Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31332e302f32342d3234203d3e20323636383337.roa
File:                     34352e3233382e31332e302f32342d3234203d3e20323636383337.roa (raw, json)
Hash identifier:          TweF547cK5kyXGGllFG6TgNJS/zTO+zo/byH9dKqEag=
Subject key identifier:   46:D1:12:AE:5F:BB:82:23:5F:2D:54:F6:7C:66:F5:AD:E3:15:99:E2
Certificate issuer:       /CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
Certificate serial:       08407CFC50FCA180E0B2689E268C0FE8D46D7E24
Authority key identifier: 3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31332e302f32342d3234203d3e20323636383337.roa
Signing time:             Wed 21 Aug 2024 21:05:00 +0000
ROA not before:           Wed 21 Aug 2024 21:00:00 +0000
ROA not after:            Wed 20 Aug 2025 21:05:00 +0000
asID:                     266837
IP address blocks:        45.238.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:40:7c:fc:50:fc:a1:80:e0:b2:68:9e:26:8c:0f:e8:d4:6d:7e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B
        Validity
            Not Before: Aug 21 21:00:00 2024 GMT
            Not After : Aug 20 21:05:00 2025 GMT
        Subject: CN=46D112AE5FBB82235F2D54F67C66F5ADE31599E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:da:1c:55:4f:1a:c4:cd:17:69:9f:69:07:
                    5d:b6:87:b6:11:6a:77:be:2d:05:df:12:06:73:23:
                    79:e9:46:87:4a:1f:17:60:d9:fb:75:5e:2e:03:4b:
                    5b:b7:da:08:cd:d0:c9:0a:ff:a4:3a:fd:0c:d1:e7:
                    12:61:0b:fc:8a:f4:3a:af:35:3c:a1:df:6b:19:2b:
                    35:cb:88:ce:d5:99:28:33:c3:bc:2d:1c:ff:76:00:
                    be:df:2a:01:fd:2c:1c:99:b2:ad:04:d0:82:ac:23:
                    93:fa:87:2e:c6:d2:cf:a0:fd:46:d1:c8:f7:2f:f4:
                    d8:a9:38:35:cb:77:2a:53:c4:bf:e5:cc:b1:57:c4:
                    69:c7:cd:06:82:56:86:fc:77:1b:f8:3d:fc:5f:c7:
                    c8:99:be:e0:03:c5:77:c6:fe:3d:fd:0f:3a:64:99:
                    eb:2f:58:46:a0:de:4d:0a:03:8c:a5:48:0e:f2:8d:
                    56:d5:d8:9e:bc:d3:0c:a0:d6:27:2e:34:22:3a:3b:
                    af:bc:63:63:bb:c0:62:b3:fc:ef:4e:23:ec:68:46:
                    a3:ca:a0:e6:53:4f:fc:0f:1c:17:23:5b:92:80:fd:
                    32:3f:63:e2:6d:26:b1:f4:1c:96:30:8f:9c:ad:21:
                    f1:c1:c7:77:24:73:26:8f:8d:4d:39:db:20:cb:15:
                    c7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D1:12:AE:5F:BB:82:23:5F:2D:54:F6:7C:66:F5:AD:E3:15:99:E2
            X509v3 Authority Key Identifier:
                keyid:3A:2C:3D:E3:9D:ED:BA:52:25:EA:7F:EB:C2:89:33:12:0A:B9:36:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2C3DE39DEDBA5225EA7FEBC28933120AB9361B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23F08232BF502194E3A2E4011DB483DD7BF48C846574180F4EEB517EA9183F30/0/34352e3233382e31332e302f32342d3234203d3e20323636383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:cd:f9:00:57:ff:f7:2b:1b:d2:04:d0:bb:bd:81:ba:ab:
         e7:d1:3e:7f:3e:63:88:da:bb:70:1b:4f:b9:b5:f9:5e:25:c0:
         53:16:ac:00:12:13:1d:b3:1a:e9:55:a9:b8:24:d2:34:3d:ee:
         df:7b:23:df:2a:c8:ea:c8:cd:fa:91:e5:0b:3e:90:e9:56:38:
         ce:61:c1:16:c4:ba:65:73:25:bb:55:5e:98:9c:35:a2:62:86:
         4f:35:67:e2:1f:da:bd:0e:46:3c:aa:0c:35:33:9b:a0:cf:af:
         38:57:95:bd:d5:0d:e2:59:ae:94:6d:8b:7f:e5:2b:5c:27:9e:
         63:ad:f3:99:2c:6d:65:85:f1:29:16:8d:2c:0c:70:2f:6f:d8:
         9e:75:4b:09:bb:20:1e:23:d6:6a:62:e3:76:7d:6a:01:e6:6c:
         1c:75:7b:cf:3e:51:d2:2b:89:94:4f:9d:0d:a9:64:41:19:71:
         21:ee:b2:c7:cd:51:20:57:ce:72:8d:ef:a1:75:46:ea:f7:3c:
         e4:c1:44:d6:0a:c0:24:4d:f0:de:34:9d:3f:56:12:3a:84:df:
         9b:ef:d5:f2:0b:46:71:bb:00:f0:be:06:2e:c7:5e:c3:8f:ff:
         7c:19:ef:58:6a:d1:78:02:b0:2f:6d:84:35:1a:64:ad:c3:2c:
         76:53:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org