Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/34352e372e39362e302f32322d3234203d3e203230323037.roa
File:                     34352e372e39362e302f32322d3234203d3e203230323037.roa (raw, json)
Hash identifier:          84hMFW43CFM0Yry0SW33pAIsebHkG4MMXAVe4vprkzE=
Subject key identifier:   7F:2B:DE:3B:C1:05:F6:2D:D2:BA:96:F8:9E:DE:10:49:90:E1:CC:76
Certificate issuer:       /CN=C2F520684E5695147DFD40A812A269883EC7E43C
Certificate serial:       2F6D5E5256491EE6D33EE6CC0B37183C411347D3
Authority key identifier: C2:F5:20:68:4E:56:95:14:7D:FD:40:A8:12:A2:69:88:3E:C7:E4:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2F520684E5695147DFD40A812A269883EC7E43C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/34352e372e39362e302f32322d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 17:41:11 +0000
ROA not before:           Tue 05 Mar 2024 17:36:11 +0000
ROA not after:            Tue 04 Mar 2025 17:41:11 +0000
asID:                     20207
IP address blocks:        45.7.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/C2F520684E5695147DFD40A812A269883EC7E43C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/C2F520684E5695147DFD40A812A269883EC7E43C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2F520684E5695147DFD40A812A269883EC7E43C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6d:5e:52:56:49:1e:e6:d3:3e:e6:cc:0b:37:18:3c:41:13:47:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2F520684E5695147DFD40A812A269883EC7E43C
        Validity
            Not Before: Mar  5 17:36:11 2024 GMT
            Not After : Mar  4 17:41:11 2025 GMT
        Subject: CN=7F2BDE3BC105F62DD2BA96F89EDE104990E1CC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:21:d7:c5:90:05:7e:cf:99:6f:d0:ce:7e:
                    96:ea:3e:58:ee:f4:d9:94:3c:b9:f4:89:aa:bc:d5:
                    30:93:01:e2:d4:55:38:95:2e:82:fa:31:84:ef:c7:
                    30:dd:4d:9f:ed:3f:4e:d0:3b:9a:b6:ba:86:6e:2a:
                    71:9f:f7:f5:94:a5:2c:d2:61:76:4f:65:d3:b2:00:
                    4f:57:a7:b8:8e:13:97:09:04:98:fc:8c:0a:aa:3b:
                    3f:92:5f:53:3d:00:20:0f:24:1d:0c:01:cb:f4:23:
                    cf:3b:6c:45:cd:9c:78:49:3b:2b:23:c0:ab:dd:5a:
                    ec:00:28:5c:5c:f4:94:42:bd:23:28:e9:38:c8:a0:
                    bb:e9:b6:2f:63:fe:d4:e6:94:0e:c6:7b:2a:19:d0:
                    28:08:23:4b:76:28:c3:41:96:1a:50:31:c4:5b:d2:
                    b5:fe:13:08:fe:02:cb:b1:9f:36:72:ae:fb:06:08:
                    cb:11:e5:68:53:80:bc:b1:be:ee:75:4f:67:ac:a8:
                    71:ee:d4:77:23:d2:54:bf:c0:e9:2e:0a:75:66:6b:
                    51:d4:f0:36:33:c0:06:0c:1a:c2:d2:ba:24:e1:fb:
                    22:07:60:f4:cf:29:2f:ec:56:a7:d9:e0:f7:15:3e:
                    11:01:3c:c1:99:15:41:de:da:13:77:cf:0b:3b:df:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:DE:3B:C1:05:F6:2D:D2:BA:96:F8:9E:DE:10:49:90:E1:CC:76
            X509v3 Authority Key Identifier:
                keyid:C2:F5:20:68:4E:56:95:14:7D:FD:40:A8:12:A2:69:88:3E:C7:E4:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/C2F520684E5695147DFD40A812A269883EC7E43C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2F520684E5695147DFD40A812A269883EC7E43C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3281FF68D110D44B9E6761515810E862925448FA8B0A0E4AD2950EED298CD8C5/0/34352e372e39362e302f32322d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:7a:5d:15:9c:fe:21:78:f2:23:cf:08:7c:5f:a4:ff:b0:7b:
         dc:9c:5b:3b:12:92:32:99:e1:54:12:2d:6e:15:52:0a:a1:c4:
         da:d2:df:3e:0f:fd:ee:13:a2:21:4c:0d:c1:1e:8b:e5:59:0b:
         7b:8d:6d:ea:8c:1f:b0:0c:c8:04:45:91:b9:66:6d:2b:c9:79:
         59:4c:75:60:4e:b7:73:ff:5d:66:0a:d7:3b:34:a7:af:ef:fc:
         c1:8f:7b:7c:83:9a:cf:80:af:98:53:2e:ca:07:64:11:5c:d6:
         ab:29:f6:13:6a:be:5e:1c:d8:5f:2c:80:d5:f7:fd:c8:70:68:
         9f:30:62:8e:c3:f6:a4:86:8d:ee:ec:e9:d6:2e:3e:aa:57:da:
         9c:ec:02:b1:2e:ba:ab:c1:99:1d:b6:35:47:c1:b4:98:db:26:
         80:49:f2:8c:da:58:0f:78:a1:ec:99:ec:03:75:0b:73:37:be:
         5c:54:93:d2:5c:3e:7e:a1:0d:af:85:b4:b3:48:7e:fb:ed:9d:
         70:1a:46:93:99:9b:fb:1d:88:25:d8:79:8b:62:fe:39:43:5c:
         dc:ca:4b:cf:6b:f9:65:9a:7f:c9:ab:05:e1:42:94:55:9a:b4:
         30:75:43:6a:fa:7c:8b:2f:03:32:2c:cd:70:0b:b1:8b:31:c0:
         27:a0:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 07:58:50 2024 by rpki-client on console-fra.rpki-client.org