Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36352e302f32342d3234203d3e20323730313433.roa
File:                     34352e372e36352e302f32342d3234203d3e20323730313433.roa (raw, json)
Hash identifier:          fFqGQo4BBjyicCU8VToKkhRnbGSR7coKQct6gBWrZoE=
Subject key identifier:   6D:49:A7:3C:BA:19:FF:BF:2A:39:98:6E:CF:CA:FB:09:55:16:F6:C6
Certificate issuer:       /CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
Certificate serial:       796F208BA6268ACFC021A4BA6DDF5BD2C816B08E
Authority key identifier: 3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36352e302f32342d3234203d3e20323730313433.roa
Signing time:             Tue 05 Mar 2024 18:05:03 +0000
ROA not before:           Tue 05 Mar 2024 18:00:03 +0000
ROA not after:            Tue 04 Mar 2025 18:05:03 +0000
asID:                     270143
IP address blocks:        45.7.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6f:20:8b:a6:26:8a:cf:c0:21:a4:ba:6d:df:5b:d2:c8:16:b0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C
        Validity
            Not Before: Mar  5 18:00:03 2024 GMT
            Not After : Mar  4 18:05:03 2025 GMT
        Subject: CN=6D49A73CBA19FFBF2A39986ECFCAFB095516F6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:e4:d3:4e:32:6e:e0:8b:48:6f:52:c5:f7:
                    ba:5a:bc:ba:78:bd:88:da:2d:84:ee:7e:6c:fb:d2:
                    b4:7f:1c:fa:e2:ee:88:4a:bc:40:34:4d:12:1e:b9:
                    c1:8b:c0:b5:67:e6:40:56:87:57:1d:2b:5d:d8:7a:
                    9e:6b:b2:9b:f7:a2:eb:a2:c6:86:18:70:37:69:ea:
                    da:e3:6a:6d:b2:3c:53:23:cf:c5:00:50:e3:ae:7f:
                    4f:99:78:c6:48:27:a8:b7:d8:a5:e2:90:81:4d:40:
                    f3:4f:22:93:20:ba:40:29:8e:0f:b9:b9:31:6a:11:
                    ca:fb:ce:fb:ef:4a:0e:bd:8f:2d:00:a0:84:43:25:
                    1d:a9:f5:44:3c:7f:40:7b:b8:7e:5c:57:89:1a:0f:
                    7b:59:32:ee:9d:80:74:7c:ed:01:c8:1f:a1:5b:57:
                    9b:6b:df:70:62:65:5a:19:db:8e:1a:ac:68:d0:19:
                    7d:08:7a:59:f8:17:04:1a:bc:cf:aa:6e:03:6b:4f:
                    c7:f5:c2:ad:8e:94:cf:39:2e:a2:3e:5a:68:b6:fc:
                    b6:dc:c8:7c:e0:c4:a2:97:20:76:33:58:b7:f5:ac:
                    0e:e7:3f:14:7c:60:b4:dc:00:81:41:1d:62:3e:1f:
                    2b:f6:87:83:38:26:bd:d6:e2:fa:ac:c8:e6:34:a0:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:49:A7:3C:BA:19:FF:BF:2A:39:98:6E:CF:CA:FB:09:55:16:F6:C6
            X509v3 Authority Key Identifier:
                keyid:3B:7F:BA:3E:1D:F8:AD:69:1D:B7:55:37:2D:73:1D:FA:B6:E0:CD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B7FBA3E1DF8AD691DB755372D731DFAB6E0CD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FC9C142275D6E11A0ED9B4FAADDBB8C2A7D3F1C46D75320A7251C71996187F1/0/34352e372e36352e302f32342d3234203d3e20323730313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:6b:c5:17:89:73:20:e4:bc:65:61:c2:32:62:ca:68:33:ae:
         7c:97:9b:27:60:90:d6:1c:84:8e:bc:85:9d:ee:fe:bc:46:b6:
         12:c2:fd:24:16:72:f7:65:b0:e4:4f:37:b3:95:71:41:9b:3c:
         49:d2:9f:71:5d:88:ec:f2:ce:0f:9a:d9:b3:f5:68:2e:1b:5c:
         87:05:20:89:bb:c8:f6:c6:06:e7:a0:27:a2:3e:a9:87:f0:ec:
         0d:57:a5:84:51:33:bf:db:77:65:5f:a4:44:8c:af:b7:89:25:
         be:c1:01:6e:6b:42:1e:5d:e8:86:60:05:06:c4:61:2c:86:1f:
         ca:d7:57:d5:76:8b:ad:11:cf:fd:fd:69:37:d6:70:60:26:a3:
         2c:10:24:a4:16:4b:2c:1f:69:97:9d:f7:1a:1a:8e:d5:13:6e:
         d1:0e:59:06:fb:57:7f:86:4c:d9:13:70:c7:1b:86:2a:78:1a:
         b1:44:a0:57:c3:6c:ce:66:25:a2:cc:76:7b:9d:d3:70:81:eb:
         e2:38:ae:0a:c2:4e:fb:77:8d:10:24:74:68:83:15:b6:8b:5e:
         dd:71:79:f5:37:eb:fc:ef:1a:e2:9f:84:d3:74:ba:62:ab:19:
         9d:0e:5b:86:ca:ff:10:41:ae:fa:77:62:0a:e1:77:97:66:e6:
         fb:d7:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:11 2024 by rpki-client on console-ams.rpki-client.org