Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e34392e302f32342d3234203d3e20323733313439.roa
File:                     34352e36382e34392e302f32342d3234203d3e20323733313439.roa (raw, json)
Hash identifier:          zzkL0ygnG3eg+/yp1UyFG3znIDQOvIho3NCoDLPavkE=
Subject key identifier:   B7:22:4E:BC:E1:68:1E:87:5D:8B:FE:4D:7E:AC:53:DE:3B:00:C9:C1
Certificate issuer:       /CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
Certificate serial:       32ABB3A181948A37C4A0D6F5D57C28A034783A45
Authority key identifier: 70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e34392e302f32342d3234203d3e20323733313439.roa
Signing time:             Tue 05 Mar 2024 18:18:38 +0000
ROA not before:           Tue 05 Mar 2024 18:13:38 +0000
ROA not after:            Tue 04 Mar 2025 18:18:38 +0000
asID:                     273149
IP address blocks:        45.68.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ab:b3:a1:81:94:8a:37:c4:a0:d6:f5:d5:7c:28:a0:34:78:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7039B2C15CFC707C0F3843B1C8341A31CE412765
        Validity
            Not Before: Mar  5 18:13:38 2024 GMT
            Not After : Mar  4 18:18:38 2025 GMT
        Subject: CN=B7224EBCE1681E875D8BFE4D7EAC53DE3B00C9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:63:ef:64:03:fe:11:d9:e0:a6:bb:26:30:
                    f3:59:b6:4c:22:8f:ef:ef:05:81:0c:31:89:a8:99:
                    25:6b:50:b3:51:db:49:15:9e:3d:c4:76:9c:14:a9:
                    48:ee:42:e5:16:3d:7d:2e:41:bb:89:1e:c9:c9:d7:
                    cb:f0:76:36:09:17:2b:84:2a:93:8c:50:07:09:1d:
                    00:5d:55:25:7d:93:bb:5a:67:84:a9:d8:be:0c:5e:
                    30:48:2c:ea:96:44:bf:86:d2:5b:92:4d:2c:b7:96:
                    f4:6c:2e:46:72:8b:77:38:e9:82:7c:74:c0:38:62:
                    8d:e8:ad:c8:d1:87:6a:bd:a7:6d:a7:16:1d:11:53:
                    45:e8:fd:8b:65:12:94:8d:32:b5:38:a0:ca:0e:12:
                    ba:1b:9a:32:f7:23:05:82:c3:86:01:f2:00:8c:c8:
                    de:ab:50:12:a7:e4:c0:8b:2a:01:14:7c:16:83:60:
                    0b:3f:f4:76:75:c7:c0:74:e5:ff:99:8d:fc:a0:2c:
                    c6:7f:fa:27:3e:db:90:ae:4d:21:bd:c8:4c:4c:a3:
                    44:87:f7:0a:9c:c3:3c:83:92:f3:1a:1d:af:d0:bf:
                    3f:e1:67:9d:ce:aa:4b:db:97:47:ca:42:40:07:80:
                    e8:52:ed:52:6e:a0:5b:30:b1:7e:a4:ad:5b:77:5b:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:22:4E:BC:E1:68:1E:87:5D:8B:FE:4D:7E:AC:53:DE:3B:00:C9:C1
            X509v3 Authority Key Identifier:
                keyid:70:39:B2:C1:5C:FC:70:7C:0F:38:43:B1:C8:34:1A:31:CE:41:27:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7039B2C15CFC707C0F3843B1C8341A31CE412765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1118004B9FB26EEEF7D87297DF93257C3291D69E4FEC982212EF47F7F6897659/0/34352e36382e34392e302f32342d3234203d3e20323733313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:9e:87:f4:f4:93:90:fe:ff:39:b1:da:39:07:18:d0:43:
         3b:40:17:6a:4c:36:bd:74:21:ea:2f:fc:d5:12:f5:b9:ef:24:
         ca:02:4d:60:0f:9f:b4:a4:29:f1:6e:2a:58:d1:7e:bd:fc:9e:
         e7:88:f0:60:c3:b7:88:a1:da:58:c7:b3:25:f0:d6:b3:2d:90:
         ff:7f:5e:5d:1e:2d:22:2c:40:fb:15:77:55:82:a6:11:69:ad:
         9d:74:fc:72:e5:3c:fe:92:18:f8:71:68:f9:cf:4b:7d:e8:ea:
         10:bd:3c:0d:7b:92:d8:56:c8:ba:73:6f:93:ba:19:93:66:93:
         4e:48:89:af:74:a6:45:b1:13:71:52:21:be:04:26:d7:12:15:
         d8:4c:9a:e3:0a:0c:c9:e8:e1:08:22:e4:d0:36:f6:d7:68:fe:
         de:4a:a5:96:b2:12:1b:98:78:89:bb:56:36:fd:6a:ac:cf:d2:
         e1:65:f9:2f:d4:b3:91:92:fb:e0:5d:c4:1b:ec:de:92:11:8b:
         7e:8f:ba:14:b1:44:f9:9f:87:9f:6b:fb:a3:bd:1d:9b:23:e2:
         46:a2:cf:a3:81:ab:7d:20:91:73:ac:1b:f7:e0:f9:38:91:9c:
         87:51:a6:33:1c:60:79:4f:62:ec:21:1d:8d:fa:17:91:d9:5f:
         ff:10:a4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org