Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa
File:                     34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa (raw, json)
Hash identifier:          D5LzuaG24SV4k01TH2HorOVc7ub6EwKn5CkK9sR578A=
Subject key identifier:   B2:F7:E2:1B:32:F4:AF:40:33:68:22:D5:01:38:3B:D9:17:07:5A:2C
Certificate issuer:       /CN=389CCF923837EEAFA4DA96AE20241419C941F58A
Certificate serial:       5C57016FA85F89439D2390DE08E0E1BCED4BB5DC
Authority key identifier: 38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa
Signing time:             Tue 05 Mar 2024 18:02:45 +0000
ROA not before:           Tue 05 Mar 2024 17:57:45 +0000
ROA not after:            Tue 04 Mar 2025 18:02:45 +0000
asID:                     267711
IP address blocks:        45.227.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:57:01:6f:a8:5f:89:43:9d:23:90:de:08:e0:e1:bc:ed:4b:b5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389CCF923837EEAFA4DA96AE20241419C941F58A
        Validity
            Not Before: Mar  5 17:57:45 2024 GMT
            Not After : Mar  4 18:02:45 2025 GMT
        Subject: CN=B2F7E21B32F4AF40336822D501383BD917075A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:57:48:e9:0e:6a:41:cb:17:b3:59:15:f4:
                    b0:bf:d8:68:04:64:76:93:00:7b:68:9e:3e:10:3b:
                    8a:0d:a7:dd:a2:19:94:6e:19:98:e9:3d:6a:51:7d:
                    95:1e:3e:ae:22:4a:46:40:11:7e:4c:86:21:1e:5b:
                    3f:04:7c:81:a5:55:aa:fd:21:78:82:ca:56:44:72:
                    b0:5e:46:bc:63:3b:b6:03:45:18:91:84:18:3e:ba:
                    06:93:86:1b:09:8a:9f:40:c3:b8:ac:99:49:b0:44:
                    97:2b:74:6b:8e:27:76:ae:ae:9f:a9:56:71:ad:da:
                    8a:44:15:54:46:3f:46:9b:2f:3d:c2:64:6f:4b:a6:
                    77:94:ec:a1:96:9b:15:e7:89:c9:6d:db:11:52:17:
                    b3:94:5c:5d:9f:e5:39:9b:bd:4d:0f:40:80:fb:28:
                    5e:3b:f3:5d:fe:75:59:c8:81:72:ae:e5:eb:f1:b3:
                    d8:bc:24:f5:2b:47:48:77:43:8e:b0:cc:8d:ff:ce:
                    0a:a4:33:ac:28:6b:cb:19:b4:8e:b7:13:bc:2d:d8:
                    c2:6e:2b:c2:c6:d9:07:2f:0b:d5:21:58:86:f5:bc:
                    b2:90:99:73:3c:74:f7:a9:dd:20:25:fd:ec:3b:18:
                    c1:86:ae:61:20:dd:73:9f:87:af:5a:63:dd:f5:62:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:E2:1B:32:F4:AF:40:33:68:22:D5:01:38:3B:D9:17:07:5A:2C
            X509v3 Authority Key Identifier:
                keyid:38:9C:CF:92:38:37:EE:AF:A4:DA:96:AE:20:24:14:19:C9:41:F5:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/389CCF923837EEAFA4DA96AE20241419C941F58A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/389CCF923837EEAFA4DA96AE20241419C941F58A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2705555D7E121A5D447A5B4F672E3C744074AB2306C4EF18D4D5145A64796BDE/0/34352e3232372e3231362e302f32322d3234203d3e20323637373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:24:ed:e4:8e:2d:12:7f:22:56:d4:94:9e:ff:ae:48:56:a5:
         a3:22:0a:5c:ff:af:26:e8:a7:7f:83:97:b2:b0:33:98:93:5b:
         e6:03:fe:97:06:a6:e7:45:62:55:2f:8c:5d:fe:f1:29:76:15:
         b9:68:1d:d5:b2:46:56:fb:5b:72:39:c7:0e:5d:13:6c:16:b1:
         cb:05:db:50:8e:66:18:02:89:78:e2:5c:9f:5b:0b:e7:5d:a2:
         15:ce:97:4f:dc:f1:a8:47:4c:f3:82:d3:4e:45:4f:18:85:28:
         af:9a:c1:00:0d:9b:bd:03:99:72:c1:50:3d:a9:71:d2:30:b6:
         de:50:23:59:43:29:81:68:ef:f8:56:f9:9b:cc:8a:e3:49:27:
         be:45:6f:17:11:89:42:37:5c:d9:c9:59:1f:f2:1a:4b:dc:8e:
         b2:d2:6f:3e:d5:88:48:79:9d:2d:92:77:ed:80:a3:4d:c2:42:
         dc:3e:50:a8:dc:ad:68:9c:42:27:da:2e:b6:95:2d:6a:cd:69:
         95:57:f9:9b:ca:37:4e:d4:6f:9f:29:19:7f:ed:c2:47:13:47:
         91:2a:1c:fd:24:a4:ab:a6:9b:e9:13:e7:e2:f6:59:dc:e7:a2:
         e7:fb:aa:b4:b5:37:69:67:cb:94:0d:e3:75:91:09:6c:16:77:
         fb:1d:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:14 2024 by rpki-client on console-ams.rpki-client.org