:87:9a:7f:6e:1f:a5:5f:
                    aa:4e:7e:d6:ae:e2:b4:46:b1:c1:3f:03:68:6d:97:
                    2c:e2:88:53:9b:5c:c2:73:93:f0:01:2e:3e:12:ac:
                    cf:b9:c4:28:62:52:1b:65:5d:b0:f2:87:60:9a:9b:
                    e6:f7:c0:24:71:ee:bc:c8:17:ba:ed:bf:60:66:1f:
                    54:53:00:56:36:be:24:b7:1a:71:be:a0:ee:7c:a9:
                    56:55:a8:28:27:67:6b:9a:0d:e9:7c:94:25:c1:ef:
                    e3:be:9b:44:38:13:33:68:53:07:c1:b6:ce:95:1c:
                    d2:d4:6e:15:0f:df:45:6c:17:fc:95:97:54:a4:d5:
                    c8:90:f5:c2:ef:7b:cc:88:22:cd:33:7e:5a:0e:2c:
                    51:8b:48:8a:3d:67:16:57:61:70:8c:8e:ab:21:b3:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4C:15:59:50:4D:3D:CC:FB:A1:67:DA:4B:D1:CB:5E:09:E5:64:81
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3136382e3232382e34352e302f32342d3234203d3e20323633373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:0f:63:12:12:33:eb:50:00:15:ef:1c:68:08:d3:d3:70:ab:
         33:82:27:65:7a:f8:12:d0:c1:5c:62:d0:6f:db:e5:b3:43:2b:
         95:57:f6:dd:4f:a0:99:fa:aa:0b:0c:21:8f:51:79:a2:84:41:
         3e:58:de:09:0c:15:ac:86:0f:13:8b:ef:3e:5a:72:f9:72:cf:
         96:d9:f0:0a:66:bc:e4:40:7b:6a:4f:3e:58:08:4e:92:0d:c6:
         0a:30:da:83:16:14:d8:fa:34:da:3a:01:5b:50:ff:3f:1b:2e:
         2e:41:9d:74:9a:b2:00:dd:e9:eb:30:bf:e8:6e:66:de:5f:72:
         8a:43:b7:ca:91:d5:b6:ac:75:4c:ef:f5:48:a1:19:f7:2d:c9:
         c0:c9:67:e8:84:fc:bc:ec:e1:5a:de:4c:06:75:42:50:93:41:
         c5:76:4d:a6:05:43:ca:e3:12:a9:d9:54:14:39:3b:39:4d:ee:
         a3:a9:f5:da:03:e9:8b:1e:03:91:fe:9b:e8:23:23:3f:95:ea:
         ff:b8:ed:ba:8f:ed:b2:59:cc:1a:5d:64:86:af:02:a5:7c:ca:
         10:e9:e3:82:7b:8e:e6:7f:74:c6:33:45:da:86:d1:9e:87:d9:
         65:db:ab:f7:be:fe:aa:e3:90:67:28:b3:49:87:03:9f:73:a6:
         ef:33:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 18:19:21 2024 by rpki-client on console-fra.rpki-client.org