Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323032.roa
File:                     34352e3233322e3131362e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier:          YtGhuv1LyvJ4LYx8BCVRe15QXnmQ943cMLGR0Rh3Xpc=
Subject key identifier:   00:27:E8:1D:B3:5C:73:D8:EE:01:59:DB:BF:A7:53:72:4D:37:65:CE
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       4EE0527621F67F4858FF81CBFC5915EE56E5E2E1
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 18:02:42 +0000
ROA not before:           Tue 05 Mar 2024 17:57:42 +0000
ROA not after:            Tue 04 Mar 2025 18:02:42 +0000
asID:                     202
IP address blocks:        45.232.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Nov 2024 23:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e0:52:76:21:f6:7f:48:58:ff:81:cb:fc:59:15:ee:56:e5:e2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Mar  5 17:57:42 2024 GMT
            Not After : Mar  4 18:02:42 2025 GMT
        Subject: CN=0027E81DB35C73D8EE0159DBBFA753724D3765CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:c2:6e:f2:63:ea:35:e5:7f:57:98:41:27:
                    4f:69:2f:1e:8f:9a:f3:6e:99:69:a7:e8:cb:8c:57:
                    ab:cb:6e:7d:ea:56:d1:c2:e6:92:e0:38:cc:42:55:
                    3d:91:9f:9c:bb:43:7d:11:12:fd:25:30:e8:d8:4e:
                    00:9e:d1:02:6a:79:42:a0:55:63:76:37:bc:c9:ff:
                    05:99:9f:da:33:80:9b:63:9e:64:82:45:16:8b:6f:
                    f4:3b:40:02:07:46:1f:c8:6f:b5:df:45:bf:4c:55:
                    60:07:a1:ef:37:7c:42:a4:bd:c9:f3:6c:67:16:bc:
                    fe:35:c0:6c:5b:e3:21:5f:72:ed:12:04:4f:d7:48:
                    60:0d:8d:f0:be:a9:54:91:5a:af:c8:5c:2e:6e:8d:
                    f1:3d:78:02:1a:46:7b:39:1f:8b:1c:01:ff:b0:9f:
                    0c:36:86:1f:27:d7:97:b8:2e:33:2a:17:6b:27:5e:
                    31:a4:bf:12:55:34:f2:07:28:7d:96:b0:ce:23:10:
                    b1:49:bd:c7:05:1d:dc:4c:d6:d4:59:3c:88:1a:5a:
                    fd:38:15:a0:75:2f:fd:e7:68:2b:d1:9a:5c:ca:51:
                    f6:09:02:18:2f:cd:a9:bf:77:b3:06:00:2d:97:19:
                    8c:5a:4a:b7:f5:31:17:df:5f:c9:4a:2c:d1:e4:85:
                    49:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:27:E8:1D:B3:5C:73:D8:EE:01:59:DB:BF:A7:53:72:4D:37:65:CE
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/34352e3233322e3131362e302f32322d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:be:80:5f:c0:60:c1:09:e6:b5:56:82:fe:ea:f6:8d:26:
         cd:01:72:5b:03:cb:9b:27:f4:bb:64:ff:ca:c6:6d:7e:e9:ef:
         71:db:00:9e:98:d1:0a:36:0b:e8:13:32:79:d2:c1:5f:09:4e:
         95:d7:e5:75:69:ca:f7:b0:c2:6d:2d:44:92:73:14:60:e3:52:
         bf:32:fb:af:46:fa:4a:50:88:10:43:d0:f3:aa:fa:68:84:6d:
         f4:57:e0:b0:3d:3c:3c:0d:cd:44:df:24:c0:f5:70:7e:6b:d1:
         2c:1c:52:c1:4f:5d:79:00:f8:62:4c:ec:92:ff:6b:0e:4d:96:
         f1:fd:ce:e4:ff:18:e1:bd:7b:79:a4:54:cd:39:f3:51:3b:4e:
         ba:cf:eb:00:88:45:ee:e0:7f:bf:fc:20:56:0d:38:d3:61:c6:
         0b:e0:6d:e9:ba:27:6c:20:ae:d1:85:85:7b:b5:52:f9:72:a7:
         8a:eb:b8:a0:17:b2:75:50:2a:09:ac:30:14:7c:4d:21:d7:c7:
         11:51:af:61:d0:f1:db:76:80:55:e5:25:b1:a6:d7:3d:84:82:
         a7:21:da:71:2e:16:44:28:4d:6e:87:57:4c:77:0d:45:d8:47:
         00:0a:de:fe:d8:66:39:19:cc:a8:a8:33:d1:ea:fe:62:d0:32:
         56:08:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:02 2024 by rpki-client on console-ams.rpki-client.org