Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38382e302f32322d3234203d3e203233303539.roa
File:                     34352e3232372e38382e302f32322d3234203d3e203233303539.roa (raw, json)
Hash identifier:          g+WNvMTOcGdopaHKRBpnrRSGobWwWJ/e/vrU1ygMmho=
Subject key identifier:   0B:D1:D0:5D:31:8D:56:56:7D:0B:52:2F:1E:CB:50:5E:3A:FA:F8:46
Certificate issuer:       /CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
Certificate serial:       6D479DD23EF39DDCFA8915B54AAAA1C4325BDEC4
Authority key identifier: FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38382e302f32322d3234203d3e203233303539.roa
Signing time:             Tue 05 Mar 2024 18:03:11 +0000
ROA not before:           Tue 05 Mar 2024 17:58:11 +0000
ROA not after:            Tue 04 Mar 2025 18:03:11 +0000
asID:                     23059
IP address blocks:        45.227.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:47:9d:d2:3e:f3:9d:dc:fa:89:15:b5:4a:aa:a1:c4:32:5b:de:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB1AE1E14C5A33EDEDE977285C7B107E534504EA
        Validity
            Not Before: Mar  5 17:58:11 2024 GMT
            Not After : Mar  4 18:03:11 2025 GMT
        Subject: CN=0BD1D05D318D56567D0B522F1ECB505E3AFAF846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:46:1f:0f:60:00:ef:ba:22:10:ac:ca:6e:
                    56:3d:cb:93:37:df:77:48:1a:93:1e:89:cb:d1:df:
                    6e:36:fb:b0:55:c1:9f:61:c5:ce:cf:6e:00:1a:e2:
                    3b:0f:5a:31:34:c8:73:a7:31:f4:3e:28:e1:43:ae:
                    eb:fc:01:3a:f3:8e:4b:06:2c:cb:64:e2:79:63:96:
                    b8:32:e1:f1:5b:53:fa:c5:93:8d:18:98:52:04:14:
                    b8:b5:f3:84:f4:7a:8e:2d:d3:b5:c6:a4:3b:9d:cc:
                    5f:6d:ea:5f:a0:37:53:2d:30:7b:90:b5:7b:72:83:
                    e2:99:d6:4b:6e:6e:55:33:ed:3c:30:e8:b6:fe:f6:
                    61:6e:59:08:2a:18:1d:90:e1:b7:ba:1b:44:60:85:
                    1e:33:25:ac:82:43:f3:5e:b7:a4:7e:40:26:44:ad:
                    bd:d0:c3:45:06:f9:fe:bd:ae:4f:27:63:a9:ae:13:
                    ce:9a:d1:f2:d0:35:1f:b8:d1:14:f2:fe:ea:c8:b6:
                    42:3c:b3:80:1c:72:05:75:8a:6e:7f:fb:e5:3a:ad:
                    be:76:8e:d0:a2:a9:9c:a5:78:a6:81:a3:ef:08:c4:
                    a5:ee:43:9c:6e:9c:ef:ae:c7:ac:09:e5:dd:a9:79:
                    d3:f5:61:42:3e:8a:6a:51:35:1f:f3:ff:e7:3f:4e:
                    bb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D1:D0:5D:31:8D:56:56:7D:0B:52:2F:1E:CB:50:5E:3A:FA:F8:46
            X509v3 Authority Key Identifier:
                keyid:FB:1A:E1:E1:4C:5A:33:ED:ED:E9:77:28:5C:7B:10:7E:53:45:04:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB1AE1E14C5A33EDEDE977285C7B107E534504EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2108EF77108CB43EE1F30F5C9C76FBDF27779FCE3E29A842623D82968B3616DB/0/34352e3232372e38382e302f32322d3234203d3e203233303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:26:68:45:40:05:58:72:18:9e:c2:a1:46:a1:8a:66:d5:38:
         97:f0:59:9d:f3:31:34:8d:3a:38:cc:f4:0e:ad:32:69:b5:23:
         b4:b4:fc:7e:11:77:99:d3:cf:07:06:53:07:7e:41:b6:d4:f6:
         b6:34:d3:c8:ac:7d:c6:de:6b:8f:63:85:47:6e:7c:9c:ff:fd:
         eb:3a:e2:f5:a2:c3:96:58:4e:4e:b9:a6:8f:dc:73:21:b8:41:
         2d:a5:f8:63:ce:e0:b2:a4:74:30:1a:da:67:e8:29:8e:84:2e:
         79:5a:e7:dd:ab:65:25:78:31:61:f8:d6:4c:7c:e3:4f:9f:05:
         04:44:fa:4b:35:66:bd:fb:39:5b:fc:a2:aa:e2:e0:ca:4a:f5:
         fa:cd:f4:04:07:ec:57:9e:b8:93:2b:28:d6:85:d5:66:2b:a4:
         d0:9b:b2:80:88:3b:57:52:88:01:c8:1e:06:a0:d7:d4:e3:87:
         d9:29:da:e2:d4:63:ec:ae:24:c5:f8:75:ad:d6:bd:ae:37:f2:
         b1:48:27:d2:bb:ea:c5:4a:6b:9d:c9:2a:fe:c1:99:cd:a6:95:
         52:e8:31:43:39:47:f9:8c:62:16:63:3e:94:a8:08:7d:cb:90:
         16:96:26:2f:4e:ab:d4:52:b1:40:2b:2e:20:88:93:c6:a5:e2:
         8b:15:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org