Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa
File:                     34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa (raw, json)
Hash identifier:          iQ6qzw4Ey498WPtGjQYGdBag1jIRahdSCVQrPitSpFc=
Subject key identifier:   09:3E:9A:38:18:E1:52:2F:50:51:CA:5E:C3:E7:86:0E:48:B3:49:77
Certificate issuer:       /CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
Certificate serial:       29FAC74F00D1F76508F317A16683264057F4D227
Authority key identifier: D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa
Signing time:             Tue 05 Mar 2024 18:05:35 +0000
ROA not before:           Tue 05 Mar 2024 18:00:35 +0000
ROA not after:            Tue 04 Mar 2025 18:05:35 +0000
asID:                     269872
IP address blocks:        45.189.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fa:c7:4f:00:d1:f7:65:08:f3:17:a1:66:83:26:40:57:f4:d2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D30B668CCFD504504370BC862A490DCA5B1FADDC
        Validity
            Not Before: Mar  5 18:00:35 2024 GMT
            Not After : Mar  4 18:05:35 2025 GMT
        Subject: CN=093E9A3818E1522F5051CA5EC3E7860E48B34977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d5:b0:7d:e2:81:64:9b:43:38:9d:60:a5:7f:
                    ea:48:de:93:26:b6:16:fd:bd:ee:b5:3b:a9:ed:d3:
                    4f:15:42:0e:b7:b4:cd:79:fc:87:42:6a:52:3d:cf:
                    d2:43:d3:6c:db:5e:31:84:57:e0:8d:7c:9d:9b:c4:
                    26:24:d0:b1:36:2f:40:83:11:51:41:f7:6c:7e:df:
                    5e:44:75:40:06:0e:d3:7a:a3:30:d3:3e:53:ec:21:
                    73:c6:6f:c8:bc:4d:f6:fe:ee:8e:2f:81:15:d5:b3:
                    0c:d1:96:72:6c:a0:e7:d4:4b:c9:03:7a:20:9e:d1:
                    6f:ba:4f:03:ab:94:96:04:f5:07:03:fe:a7:05:5b:
                    6b:e1:97:be:9a:9a:2e:76:5a:ab:cc:a4:d3:31:b4:
                    37:3d:2d:ff:f7:0b:8b:15:4d:87:fb:02:f0:97:df:
                    45:be:32:dd:d0:ef:81:05:79:4e:73:c5:9e:8f:79:
                    6e:65:d4:44:25:3e:19:30:e5:be:52:12:6a:8b:d0:
                    cc:62:78:bb:76:1b:c5:e3:c2:db:fa:26:d1:65:4b:
                    f0:46:12:67:48:93:9d:9b:90:bf:3b:c3:b7:50:3e:
                    fb:20:a1:d2:0b:83:68:16:06:02:ad:43:75:86:04:
                    67:f9:78:48:df:9b:e4:4e:b4:b8:23:c9:2a:81:4e:
                    bc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3E:9A:38:18:E1:52:2F:50:51:CA:5E:C3:E7:86:0E:48:B3:49:77
            X509v3 Authority Key Identifier:
                keyid:D3:0B:66:8C:CF:D5:04:50:43:70:BC:86:2A:49:0D:CA:5B:1F:AD:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D30B668CCFD504504370BC862A490DCA5B1FADDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3343A908EDE93E105CBF53349033070201D8E830DE5C1FB7DADE644F49D1897F/0/34352e3138392e3230302e302f32322d3234203d3e20323639383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:ad:f1:3a:a1:a1:76:fa:60:e5:f6:f3:c5:24:5f:e5:58:c4:
         37:31:1f:db:3b:69:99:aa:1a:87:6f:03:7e:6f:c2:67:af:74:
         5b:da:3f:83:89:bc:b4:1b:09:c6:1e:0a:8e:3e:a3:e8:8f:03:
         dc:0f:5a:e2:c9:55:b1:96:66:28:3f:1c:7f:69:d5:e7:3b:e7:
         84:61:c8:d3:39:96:be:f3:54:91:43:c5:f0:dc:ed:06:bb:50:
         3d:92:7c:76:c7:9c:01:eb:72:12:e0:c4:16:cb:33:99:55:13:
         0b:de:d2:8c:0d:32:7c:3f:44:a5:b0:ce:3e:51:80:d6:21:2e:
         33:45:66:21:af:1f:ff:43:9b:f3:f8:c2:8a:c0:b6:c7:43:ba:
         9e:2a:e7:1d:92:7a:77:c1:6f:41:8b:a1:45:dc:2f:d1:09:28:
         55:98:1f:c2:98:b0:0f:43:76:5e:79:6c:9a:5c:48:1f:6f:7f:
         34:ea:69:5e:46:c5:d3:45:94:ee:a0:20:44:33:8f:33:3b:c7:
         e1:19:90:3e:57:15:b8:29:55:6c:85:a7:fc:2a:2d:8b:f3:cb:
         88:d1:4f:16:45:a5:a5:31:21:57:23:07:7a:3d:a9:ed:f0:b8:
         9e:91:11:68:74:2a:75:3a:4f:0c:7b:98:3c:5b:7b:73:25:11:
         29:04:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org