Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa
File:                     34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa (raw, json)
Hash identifier:          uybq+WVvE77o+bzwNpjy8g8t5ltIw0mnYYIbfY2xg1Q=
Subject key identifier:   DA:77:CF:80:6B:8F:07:A5:BA:34:36:30:63:A4:F7:29:8F:C0:06:4E
Certificate issuer:       /CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
Certificate serial:       41FFDC9CEA005A6E20BD885AA9EA579D0673592E
Authority key identifier: 0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa
Signing time:             Tue 05 Mar 2024 18:03:05 +0000
ROA not before:           Tue 05 Mar 2024 17:58:05 +0000
ROA not after:            Tue 04 Mar 2025 18:03:05 +0000
asID:                     269858
IP address blocks:        45.189.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ff:dc:9c:ea:00:5a:6e:20:bd:88:5a:a9:ea:57:9d:06:73:59:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A97B7D9DBD270A56064B560E32C46A5E2BD857D
        Validity
            Not Before: Mar  5 17:58:05 2024 GMT
            Not After : Mar  4 18:03:05 2025 GMT
        Subject: CN=DA77CF806B8F07A5BA34363063A4F7298FC0064E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:3b:64:01:ab:0f:0d:b2:9b:5a:d4:95:b5:
                    0a:0b:c0:20:7a:b2:2e:90:9f:08:87:10:44:0d:d0:
                    18:54:f8:15:28:ae:ea:cc:d8:80:26:3e:be:73:7f:
                    f4:6a:d7:63:a3:9e:aa:13:a8:eb:83:24:c4:34:02:
                    a9:e1:68:f8:ab:69:a6:35:f8:40:0a:8b:ad:c3:ba:
                    3e:02:68:43:6c:42:59:b2:6f:3a:16:dd:70:a1:3d:
                    4c:bd:ca:90:0e:bc:10:f1:65:43:39:ab:86:d3:79:
                    00:3e:1e:d3:ad:97:0d:0e:68:6f:e3:c1:68:5b:b5:
                    c1:42:3d:75:1e:a5:ea:51:4e:43:1a:5f:b2:b6:5d:
                    fd:f5:a1:d4:e2:da:72:af:14:11:cb:74:27:05:46:
                    23:14:58:bb:ee:99:d3:a1:8c:bf:1f:4f:ef:04:cb:
                    56:76:52:de:c2:67:eb:f6:af:40:33:14:2c:89:0b:
                    85:5d:78:1c:72:f8:7c:dc:88:7c:01:ce:7c:8b:7a:
                    8c:45:12:51:05:5e:c5:ce:92:b1:d1:9b:da:7e:74:
                    14:cd:3f:73:75:cc:97:03:be:40:0f:58:b4:2e:b6:
                    c4:e5:17:af:c0:2c:21:42:3b:ea:6b:68:5f:3d:4e:
                    94:32:81:12:d3:c0:49:5a:7e:a4:c6:40:e6:65:b1:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:77:CF:80:6B:8F:07:A5:BA:34:36:30:63:A4:F7:29:8F:C0:06:4E
            X509v3 Authority Key Identifier:
                keyid:0A:97:B7:D9:DB:D2:70:A5:60:64:B5:60:E3:2C:46:A5:E2:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A97B7D9DBD270A56064B560E32C46A5E2BD857D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228480F18550673CA74042A961D7F570E3E3956AC8EB4AF2BEB1882F376C99E3/0/34352e3138392e3139362e302f32322d3232203d3e20323639383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:7a:72:fe:7b:38:07:40:c9:74:ea:7e:59:ea:ff:7a:1e:5f:
         76:4d:dd:2d:bf:06:7b:8a:ce:09:61:c0:58:0c:d6:ac:41:f7:
         a8:f5:7e:8a:54:16:ea:a9:5f:e6:27:ae:c9:7f:d6:08:bc:10:
         b8:46:a4:47:d8:6e:ae:ea:9a:45:2b:bf:22:49:33:7f:4f:d2:
         43:63:14:ef:b8:f2:bb:53:41:c6:59:97:a0:cb:c2:3e:c1:58:
         39:7b:31:52:bf:ca:5b:ba:64:d1:a1:5c:17:ba:fc:9d:e3:b4:
         2b:7d:69:96:b6:e3:64:7c:b3:17:c8:98:70:80:1c:4b:d5:a8:
         3f:94:02:54:31:a6:8e:ec:10:fa:15:47:ed:96:ef:ba:e2:62:
         0b:db:63:0f:a6:cb:7e:74:68:14:a7:5f:22:5c:37:bc:0b:2a:
         c8:ef:f4:46:db:b2:a6:af:5c:7d:ce:d8:7b:de:07:79:1d:60:
         fd:e6:ef:4a:ca:59:3a:3f:3e:bc:14:df:ca:61:e1:af:be:e0:
         2e:2a:0e:8a:a1:a6:0c:3c:2c:3e:28:bc:8c:7b:16:e8:1d:47:
         30:26:7e:2a:21:de:c6:05:e8:28:1b:20:cd:0d:60:da:c2:65:
         c2:2c:07:a5:68:d8:79:7b:c4:3e:14:8c:82:45:a8:eb:a3:d1:
         f7:12:30:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:43:11 2024 by rpki-client on console-fra.rpki-client.org