Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32332e302f32342d3234203d3e20323634363638.roa
File:                     34352e3232342e32332e302f32342d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          r/IE5U9Rcz2tLcxJUSeKXpJ5IBnqa8zNvg+iPMkHQVU=
Subject key identifier:   87:D8:90:2B:52:28:30:94:54:89:D5:0B:37:B3:EF:D8:B3:FC:23:EF
Certificate issuer:       /CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
Certificate serial:       250584F98B0251B1FABB96CA47FCD2B440F8D71A
Authority key identifier: 66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32332e302f32342d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:48:54 +0000
ROA not before:           Tue 05 Mar 2024 17:43:54 +0000
ROA not after:            Tue 04 Mar 2025 17:48:54 +0000
asID:                     264668
IP address blocks:        45.224.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:05:84:f9:8b:02:51:b1:fa:bb:96:ca:47:fc:d2:b4:40:f8:d7:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665E210B6EA50ABEA68925B6683D57E0A94D5CCF
        Validity
            Not Before: Mar  5 17:43:54 2024 GMT
            Not After : Mar  4 17:48:54 2025 GMT
        Subject: CN=87D8902B522830945489D50B37B3EFD8B3FC23EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:a5:20:6d:7b:16:29:d9:68:ed:51:62:78:
                    6e:a7:90:cc:04:45:05:b1:dc:98:d5:fa:91:e3:a0:
                    9f:7f:c7:bc:a5:05:58:af:1c:21:56:40:fd:b7:83:
                    b1:1c:32:96:ca:b6:63:a8:82:2a:e1:9e:e7:f9:81:
                    fa:91:8b:17:e2:40:d8:82:fb:54:99:63:54:1c:d8:
                    04:df:25:c4:ea:df:21:30:0f:82:09:92:b5:fb:a3:
                    2c:6c:e3:1a:93:11:f1:f6:2d:65:e4:0a:3a:14:d4:
                    ec:c5:c8:7e:84:d2:55:02:17:56:ed:d0:55:8a:67:
                    e2:ed:9e:30:34:01:ba:11:f0:aa:bf:47:24:ca:9e:
                    db:9b:f5:1d:ca:a5:aa:ee:c9:7c:66:9e:61:6a:1a:
                    de:bb:60:30:27:bc:52:ed:85:05:8a:be:b9:1a:d4:
                    99:b0:7e:96:1e:ea:da:0f:a8:55:df:7d:dc:4a:dc:
                    93:67:79:f9:88:e0:84:43:0d:4b:ea:b8:87:d4:43:
                    11:d0:22:b6:d9:4c:15:0a:5e:47:5d:ac:aa:ba:7d:
                    f3:c4:c2:47:8e:81:97:4e:e0:95:25:77:9e:0a:01:
                    31:52:16:29:50:39:4d:df:20:ee:e3:a2:30:93:e3:
                    17:31:e0:00:f6:ca:e0:21:3e:2b:02:3a:7d:59:4d:
                    40:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:90:2B:52:28:30:94:54:89:D5:0B:37:B3:EF:D8:B3:FC:23:EF
            X509v3 Authority Key Identifier:
                keyid:66:5E:21:0B:6E:A5:0A:BE:A6:89:25:B6:68:3D:57:E0:A9:4D:5C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665E210B6EA50ABEA68925B6683D57E0A94D5CCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A683DB2EBE484C7A3536C34C158206B843D3CEF91146C49CF97FC4668FAD41C/0/34352e3232342e32332e302f32342d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:48:b3:b4:c9:89:8b:08:d4:2d:a4:13:f2:e4:49:eb:4c:ff:
         f9:9e:2f:e7:bc:0d:18:3d:b1:c1:65:64:0f:32:0e:63:26:4f:
         41:3f:a1:6f:fd:dd:9e:35:36:e4:0c:eb:3d:73:58:8f:a3:dc:
         d5:1a:60:05:7a:a6:9b:d8:3b:7e:25:14:8c:06:a4:36:69:d8:
         e8:04:25:c1:cd:cd:b6:8c:94:f8:bc:e2:6c:61:8e:8f:10:55:
         b6:78:ff:a2:b7:0c:a5:82:a3:8b:a5:b7:07:3c:0a:e8:67:76:
         d8:14:69:8a:bb:96:d8:83:94:80:44:77:f8:53:20:cc:57:a0:
         05:ac:fc:8d:19:d4:0f:72:d4:45:df:25:5d:47:70:75:79:b3:
         70:16:57:59:51:e6:63:50:f8:a7:78:ce:6c:f4:b8:0d:ea:0f:
         f5:9e:03:56:3f:1b:76:b3:73:04:3d:9d:f2:0c:18:2a:7a:27:
         b6:f0:2f:2c:ed:73:f7:bc:0d:8d:7c:58:56:fd:e8:da:ce:bb:
         40:11:ef:5b:f1:ad:70:28:ba:47:16:c3:ef:bf:87:1a:2b:5b:
         13:4a:9d:d0:ac:0b:f2:5c:42:1a:01:71:cd:b9:1c:68:7b:f7:
         22:59:06:e8:80:a5:c6:22:d0:8c:b1:eb:b1:3a:19:8d:47:26:
         61:16:57:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:48 2024 by rpki-client on console-fra.rpki-client.org