Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/34352e3232352e3230342e302f32322d3234203d3e20323635383538.roa
File:                     34352e3232352e3230342e302f32322d3234203d3e20323635383538.roa (raw, json)
Hash identifier:          YB0DpOuYVrCINuTmq1ONKHifqFU1aqTlJ5jBO+xSsMI=
Subject key identifier:   53:07:02:40:1C:90:7E:78:58:76:0E:1A:77:C7:D0:14:6C:27:03:99
Certificate issuer:       /CN=9ABC96F3F41D57A6A6056243ECD365FDC7178290
Certificate serial:       7DADA34942BBB76B79B4996EE77C772329178757
Authority key identifier: 9A:BC:96:F3:F4:1D:57:A6:A6:05:62:43:EC:D3:65:FD:C7:17:82:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/34352e3232352e3230342e302f32322d3234203d3e20323635383538.roa
Signing time:             Tue 05 Mar 2024 17:55:24 +0000
ROA not before:           Tue 05 Mar 2024 17:50:24 +0000
ROA not after:            Tue 04 Mar 2025 17:55:24 +0000
asID:                     265858
IP address blocks:        45.225.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.crl
                          rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Oct 2024 19:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ad:a3:49:42:bb:b7:6b:79:b4:99:6e:e7:7c:77:23:29:17:87:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ABC96F3F41D57A6A6056243ECD365FDC7178290
        Validity
            Not Before: Mar  5 17:50:24 2024 GMT
            Not After : Mar  4 17:55:24 2025 GMT
        Subject: CN=530702401C907E7858760E1A77C7D0146C270399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:9e:80:73:be:35:d9:a4:3c:2b:af:ad:ea:
                    b7:60:e0:c9:55:2a:e9:cd:2f:c4:c5:7b:6f:d5:fd:
                    19:7c:2f:ec:ce:51:62:26:20:1a:cf:b7:c2:ac:86:
                    f9:38:14:6a:bd:0e:a0:e6:de:18:d0:ad:b5:6b:2c:
                    6a:ed:08:ad:c2:08:bb:2b:3a:9d:82:39:01:aa:51:
                    13:c4:b6:2c:8f:03:ea:dd:cc:86:87:30:1d:16:16:
                    9e:72:4c:be:64:1d:46:36:8c:e6:f7:ee:74:05:49:
                    a2:49:b4:41:2e:2b:3d:c4:91:fa:48:0b:a5:a2:5e:
                    79:ac:cb:bb:89:10:b1:7f:de:15:9f:1b:dd:49:c0:
                    bd:1f:d6:d0:a7:4f:29:ba:73:15:49:ab:e2:09:fd:
                    49:19:a4:77:8c:b6:75:f1:27:83:d4:24:36:f2:52:
                    61:9b:03:f5:3b:ce:47:6c:65:8a:04:97:c4:53:89:
                    01:33:09:ac:19:c6:48:06:6d:f6:18:fb:f4:3a:62:
                    82:eb:3a:7d:98:57:18:67:82:59:51:6b:b6:69:92:
                    16:c8:14:14:37:20:8e:59:0f:7c:47:df:53:d5:66:
                    44:dc:ae:9a:d5:07:d7:8c:69:b8:65:cb:1d:4f:5e:
                    27:d4:18:38:6d:2f:b9:2b:39:8b:3b:dc:2c:02:46:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:07:02:40:1C:90:7E:78:58:76:0E:1A:77:C7:D0:14:6C:27:03:99
            X509v3 Authority Key Identifier:
                keyid:9A:BC:96:F3:F4:1D:57:A6:A6:05:62:43:EC:D3:65:FD:C7:17:82:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9ABC96F3F41D57A6A6056243ECD365FDC7178290.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/14AA0996E6B19491EAA087F0C99449EAA6ED192E354D6342EB8B6A50618B374B/0/34352e3232352e3230342e302f32322d3234203d3e20323635383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:ef:f7:be:1a:84:4d:4d:03:a4:69:50:80:8f:07:9e:54:
         54:97:a6:34:64:70:73:b1:ad:49:46:05:04:1a:94:aa:c4:53:
         e2:97:0c:f3:7e:6f:8e:37:51:72:0d:68:ec:80:9a:8b:d1:7a:
         a5:a2:0a:fc:6c:14:ec:17:91:39:0e:46:0b:62:c0:06:fc:28:
         46:c6:c6:bd:44:98:7b:d6:ba:ae:16:1c:92:0f:17:54:43:87:
         a8:df:de:4b:10:bd:da:71:1e:f3:ff:48:c4:eb:d5:bf:ed:09:
         e3:a9:7c:38:cb:13:0d:80:31:00:c0:b9:27:8e:dd:77:0d:60:
         a4:72:83:7c:25:5f:84:03:80:11:2f:4b:97:d9:4e:d7:e5:29:
         c3:dd:4d:68:11:fc:eb:39:e7:e4:44:56:5c:26:17:0b:08:58:
         ab:a5:dc:92:76:dc:c9:4b:cc:68:e6:ba:d8:b0:66:5a:a7:72:
         b7:c3:a4:79:6e:62:dd:76:47:0d:b8:73:79:80:29:1f:a2:78:
         fb:79:96:f1:30:6d:cb:96:68:28:9d:73:6d:93:b3:b0:ff:3f:
         06:e9:a7:0d:04:2a:28:6a:b4:16:99:56:9f:38:81:eb:88:ff:
         d3:b7:54:7f:36:61:c7:df:d4:92:ad:d4:f8:6b:67:43:12:07:
         58:8b:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 20:25:51 2024 by rpki-client on console-fra.rpki-client.org