Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa
File:                     34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa (raw, json)
Hash identifier:          N7aKPlQw0keww9c7voLUZvhrq6dodxsS7QBBT15ydFM=
Subject key identifier:   50:31:3F:A3:98:F5:21:61:15:40:D6:95:B9:D6:72:BE:13:52:E6:F6
Certificate issuer:       /CN=119B7B5F0187CFCFD24CA5A7035670D2F09936C2
Certificate serial:       78DDAFD78D653BDAC746550C40D8EB8B42ABC16C
Authority key identifier: 11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa
Signing time:             Thu 29 Aug 2024 21:45:00 +0000
ROA not before:           Thu 29 Aug 2024 21:40:00 +0000
ROA not after:            Thu 28 Aug 2025 21:45:00 +0000
asID:                     265565
IP address blocks:        45.167.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:dd:af:d7:8d:65:3b:da:c7:46:55:0c:40:d8:eb:8b:42:ab:c1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119B7B5F0187CFCFD24CA5A7035670D2F09936C2
        Validity
            Not Before: Aug 29 21:40:00 2024 GMT
            Not After : Aug 28 21:45:00 2025 GMT
        Subject: CN=50313FA398F521611540D695B9D672BE1352E6F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:27:fd:92:e8:9f:eb:89:65:f1:28:86:4b:
                    34:68:f3:94:d3:85:dd:75:0e:f5:75:3c:b0:81:fd:
                    35:da:10:8d:81:08:84:01:4d:b7:d0:5d:ec:f9:e9:
                    1b:29:3e:95:56:5b:94:f5:00:17:1b:54:45:38:0f:
                    1f:fb:20:95:c0:81:5c:c2:8a:ce:b8:db:e5:16:04:
                    7e:7c:26:23:8f:cc:5a:dc:d5:81:65:5f:73:19:2a:
                    da:eb:49:92:3f:7e:12:79:c1:1e:f0:61:75:b2:04:
                    ea:17:5b:85:01:ce:05:c0:ee:cc:2f:54:0c:77:ce:
                    81:01:92:98:b0:72:3f:1d:78:ea:cc:aa:8b:d9:af:
                    21:d9:4d:b4:74:0b:23:a5:29:fd:2b:17:5f:28:86:
                    90:5d:07:4d:61:32:6a:96:7f:e6:fa:75:f4:b6:da:
                    b8:ac:9b:f8:f4:97:23:07:4b:36:1d:8a:32:ee:13:
                    2e:c5:86:28:c8:74:22:79:80:5e:a8:39:d6:19:81:
                    c3:67:52:bf:e4:f6:40:0a:5b:1c:d1:c1:fc:7d:94:
                    a9:f6:21:3d:14:fe:fb:9d:66:55:9f:fe:d2:d3:cc:
                    e6:57:ed:63:7e:b7:71:17:3d:45:32:94:cc:3b:b9:
                    a0:91:f5:d7:d3:c0:b9:21:43:4b:38:b6:2a:24:79:
                    f3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:31:3F:A3:98:F5:21:61:15:40:D6:95:B9:D6:72:BE:13:52:E6:F6
            X509v3 Authority Key Identifier:
                keyid:11:9B:7B:5F:01:87:CF:CF:D2:4C:A5:A7:03:56:70:D2:F0:99:36:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/119B7B5F0187CFCFD24CA5A7035670D2F09936C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235322e302f32322d3234203d3e20323635353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:8e:56:35:04:19:e6:6b:53:c0:6c:71:1b:d3:7a:00:31:40:
         c5:83:f0:e6:a0:7c:fd:a1:ed:1e:a9:b4:66:a6:72:79:f4:54:
         b1:03:e4:20:aa:88:ae:c5:a1:8d:36:52:70:b3:a3:e0:45:37:
         b8:e1:56:a3:7b:79:20:14:80:b3:2b:29:90:cb:9e:9a:e2:eb:
         74:d7:f3:2d:68:40:19:3b:c7:87:c3:26:c8:91:9c:c0:31:c9:
         c7:70:51:fa:8d:b0:64:4a:81:4e:f2:d2:31:63:0c:33:21:d2:
         a3:00:d6:55:73:a1:03:99:33:e6:05:93:f2:1d:ce:e7:cc:a3:
         e9:3e:be:41:44:ed:5c:55:de:f2:d1:40:72:59:e5:a5:da:1d:
         bc:55:eb:13:f6:c0:76:bf:3d:1b:db:28:b5:fb:6a:14:c7:fc:
         43:2c:44:fe:93:40:a4:ad:10:64:08:db:4e:23:de:d5:c3:af:
         37:11:17:ee:fb:fc:7f:af:78:cf:12:4f:f7:e4:3b:b5:2d:b3:
         19:77:8b:af:63:7a:3e:e3:b7:20:5f:2d:5a:30:c1:c1:f7:45:
         ec:ff:20:a4:14:86:a6:c9:43:fd:03:81:5c:64:15:ed:93:3a:
         ac:f7:73:fe:e0:02:a7:27:99:cc:b6:09:5b:19:37:aa:f0:5b:
         31:d7:0e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 05:32:43 2024 by rpki-client on console-fra.rpki-client.org