Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35352e302f32342d3234203d3e203634313539.roa
File:                     34352e36382e35352e302f32342d3234203d3e203634313539.roa (raw, json)
Hash identifier:          4Krpvb3DWj0RQs8RraZD5s3vPOR+Az3PpmA6VU/7CjY=
Subject key identifier:   75:3F:D8:BE:13:4B:B0:1C:76:EA:56:3D:5C:12:B7:06:14:3A:94:C1
Certificate issuer:       /CN=F4F8147BF99626D17AFEE91E12422301459D2C55
Certificate serial:       6CD73711DFD967F49E2D92A9B8724D68060F43D0
Authority key identifier: F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35352e302f32342d3234203d3e203634313539.roa
Signing time:             Fri 07 Jun 2024 12:45:00 +0000
ROA not before:           Fri 07 Jun 2024 12:40:00 +0000
ROA not after:            Fri 06 Jun 2025 12:45:00 +0000
asID:                     64159
IP address blocks:        45.68.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d7:37:11:df:d9:67:f4:9e:2d:92:a9:b8:72:4d:68:06:0f:43:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4F8147BF99626D17AFEE91E12422301459D2C55
        Validity
            Not Before: Jun  7 12:40:00 2024 GMT
            Not After : Jun  6 12:45:00 2025 GMT
        Subject: CN=753FD8BE134BB01C76EA563D5C12B706143A94C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:6c:79:a0:49:34:ed:6a:81:bf:1b:f9:b8:
                    22:bd:0d:85:fc:38:51:d4:9a:09:22:f8:fe:1c:5e:
                    09:a3:f6:51:3e:9f:10:40:91:5e:55:27:aa:11:c3:
                    5f:ab:7f:bc:30:f9:a1:60:50:e9:16:e2:0f:bc:42:
                    bd:39:ce:55:ed:22:00:a8:42:0b:d8:7a:18:f7:fe:
                    b1:59:fc:5e:b9:5d:13:40:9d:79:66:b4:4e:db:fc:
                    9e:c3:2b:a3:dd:4a:42:45:da:c9:77:57:46:1b:d1:
                    cb:a6:48:cc:4c:3f:0f:a4:c5:51:50:31:a9:f4:50:
                    52:72:43:6d:2a:3a:be:ca:37:6e:4d:4f:9d:9f:f5:
                    83:7d:bd:fd:fc:1c:bb:e1:4d:04:71:37:1a:e6:04:
                    ba:05:19:9a:d2:d4:44:bb:e0:a5:34:cf:86:2e:56:
                    ea:de:db:58:85:38:6b:9d:d1:3f:f3:e3:31:96:08:
                    fc:9f:99:ae:90:98:4a:7e:96:17:f4:85:fb:51:e2:
                    2e:13:ae:49:80:7d:c5:3e:8c:f1:32:5e:71:e5:ba:
                    72:49:fe:99:c3:94:f5:2f:5e:87:b8:18:95:ad:9a:
                    3a:3c:9c:91:87:a6:a4:95:71:4b:02:75:cc:c1:8d:
                    21:ca:39:5d:ea:67:51:e2:c7:70:13:04:a3:b2:dc:
                    13:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3F:D8:BE:13:4B:B0:1C:76:EA:56:3D:5C:12:B7:06:14:3A:94:C1
            X509v3 Authority Key Identifier:
                keyid:F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/34352e36382e35352e302f32342d3234203d3e203634313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:70:c7:2f:2f:9a:63:0a:ae:96:8f:c5:a9:2d:04:e4:7a:83:
         06:8b:c7:be:77:52:6b:10:71:2b:5b:9f:85:cf:21:98:97:1d:
         45:8c:14:e3:90:f2:bb:dd:64:fe:b6:d5:2f:54:96:37:7b:c4:
         04:e4:06:6e:1d:34:60:36:25:f1:f5:18:08:22:cc:e8:c4:c0:
         0c:da:e3:cd:c5:74:82:f2:d3:03:11:26:13:2f:aa:c1:01:b2:
         e7:7d:d4:ea:aa:b1:bf:d4:53:6f:2b:a0:d2:2f:c9:4c:05:2f:
         54:60:37:78:da:80:ee:be:7f:92:85:fd:c4:25:ea:81:09:f9:
         d1:3f:99:2c:0e:b2:a1:57:8d:57:ba:32:05:08:a5:00:3f:7b:
         8d:31:de:41:41:60:b1:8c:bf:14:76:16:65:48:da:fc:9a:3a:
         ac:e0:84:84:43:7a:0a:c6:76:28:3e:dd:35:55:61:fe:0c:41:
         de:20:01:5e:5b:17:b4:99:58:27:e1:3b:52:90:f9:c4:91:da:
         4b:5e:fb:b6:42:12:b7:17:92:63:48:4f:bb:2c:26:d3:99:28:
         10:c6:78:53:b4:87:53:cd:14:6d:ba:3b:8a:c9:79:7b:5e:12:
         01:12:89:60:1b:2b:69:cf:27:43:61:67:7c:14:4e:e8:55:e0:
         03:34:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org