Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e34382e302f32322d3234203d3e20323733313439.roa
File:                     34352e36382e34382e302f32322d3234203d3e20323733313439.roa (raw, json)
Hash identifier:          vHFiGlW0jxDQ/KTF1DZyBkt/rXTg2fHt2PfMgnuEMjM=
Subject key identifier:   6D:02:9F:CB:59:EC:E4:51:7A:B4:DE:DF:4E:4F:FA:77:7F:D8:FE:EE
Certificate issuer:       /CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
Certificate serial:       35A2EB8F365D479EAF5A63CA3DDC8844E331783D
Authority key identifier: 70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e34382e302f32322d3234203d3e20323733313439.roa
Signing time:             Tue 05 Mar 2024 18:18:37 +0000
ROA not before:           Tue 05 Mar 2024 18:13:37 +0000
ROA not after:            Tue 04 Mar 2025 18:18:37 +0000
asID:                     273149
IP address blocks:        45.68.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:eb:8f:36:5d:47:9e:af:5a:63:ca:3d:dc:88:44:e3:31:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
        Validity
            Not Before: Mar  5 18:13:37 2024 GMT
            Not After : Mar  4 18:18:37 2025 GMT
        Subject: CN=6D029FCB59ECE4517AB4DEDF4E4FFA777FD8FEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:49:2e:22:49:cf:d6:e1:eb:27:37:0f:b4:
                    e7:57:d1:06:d9:e5:46:57:a0:80:ec:14:4a:70:90:
                    ed:15:63:c5:7f:b2:01:37:40:dc:a5:55:e7:31:15:
                    ca:9f:dd:60:ec:a9:52:34:2b:92:32:93:34:ad:9b:
                    10:19:1a:2f:2a:13:e1:64:f7:41:93:c9:de:b9:2d:
                    c9:44:d5:79:0b:b7:5b:70:80:c9:5f:0c:9e:76:4b:
                    23:2e:83:be:80:06:cf:fa:65:e3:89:4d:1f:20:56:
                    34:3c:29:d5:eb:ba:cb:16:dc:6a:2a:fe:12:00:d2:
                    d3:08:ef:df:30:13:8b:3d:dc:2e:b9:55:c9:05:8c:
                    5b:ed:3d:ad:e3:b1:b4:1a:d3:63:5f:17:17:4a:bb:
                    ea:a2:bc:4d:68:10:e3:c2:03:be:84:88:2b:36:d3:
                    3c:82:d7:93:72:75:53:2d:1e:13:7c:d4:cf:f8:42:
                    78:6c:a4:ec:fc:36:db:01:bd:c8:ad:e8:3d:c5:ad:
                    e9:98:79:54:08:00:a9:69:6d:6d:f3:d8:9f:38:33:
                    26:14:b8:fd:6a:c0:ad:a2:bf:36:41:03:77:98:6e:
                    9f:71:22:83:af:47:66:ea:e9:6c:19:3a:98:1e:80:
                    30:78:9b:9b:0d:89:17:ce:40:57:ef:dd:c7:f2:ff:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:9F:CB:59:EC:E4:51:7A:B4:DE:DF:4E:4F:FA:77:7F:D8:FE:EE
            X509v3 Authority Key Identifier:
                keyid:70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e34382e302f32322d3234203d3e20323733313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:5f:0b:cf:95:5d:a8:fb:69:16:b5:e8:96:4f:7d:d5:d1:34:
         41:bb:0b:d7:0a:d9:13:f6:5c:87:61:e2:58:ba:58:d7:23:00:
         7f:b1:89:54:3b:de:80:4b:56:d4:45:90:cb:44:07:a7:c1:a1:
         d0:4a:f7:3e:55:44:87:09:86:7e:45:14:b8:03:c7:d9:27:f5:
         18:d9:93:86:51:4a:9a:74:83:63:3d:b3:2c:76:46:c1:17:ae:
         25:fd:cc:92:54:e8:ec:37:d2:b0:0c:02:9a:78:c0:a0:b5:1d:
         0d:4b:c5:e9:5d:49:d1:a3:8b:ec:d6:a6:5e:15:d1:e2:0e:b2:
         11:a2:6e:d7:05:25:77:e5:d7:d4:72:1d:75:1a:ee:8c:b5:58:
         de:0f:25:a9:bc:66:10:53:2e:0e:f9:aa:8e:55:a3:c1:23:c0:
         4e:50:7f:0b:c6:df:f7:fd:f0:14:48:0c:c3:cd:ea:ef:5e:3f:
         9f:e3:be:c9:23:8f:b2:df:48:c5:9c:0e:58:da:01:45:23:50:
         95:0f:73:47:99:40:0f:80:27:c1:91:f5:ce:7d:aa:1f:04:5f:
         78:cf:e0:96:24:87:75:68:c0:14:0f:d3:bc:a1:57:f5:c5:38:
         d5:17:f0:75:ca:07:7c:2b:87:aa:f1:75:f8:a3:93:32:96:7a:
         24:6c:60:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org