Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa
File:                     34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa (raw, json)
Hash identifier:          HRfXYtO0WifWrqliIy42oimEWzAL8MA5sUDC3MGTOxk=
Subject key identifier:   A6:1E:C1:2C:45:ED:43:66:F5:59:68:C1:1F:E3:E7:4D:F3:81:CA:54
Certificate issuer:       /CN=53AEED6EF7E19754562BCA9484F6AC8AA88893AA
Certificate serial:       2592BD2ACDFD7DD699E5BD44C5BBA7FEE4415F8F
Authority key identifier: 53:AE:ED:6E:F7:E1:97:54:56:2B:CA:94:84:F6:AC:8A:A8:88:93:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa
Signing time:             Tue 05 Mar 2024 18:18:34 +0000
ROA not before:           Tue 05 Mar 2024 18:13:34 +0000
ROA not after:            Tue 04 Mar 2025 18:18:34 +0000
asID:                     266771
IP address blocks:        45.232.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:92:bd:2a:cd:fd:7d:d6:99:e5:bd:44:c5:bb:a7:fe:e4:41:5f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53AEED6EF7E19754562BCA9484F6AC8AA88893AA
        Validity
            Not Before: Mar  5 18:13:34 2024 GMT
            Not After : Mar  4 18:18:34 2025 GMT
        Subject: CN=A61EC12C45ED4366F55968C11FE3E74DF381CA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b0:c2:0a:30:85:d1:f4:b0:54:ae:56:43:a9:
                    47:e1:f5:77:e2:5b:8a:e4:9e:76:12:6f:44:e0:21:
                    c1:fc:50:03:1e:68:32:c6:f2:bb:ae:5a:e4:e9:56:
                    f4:5d:76:71:11:c9:20:94:07:dc:78:55:73:7c:c1:
                    2b:ef:c4:1a:dd:97:89:79:9d:8d:f9:e4:28:55:1b:
                    55:4c:4a:bb:ec:2c:07:8d:70:28:65:32:84:70:f1:
                    d5:26:70:f0:5b:e3:9b:b3:80:c7:a2:f2:70:54:06:
                    62:0c:48:dc:ea:c3:6d:bb:9a:a3:1e:ef:fd:fd:9b:
                    6f:c9:36:39:c1:a9:df:d4:a7:f1:0c:02:7e:07:d8:
                    f5:20:17:a3:25:5a:18:1d:2f:19:f8:d3:3b:9b:35:
                    ca:32:84:f9:08:83:8e:7b:6f:24:01:22:9b:12:a5:
                    9e:4c:24:b6:44:55:63:b5:c1:04:5b:b6:2c:17:8f:
                    92:e6:df:39:dc:e9:d1:19:ce:61:ed:43:5f:95:fb:
                    24:80:da:a7:b7:08:e0:38:1d:c8:3c:e6:9b:c3:70:
                    13:ec:e6:50:e4:c5:cf:3d:6f:2a:e5:5a:a1:32:32:
                    de:cb:cd:56:85:2a:5a:d5:52:ec:e9:a1:28:dc:23:
                    53:28:ee:e3:ff:1b:8b:bc:04:9c:30:3e:1d:35:1a:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1E:C1:2C:45:ED:43:66:F5:59:68:C1:1F:E3:E7:4D:F3:81:CA:54
            X509v3 Authority Key Identifier:
                keyid:53:AE:ED:6E:F7:E1:97:54:56:2B:CA:94:84:F6:AC:8A:A8:88:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53AEED6EF7E19754562BCA9484F6AC8AA88893AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35CBD01B465FEDF9EE70828011368E078AF1A465CF90293F2257894AB49A1C9E/0/34352e3233322e3137372e302f32342d3234203d3e20323636373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:06:58:10:f1:11:41:8e:20:ac:62:97:d7:27:d3:c5:52:
         46:f5:3e:04:79:e6:28:eb:6c:93:94:a5:62:92:71:30:87:cb:
         28:6d:bc:a9:07:a9:66:8e:c3:14:dd:b9:a8:76:72:66:c4:e1:
         ab:e6:de:63:1e:99:83:57:29:36:51:5e:85:fb:35:97:0a:d6:
         e2:81:bd:d0:e7:d9:7a:ce:3d:6b:94:06:b9:2a:75:de:ef:0a:
         fd:96:07:5e:61:77:64:87:25:8f:58:65:9c:c1:2f:19:e2:36:
         33:a9:38:8a:ff:f8:88:49:7e:74:97:a2:ff:4f:93:a0:be:09:
         83:70:12:bb:51:ae:0f:ba:ba:62:0f:d0:a9:25:e7:63:3b:f8:
         84:54:24:4e:df:a1:6a:c4:12:47:2f:98:7a:5f:c4:00:3c:d6:
         dd:43:fc:fe:26:85:7d:80:ff:91:7c:9c:66:ad:e6:6c:45:96:
         b0:b2:3e:2f:27:b2:a2:5c:19:ec:7e:b4:31:6a:9a:a8:2d:0c:
         ca:f4:f7:1d:ae:64:77:1e:6e:56:12:dd:c6:57:4b:4c:e8:36:
         76:5e:9a:09:96:9a:bb:95:bf:fa:4e:d2:d2:41:f1:d4:fd:72:
         7c:8c:1c:69:af:47:b9:b6:e3:a5:2f:4a:62:ee:9d:e0:6f:b2:
         80:45:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:01 2024 by rpki-client on console-fra.rpki-client.org