Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/34352e3233342e38342e302f32332d3233203d3e20323636373832.roa
File:                     34352e3233342e38342e302f32332d3233203d3e20323636373832.roa (raw, json)
Hash identifier:          LKpxTf4JgaK7uFmUNLdc2tLtueUNN4SWT2ipv5RfPuk=
Subject key identifier:   6E:F0:7B:0C:2D:3E:49:E2:C5:53:F1:A3:5F:CA:C5:CE:D8:1A:8E:70
Certificate issuer:       /CN=FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7
Certificate serial:       6F162A260AD6E33FFBFD34381CF0E626AB92F43A
Authority key identifier: FF:06:C3:3F:B0:00:1E:E2:8F:FC:36:47:C9:C6:B9:FD:0B:0A:39:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/34352e3233342e38342e302f32332d3233203d3e20323636373832.roa
Signing time:             Tue 05 Mar 2024 18:20:36 +0000
ROA not before:           Tue 05 Mar 2024 18:15:36 +0000
ROA not after:            Tue 04 Mar 2025 18:20:36 +0000
asID:                     266782
IP address blocks:        45.234.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:16:2a:26:0a:d6:e3:3f:fb:fd:34:38:1c:f0:e6:26:ab:92:f4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7
        Validity
            Not Before: Mar  5 18:15:36 2024 GMT
            Not After : Mar  4 18:20:36 2025 GMT
        Subject: CN=6EF07B0C2D3E49E2C553F1A35FCAC5CED81A8E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e7:d3:4f:df:b5:aa:fc:ec:04:a6:6c:7d:74:
                    54:ba:c7:a0:68:11:7b:f9:ab:64:a6:6a:05:ae:2b:
                    d5:32:85:85:a3:06:30:d8:a9:5a:c1:2f:c6:0a:02:
                    39:85:0c:5d:c4:12:bf:30:c2:7a:a5:f4:f8:a0:db:
                    ae:e0:7a:98:a3:e5:e6:18:49:07:1d:f7:3a:ec:b2:
                    98:e4:01:72:ba:78:a7:4f:48:f3:a2:b2:d5:92:47:
                    a3:e5:1c:46:64:75:d7:9c:6d:64:7c:42:6a:f6:1c:
                    b6:43:7f:43:ec:b2:93:bc:03:69:5d:d9:d0:95:a4:
                    f4:97:d6:ee:d2:20:1f:42:c5:79:b7:27:85:a4:1e:
                    6a:3c:aa:8e:05:20:39:d2:8f:51:d1:12:66:e2:ea:
                    e4:39:66:3b:44:19:6b:30:13:07:22:90:88:20:b4:
                    94:5e:e0:ba:14:fc:75:d4:49:a8:de:f7:44:03:02:
                    22:b1:f5:57:e5:8e:86:a7:17:aa:5e:54:4b:81:37:
                    e4:c6:19:6d:c8:26:c2:c1:46:70:d1:68:be:41:af:
                    3a:2e:27:03:11:00:32:c6:9b:be:d3:93:f6:9e:78:
                    ad:91:aa:54:10:06:9a:3c:bf:7b:38:fb:4b:66:97:
                    0c:0d:b7:d3:2b:01:c1:b6:5c:5f:1f:16:48:7d:92:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F0:7B:0C:2D:3E:49:E2:C5:53:F1:A3:5F:CA:C5:CE:D8:1A:8E:70
            X509v3 Authority Key Identifier:
                keyid:FF:06:C3:3F:B0:00:1E:E2:8F:FC:36:47:C9:C6:B9:FD:0B:0A:39:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF06C33FB0001EE28FFC3647C9C6B9FD0B0A39A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40F8D6DA61C8DECD5A1243993CF904D26C9DA8ED1BA3C995A125A4A88C01EF1D/0/34352e3233342e38342e302f32332d3233203d3e20323636373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:83:e1:25:6a:60:07:f7:3a:de:85:be:da:0e:1e:40:ac:fc:
         d4:d6:d6:c7:84:80:b5:9d:c0:86:78:06:f9:eb:bb:e8:b1:4a:
         9a:a5:a9:47:c0:c9:15:61:33:85:cf:2c:4c:59:22:cf:0c:59:
         10:89:32:93:6f:6d:31:29:1b:99:51:7a:d1:47:03:7e:0d:95:
         20:e8:89:12:d8:57:2b:3e:54:cd:51:89:c3:08:49:d1:da:ec:
         ad:e4:ca:92:01:9a:7a:0f:1c:e4:1c:da:72:fc:06:b5:bc:e9:
         71:3a:10:b5:05:93:48:bc:85:ab:f1:6b:bc:2f:83:6f:5e:1b:
         88:6c:57:de:b6:c1:03:18:21:bc:1f:c0:7f:f8:3d:0a:c7:f6:
         a8:f1:08:90:15:80:0e:7b:eb:3f:f0:f6:2f:98:55:48:ae:17:
         e6:7d:9b:f1:e5:77:61:4f:8a:8a:e1:a0:b6:e4:2c:d8:a1:14:
         ad:6a:b6:70:9c:7c:37:4c:00:cb:86:59:eb:5c:e3:80:1e:18:
         cd:b0:ef:ae:e5:b7:d8:1f:c0:65:a7:a9:b4:55:38:00:d6:05:
         f7:fd:cf:22:e3:03:4f:12:01:f8:92:cb:c2:98:3e:50:54:46:
         d5:5d:c1:f2:b5:46:2a:37:3f:d7:3b:d5:18:20:71:49:2b:9a:
         cc:8f:2c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org