Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/34352e3136322e3134302e302f32322d3234203d3e20323636393035.roa
File:                     34352e3136322e3134302e302f32322d3234203d3e20323636393035.roa (raw, json)
Hash identifier:          MW5UUFOiM7A3Td60O1n43CfdQ4/4RaCnnlb44CmUoVk=
Subject key identifier:   F0:97:26:71:40:94:4E:85:88:B8:DC:AE:45:8D:75:7C:7A:7B:75:39
Certificate issuer:       /CN=23FD7D3F5EBB7058156B4568BF40261FE4747941
Certificate serial:       4F1102CAB125600E01555D19A49D90929B40A0B2
Authority key identifier: 23:FD:7D:3F:5E:BB:70:58:15:6B:45:68:BF:40:26:1F:E4:74:79:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/34352e3136322e3134302e302f32322d3234203d3e20323636393035.roa
Signing time:             Tue 05 Mar 2024 18:08:48 +0000
ROA not before:           Tue 05 Mar 2024 18:03:48 +0000
ROA not after:            Tue 04 Mar 2025 18:08:48 +0000
asID:                     266905
IP address blocks:        45.162.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.crl
                          rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:11:02:ca:b1:25:60:0e:01:55:5d:19:a4:9d:90:92:9b:40:a0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23FD7D3F5EBB7058156B4568BF40261FE4747941
        Validity
            Not Before: Mar  5 18:03:48 2024 GMT
            Not After : Mar  4 18:08:48 2025 GMT
        Subject: CN=F097267140944E8588B8DCAE458D757C7A7B7539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:f9:12:cf:51:a2:72:08:9c:e2:50:53:38:
                    0a:71:11:46:8c:7d:06:7b:43:f1:fe:d9:63:ba:71:
                    95:d6:db:4c:4d:4e:35:de:5d:51:83:1c:cc:60:87:
                    a9:4e:71:29:83:67:05:2c:4d:e6:9f:5a:73:68:46:
                    7f:16:49:99:ca:80:ec:b5:17:a5:f1:0b:6a:4f:bf:
                    02:ea:9e:1a:92:e4:f9:96:dc:0c:74:3b:43:2c:7a:
                    d4:9c:0b:d8:bf:ab:17:1a:9d:97:e8:9e:9e:d5:48:
                    21:9c:1c:80:f4:bb:68:11:3f:d2:11:53:bd:49:74:
                    5e:13:f1:95:90:ee:9a:15:a3:43:40:3c:f8:02:02:
                    d3:49:8e:21:cb:d0:10:26:ef:08:01:16:fc:3c:61:
                    97:1f:84:67:00:f4:ac:41:94:f7:5a:e2:66:02:60:
                    33:fe:8c:4b:1e:1a:b8:64:a1:c4:fb:4e:ea:7e:d7:
                    b8:f5:c0:b0:54:7f:1e:d7:9a:f0:8b:06:a0:5f:f0:
                    27:ab:a5:ef:b4:dd:41:19:78:e6:d3:89:67:47:06:
                    e4:47:c8:95:60:07:63:7e:ad:26:d6:4d:4e:58:38:
                    7d:dd:82:de:ae:f5:c9:e8:d0:f5:a0:db:98:20:d8:
                    80:8a:0a:72:97:d3:d4:4f:ba:48:da:f1:8e:26:4d:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:97:26:71:40:94:4E:85:88:B8:DC:AE:45:8D:75:7C:7A:7B:75:39
            X509v3 Authority Key Identifier:
                keyid:23:FD:7D:3F:5E:BB:70:58:15:6B:45:68:BF:40:26:1F:E4:74:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/23FD7D3F5EBB7058156B4568BF40261FE4747941.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/271EEA4C6D52873B072B1F4E5C47236BECE72DC84E717572CF8CC896E13E6F53/0/34352e3136322e3134302e302f32322d3234203d3e20323636393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:95:ed:74:77:e1:9f:d1:48:80:53:fc:78:c1:b5:2f:f3:61:
         1e:76:c4:ac:60:b2:a7:a9:c2:d5:b2:f3:c7:1c:63:39:57:bf:
         e4:c3:d0:35:c7:ec:a4:cc:7f:2f:f5:fc:0d:85:5b:20:a1:8e:
         44:26:22:ea:79:81:5e:d9:e3:29:76:aa:3a:b2:c5:47:74:ab:
         43:79:c0:44:2b:d7:8d:dc:9c:e0:bb:0b:2b:ef:9a:35:c7:34:
         7f:49:a8:36:8d:c5:c6:46:5c:49:2a:45:13:9a:9c:3d:e4:6a:
         b8:77:64:7e:af:5f:d4:f9:02:59:f1:6f:95:c2:bc:68:24:01:
         34:1b:a3:58:ca:2f:73:2d:b7:4f:8e:e6:55:92:66:3b:a7:41:
         4d:3e:71:3f:36:87:ee:a0:a3:f1:bf:a5:2c:2e:a2:83:93:ab:
         ab:82:08:10:b4:61:20:19:83:a8:be:63:c1:6a:51:18:7b:1d:
         d9:1c:92:65:34:60:31:d9:26:ce:7e:5e:d7:57:38:47:04:23:
         1b:f3:dc:78:de:55:22:5f:54:79:ed:97:51:bb:17:88:89:58:
         24:24:05:87:ff:c0:c6:2b:82:7b:7c:bb:26:6c:ea:3e:83:38:
         e2:22:9d:16:36:92:a9:80:a0:34:00:f1:b3:c8:c3:c0:5a:94:
         9f:33:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org