Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131342e302f32342d3234203d3e203237393437.roa
File:                     34352e37312e3131342e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          ItJg2aiUFQo7EvPCvr9TZ9bYFeAX+FetLVKqYQ0jn+o=
Subject key identifier:   59:6D:EE:B3:36:28:9F:14:8A:D3:34:CA:38:72:5F:26:DB:42:62:43
Certificate issuer:       /CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
Certificate serial:       166FBF9650AB47FB83AC39E7A0DE7735E89739FE
Authority key identifier: BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131342e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 17:49:55 +0000
ROA not before:           Tue 05 Mar 2024 17:44:55 +0000
ROA not after:            Tue 04 Mar 2025 17:49:55 +0000
asID:                     27947
IP address blocks:        45.71.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6f:bf:96:50:ab:47:fb:83:ac:39:e7:a0:de:77:35:e8:97:39:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6522E3C11015B5E5613800EF79B4EAC428C2BA
        Validity
            Not Before: Mar  5 17:44:55 2024 GMT
            Not After : Mar  4 17:49:55 2025 GMT
        Subject: CN=596DEEB336289F148AD334CA38725F26DB426243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:67:72:ad:e9:f5:e9:af:31:ed:21:f8:5f:c1:
                    76:0a:a2:51:4d:a7:29:cc:06:3b:d9:25:c7:97:2d:
                    4e:c1:68:ff:94:af:08:a4:16:46:cb:1a:a1:af:7c:
                    90:45:4e:c3:f7:cb:9b:02:16:83:a2:54:b8:9f:a6:
                    24:6d:74:69:e2:76:fa:19:fb:94:aa:e6:f6:f6:ed:
                    e3:2a:c9:4a:61:93:5b:9d:ad:a5:5f:55:71:27:87:
                    36:ec:c3:11:b6:9b:e7:7a:39:1e:8b:76:1d:5b:44:
                    90:bb:fb:7d:cc:57:3a:f0:ac:f8:58:57:a7:f6:ac:
                    05:fe:66:22:cc:44:c7:05:44:91:0b:59:ec:6a:16:
                    d9:60:2a:48:b9:87:b1:c3:fa:25:2b:9c:e3:47:b9:
                    3a:cc:ee:93:3d:16:2b:4d:d3:e5:aa:a1:59:c1:ce:
                    db:36:3d:12:8e:71:9d:1c:1a:2a:c6:2c:d7:aa:70:
                    e3:30:c2:5a:52:bd:62:bc:fc:ad:07:2f:c5:f0:3b:
                    69:1a:77:de:5a:55:0e:c9:ae:20:fc:50:12:dc:15:
                    5c:72:e7:2a:9d:3e:0d:70:84:0a:16:42:d2:40:8e:
                    27:37:65:0d:df:b9:cb:f9:be:09:9e:2c:74:20:5c:
                    6a:4e:1a:35:d8:8e:4d:eb:5b:33:12:96:4e:3e:a5:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6D:EE:B3:36:28:9F:14:8A:D3:34:CA:38:72:5F:26:DB:42:62:43
            X509v3 Authority Key Identifier:
                keyid:BC:65:22:E3:C1:10:15:B5:E5:61:38:00:EF:79:B4:EA:C4:28:C2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC6522E3C11015B5E5613800EF79B4EAC428C2BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/114524E86CBEDB1BBBA6B5568E97599EC02601B8263BBE3C6132E9D787321E00/0/34352e37312e3131342e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:52:39:99:f7:8a:b9:59:5a:1e:f7:40:ef:60:c6:8b:2a:d3:
         72:0f:37:bb:de:03:d4:44:ac:42:12:97:46:3e:31:66:3b:d9:
         bd:8e:38:3d:2b:08:f0:ce:c9:20:b7:98:14:e1:38:7a:20:eb:
         96:1d:2d:bd:b5:3f:de:48:d5:83:c3:fe:36:3f:d2:b4:ac:75:
         46:af:29:02:c8:44:d4:41:6c:3a:da:53:2a:c3:3a:56:08:af:
         80:d5:cc:d8:80:b0:e4:9e:0e:78:a9:54:05:be:a7:1f:66:79:
         33:9a:2f:6c:9f:c0:01:58:ab:ad:cf:3f:b9:af:6a:89:81:9f:
         1f:73:34:62:60:fd:c0:73:ab:87:79:07:54:f7:2c:fd:03:f7:
         b9:93:eb:02:0d:5d:2d:cb:14:6c:70:86:9e:75:a6:46:1e:71:
         b2:97:b1:92:dd:a3:6d:4c:51:eb:8b:23:a4:0c:8b:72:c5:09:
         d4:01:a3:79:3b:ac:48:0c:34:26:89:d7:a1:63:83:28:0c:63:
         fa:89:cf:c4:dd:3f:c4:f7:9f:90:b5:05:92:ed:40:4b:61:e3:
         89:d4:c0:d7:58:5d:d7:3f:c0:a1:1c:66:77:c7:b0:9b:cd:f1:
         d0:a5:43:f9:c9:fc:a2:ac:64:e7:0b:ab:2c:a5:05:36:3c:3d:
         1c:18:f4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:07 2024 by rpki-client on console-fra.rpki-client.org