Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa
File:                     34352e372e3233392e302f32342d3234203d3e203237383834.roa (raw, json)
Hash identifier:          XWszkzO+6/FVHgFxlCWnIag80Wg7RyZX7weZc0fS+vE=
Subject key identifier:   27:05:23:4B:8B:3E:D3:2E:1E:F9:6D:1E:2B:0F:91:B8:8B:B0:FF:D9
Certificate issuer:       /CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
Certificate serial:       75F730D61A504991403387A85A66815924BC84DE
Authority key identifier: FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa
Signing time:             Wed 14 Aug 2024 01:25:00 +0000
ROA not before:           Wed 14 Aug 2024 01:20:00 +0000
ROA not after:            Wed 13 Aug 2025 01:25:00 +0000
asID:                     27884
IP address blocks:        45.7.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:30:d6:1a:50:49:91:40:33:87:a8:5a:66:81:59:24:bc:84:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF6C9FB84C09AE8D6288A94909900981E3BB95B
        Validity
            Not Before: Aug 14 01:20:00 2024 GMT
            Not After : Aug 13 01:25:00 2025 GMT
        Subject: CN=2705234B8B3ED32E1EF96D1E2B0F91B88BB0FFD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:5c:90:29:07:a4:07:02:64:66:65:4b:e2:
                    7a:4b:7c:25:47:72:d9:99:53:74:d0:4b:74:1c:33:
                    7e:35:98:c0:76:f0:99:82:6a:68:85:fa:6f:10:61:
                    a6:49:7b:67:7b:e8:6c:b7:9f:4e:8e:5c:66:2b:d9:
                    66:e0:27:81:5d:ab:58:13:0a:10:26:45:32:50:47:
                    1a:a2:0f:50:74:4d:a4:32:d4:28:ab:c9:81:9f:8c:
                    69:02:4a:36:3b:67:48:22:e7:c1:c8:d7:43:81:41:
                    79:6c:f7:f9:3e:7c:4e:8c:2e:7e:12:49:bb:9b:dd:
                    85:da:be:22:00:25:ed:f1:76:89:b1:d3:14:51:f4:
                    f6:14:f6:db:59:f6:c1:fb:4f:cd:b3:d5:68:12:a7:
                    f2:85:14:1f:bf:9b:8b:e2:50:e9:d7:58:b2:e1:a4:
                    f3:0b:12:21:d6:2c:ef:60:3c:7b:73:3b:f7:92:4a:
                    5e:c6:a6:9d:03:98:f7:d9:66:83:74:ad:aa:93:c6:
                    ac:21:19:08:fb:eb:d7:34:51:72:6f:47:38:fd:05:
                    1e:35:43:25:12:18:56:69:55:a8:1b:9e:9b:7d:80:
                    28:96:9a:e2:1a:36:44:21:04:c8:6c:2e:65:5f:36:
                    39:f1:b3:dc:14:c6:c1:47:b0:09:f4:da:19:a2:af:
                    b2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:05:23:4B:8B:3E:D3:2E:1E:F9:6D:1E:2B:0F:91:B8:8B:B0:FF:D9
            X509v3 Authority Key Identifier:
                keyid:FE:F6:C9:FB:84:C0:9A:E8:D6:28:8A:94:90:99:00:98:1E:3B:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF6C9FB84C09AE8D6288A94909900981E3BB95B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/376F6627568BCBB4E21C3E5832A3FA2E8C58C9A0E6E4F3FB10EC5AAEC404592E/0/34352e372e3233392e302f32342d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:19:ab:1d:97:d4:ab:72:aa:b3:ba:6c:ca:9a:75:89:0d:
         4b:78:cd:8f:80:5e:a3:57:d1:32:79:0f:fc:64:a4:2e:cc:69:
         61:76:bb:98:69:f9:94:ce:76:1a:c3:f5:b8:52:e8:22:c0:29:
         0e:5f:8a:96:b1:b8:93:66:3a:ac:3b:c0:7b:8f:c6:9d:55:84:
         b4:aa:e9:b2:27:ec:d1:e7:41:6b:70:91:ee:f4:13:bb:92:ae:
         3a:8a:6e:ad:86:36:10:d8:6a:53:a5:f7:e7:fa:8f:76:f7:9a:
         92:33:d8:29:cd:6e:6e:d4:ce:d5:42:ec:b2:ed:0d:6a:b2:21:
         42:75:8d:f3:f8:f5:69:4c:cc:31:1d:c1:9e:ad:41:0c:54:8d:
         37:96:45:79:01:b1:37:1c:e4:db:f2:a1:0f:a8:24:51:e5:51:
         8f:7e:58:0e:bb:a5:6b:0a:d2:f4:19:ff:c2:41:b3:54:02:0e:
         7d:2b:3a:2d:a7:52:e5:e5:86:45:bc:16:16:3f:61:95:42:a0:
         49:59:ae:c7:65:c4:74:d0:8f:94:27:69:f7:ef:66:8e:3d:f6:
         b3:2a:3e:12:6e:66:1a:11:1e:f6:e1:da:5c:6a:67:90:58:4f:
         d6:95:6f:fc:7f:20:04:91:1e:76:7b:33:bb:65:09:5d:68:d7:
         b9:1a:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org