Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa
File:                     34352e36382e33312e302f32342d3234203d3e20323732383036.roa (raw, json)
Hash identifier:          QTafbAZR+hXmqLBqor427vV3x8YZuqs5oW3uCNBxeS0=
Subject key identifier:   AE:8B:6E:72:13:15:99:8B:AC:80:2E:A3:DE:3D:4E:40:67:BF:CC:D4
Certificate issuer:       /CN=626DF4797B0744D66925A916672340501DC8D2CB
Certificate serial:       39A0441E814C2575F2BB4F6376813EBDA8C21813
Authority key identifier: 62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa
Signing time:             Tue 05 Mar 2024 17:40:35 +0000
ROA not before:           Tue 05 Mar 2024 17:35:35 +0000
ROA not after:            Tue 04 Mar 2025 17:40:35 +0000
asID:                     272806
IP address blocks:        45.68.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a0:44:1e:81:4c:25:75:f2:bb:4f:63:76:81:3e:bd:a8:c2:18:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626DF4797B0744D66925A916672340501DC8D2CB
        Validity
            Not Before: Mar  5 17:35:35 2024 GMT
            Not After : Mar  4 17:40:35 2025 GMT
        Subject: CN=AE8B6E721315998BAC802EA3DE3D4E4067BFCCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:07:07:53:f1:1b:1c:ac:de:c1:4b:71:a9:
                    bf:ec:ce:f5:f9:53:43:8a:27:76:9b:7d:0b:9f:cf:
                    17:3f:c8:ca:45:65:59:e4:9e:c8:d9:52:3b:41:fb:
                    29:3a:20:c0:df:ee:dd:ee:37:1c:29:fb:22:df:3a:
                    b4:27:bf:0c:7e:98:da:b6:d6:98:18:50:98:a0:61:
                    23:7a:81:c2:02:4b:58:09:f2:1c:ab:ab:42:77:83:
                    12:c6:34:b0:1f:85:7e:11:8d:8d:60:a1:25:26:9e:
                    18:97:81:84:6c:17:ab:c9:05:e2:b3:1e:3e:bf:48:
                    eb:72:cf:7c:50:1d:fa:f1:41:b7:10:7a:38:e0:c9:
                    a1:54:2b:9e:99:73:52:a1:1e:46:1a:a6:6b:0c:89:
                    d5:93:bd:75:1c:99:78:53:8b:12:71:ba:54:0f:a9:
                    9b:95:32:bf:57:06:78:f1:83:a4:cc:a0:62:96:80:
                    8e:f7:76:e7:a7:64:cb:d1:9c:48:7f:aa:e0:79:e5:
                    e5:36:a8:c0:ac:c3:33:a8:78:c5:ac:49:68:52:03:
                    ae:8c:c4:3b:2f:df:97:0b:4e:b2:ad:16:7e:7e:ff:
                    4d:1d:48:fb:4a:82:5c:95:ea:e1:2e:b8:46:f9:36:
                    ec:01:ff:d1:95:44:8d:b0:18:d9:6a:0c:75:de:1e:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8B:6E:72:13:15:99:8B:AC:80:2E:A3:DE:3D:4E:40:67:BF:CC:D4
            X509v3 Authority Key Identifier:
                keyid:62:6D:F4:79:7B:07:44:D6:69:25:A9:16:67:23:40:50:1D:C8:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/626DF4797B0744D66925A916672340501DC8D2CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/626DF4797B0744D66925A916672340501DC8D2CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36CAC534EBEC359FC38B704DB9254451BF0EC7B8E6F9B482E9F50F13E702E6FC/0/34352e36382e33312e302f32342d3234203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:f2:d3:5e:e1:38:de:25:30:06:e1:bd:c6:ff:25:69:a7:5e:
         84:6f:66:78:53:37:69:70:17:f8:37:86:93:90:b4:c6:19:5e:
         7d:fc:92:9b:8b:ac:dd:2d:97:de:07:df:0b:4c:01:4c:5e:11:
         4b:0f:d6:52:3f:1c:b1:74:91:77:38:89:d3:16:eb:62:8e:c1:
         22:a8:77:b1:4c:3a:02:41:33:65:41:53:b5:33:af:5f:fe:45:
         11:eb:00:ca:8b:9a:4a:f5:16:e3:d0:ba:c8:52:23:e3:03:e0:
         72:00:d9:a2:f7:55:62:17:b5:48:4d:96:2f:80:6f:a3:be:76:
         15:54:78:89:e1:7e:1c:5d:2b:47:ec:d0:29:cf:15:7c:a0:b2:
         76:23:30:b8:a3:60:f0:7b:fe:cd:34:b6:a6:90:c3:7c:f2:75:
         1c:47:99:dc:0b:e6:99:ce:e0:9b:3e:66:3f:bf:12:29:09:f6:
         e8:76:a8:78:4d:e2:14:74:2b:5c:6f:2a:d6:46:c9:1a:1f:07:
         60:e3:2a:3c:56:fb:a9:25:35:2b:66:07:b5:da:09:cd:60:a4:
         f1:11:df:bb:a2:38:e9:f1:d7:01:0c:e7:ef:42:06:e1:c8:2b:
         6d:2d:3d:36:93:5f:f5:83:08:6b:08:49:05:b7:b6:bd:e6:b9:
         b2:d4:dd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org