Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235332e302f32342d3234203d3e20323635353635.roa
File:                     34352e3136372e3235332e302f32342d3234203d3e20323635353635.roa (raw, json)
Hash identifier:          iEKkxPBe0GB4anVA3+/Gb8Fg2ASRtfZotQqwa7QV4po=
Subject key identifier:   FD:C0:FC:6F:2E:03:FE:D2:87:5E:81:08:30:B6:7A:13:D7:6F:34:4C
Certificate issuer:       /CN=CD4D03807099629120DE095935B1E371248DA857
Certificate serial:       117D47BF8E51651A2D95EB01B22B82E9690D0148
Authority key identifier: CD:4D:03:80:70:99:62:91:20:DE:09:59:35:B1:E3:71:24:8D:A8:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD4D03807099629120DE095935B1E371248DA857.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235332e302f32342d3234203d3e20323635353635.roa
Signing time:             Tue 05 Mar 2024 18:01:00 +0000
ROA not before:           Tue 05 Mar 2024 17:56:00 +0000
ROA not after:            Tue 04 Mar 2025 18:01:00 +0000
asID:                     265565
IP address blocks:        45.167.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/CD4D03807099629120DE095935B1E371248DA857.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/CD4D03807099629120DE095935B1E371248DA857.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD4D03807099629120DE095935B1E371248DA857.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7d:47:bf:8e:51:65:1a:2d:95:eb:01:b2:2b:82:e9:69:0d:01:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD4D03807099629120DE095935B1E371248DA857
        Validity
            Not Before: Mar  5 17:56:00 2024 GMT
            Not After : Mar  4 18:01:00 2025 GMT
        Subject: CN=FDC0FC6F2E03FED2875E810830B67A13D76F344C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:53:73:97:af:5d:4e:72:88:67:c3:10:fa:24:
                    74:fa:ee:e2:dc:c4:40:33:36:1c:66:16:0e:2b:10:
                    51:a8:51:b0:a6:d7:ce:56:b2:4e:70:fd:83:9c:92:
                    1e:ce:5c:5a:a8:ab:60:b0:8d:08:4e:9a:d4:9d:77:
                    63:ec:e1:1f:74:06:4c:9d:e0:b9:9b:fd:ba:3b:6b:
                    a5:9d:ee:d9:b1:65:3c:57:3f:9a:de:30:ca:cd:6c:
                    53:0c:fa:91:c3:55:9a:62:c0:74:9f:95:97:88:ea:
                    78:bb:9e:35:a2:1d:1f:bb:64:cc:a3:52:b0:a1:79:
                    7c:cb:40:08:a3:f5:e6:93:9a:fc:8c:7b:f1:eb:3b:
                    c9:7d:a3:23:cc:6c:c1:09:66:8f:f2:a7:5b:a2:05:
                    98:c6:38:fb:ba:84:83:35:b5:d9:69:be:fc:7d:50:
                    4b:9e:e9:fb:5f:c1:f0:dd:35:34:76:87:69:15:35:
                    71:5b:12:66:d3:9d:ae:be:02:c4:98:c5:1f:2b:e2:
                    df:a5:f2:90:a0:55:97:d5:de:61:eb:04:05:12:86:
                    e4:78:9e:5d:73:dd:7e:ac:e2:6c:c9:f2:b6:3a:8b:
                    01:a5:b7:d4:e4:d9:14:ac:f8:ce:80:27:78:83:b0:
                    7d:dc:64:68:85:1f:f3:68:da:fc:9c:ed:8a:00:f9:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C0:FC:6F:2E:03:FE:D2:87:5E:81:08:30:B6:7A:13:D7:6F:34:4C
            X509v3 Authority Key Identifier:
                keyid:CD:4D:03:80:70:99:62:91:20:DE:09:59:35:B1:E3:71:24:8D:A8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/CD4D03807099629120DE095935B1E371248DA857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD4D03807099629120DE095935B1E371248DA857.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B6FC42FB9BC367A07DD63750F53CB0662DB6732F25928DBB1C0336119D1A43/0/34352e3136372e3235332e302f32342d3234203d3e20323635353635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:16:2e:dd:0e:20:fb:9a:9f:7d:ac:ed:b5:3c:e0:4b:bf:c9:
         24:a1:f4:59:18:20:ee:cc:c3:20:92:1a:98:82:d3:5a:a2:ab:
         ac:11:4e:17:6d:1e:11:14:ba:a0:14:e6:19:0e:82:c9:43:3f:
         31:73:68:4b:3d:12:5d:3f:ad:3b:a8:47:d7:0a:1f:5d:89:7a:
         4e:67:a3:75:23:73:aa:c1:65:46:4f:d8:f8:1a:0a:93:9c:2c:
         2c:ce:e4:ab:8a:f8:4a:8b:bf:ae:09:f5:8c:fb:2b:cd:01:11:
         11:88:c0:4e:7a:3f:3f:a1:96:30:d5:92:7c:59:1c:d8:b3:bc:
         de:da:7e:44:93:e7:ca:90:64:55:d5:72:35:4e:26:ad:09:1e:
         6a:28:d5:36:21:4f:00:b1:d0:c4:a1:c5:28:bf:c4:31:ee:f8:
         e9:24:93:21:6a:d3:d6:da:c0:15:08:84:14:fa:d6:e9:02:ba:
         51:2b:da:1b:8d:93:7e:94:48:42:13:49:41:ca:be:a8:42:0e:
         c0:5f:3c:48:84:23:c3:03:3d:25:e2:e3:8c:db:03:4b:b3:fb:
         13:10:ef:fc:78:ae:f2:35:cd:a0:b9:26:ce:60:2d:34:b1:71:
         94:f9:02:6a:fa:9c:34:30:12:e6:8b:61:94:9c:e1:bc:25:fe:
         b0:70:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 10:57:10 2024 by rpki-client on console-ams.rpki-client.org