Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
File:                     34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa (raw, json)
Hash identifier:          Q/j5xCoBRXt8jGLsC4Y7gmuQPkp+XeqX5JNbt6Ip558=
Subject key identifier:   94:B9:C2:90:A8:FF:0D:BC:E4:90:03:0F:C6:BB:74:F8:8B:74:3B:DD
Certificate issuer:       /CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
Certificate serial:       1538B86C73A228CB1C3182D434E0CAFB7135216C
Authority key identifier: C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa
Signing time:             Tue 05 Mar 2024 18:19:56 +0000
ROA not before:           Tue 05 Mar 2024 18:14:56 +0000
ROA not after:            Tue 04 Mar 2025 18:19:56 +0000
asID:                     266780
IP address blocks:        45.234.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:38:b8:6c:73:a2:28:cb:1c:31:82:d4:34:e0:ca:fb:71:35:21:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3AFC9B969BE3D2E36B8E17254980892E1F06DB8
        Validity
            Not Before: Mar  5 18:14:56 2024 GMT
            Not After : Mar  4 18:19:56 2025 GMT
        Subject: CN=94B9C290A8FF0DBCE490030FC6BB74F88B743BDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:76:0e:95:08:61:38:73:3d:45:4e:04:b4:
                    55:96:d1:3b:f2:1b:91:22:a5:44:5a:66:c8:98:f1:
                    b0:df:64:7a:90:83:ad:4c:d8:e9:32:6c:09:bf:50:
                    66:e4:bb:f3:7e:f6:45:30:c1:b6:b2:78:86:b8:6e:
                    0b:6e:4d:df:5c:3c:09:df:e7:7b:2d:08:01:b0:de:
                    60:01:27:28:0f:05:20:ec:0b:0b:65:34:19:11:de:
                    4f:f1:6f:65:ae:2a:cd:4a:a6:4d:79:ff:95:1e:af:
                    72:40:49:7f:97:51:c5:fa:23:ad:d3:a8:36:85:5a:
                    ea:5d:cf:58:62:fc:2f:94:85:42:e3:f3:ee:cc:fc:
                    91:ef:0f:6f:49:0c:a4:2a:86:99:53:cf:98:3d:77:
                    e3:88:33:9c:61:df:83:9a:bb:59:1c:58:a2:70:73:
                    08:4f:fc:36:c2:5e:f8:8e:65:4e:a5:b9:2b:69:f6:
                    cd:97:a3:61:80:7c:c9:ef:4d:4f:60:93:cd:2f:dd:
                    75:8f:0f:14:a3:69:b4:c1:cd:b8:9c:0a:b6:17:9c:
                    22:e5:6f:6d:0b:c4:ec:f5:85:fc:3c:ad:7f:a5:09:
                    96:09:48:90:17:2b:0d:d9:f9:53:30:e0:02:50:d5:
                    d7:33:d2:bf:a6:95:75:4a:ab:e3:81:1e:13:2e:a5:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B9:C2:90:A8:FF:0D:BC:E4:90:03:0F:C6:BB:74:F8:8B:74:3B:DD
            X509v3 Authority Key Identifier:
                keyid:C3:AF:C9:B9:69:BE:3D:2E:36:B8:E1:72:54:98:08:92:E1:F0:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3AFC9B969BE3D2E36B8E17254980892E1F06DB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4221FF9F242A58C88BBE5972B3852CB870DF83C84D513EF30E824DA11E87E88C/0/34352e3233342e3131322e302f32322d3234203d3e20323636373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:59:d7:27:ac:85:a1:af:93:da:b9:0b:2e:bf:e2:25:68:1e:
         b1:ca:b2:0d:a0:2f:e9:82:5f:3c:6a:76:f6:7f:f0:ba:18:0d:
         68:0d:95:4d:4c:01:a6:16:4a:56:b8:2d:7f:1e:08:3c:f3:7c:
         e8:36:00:58:9c:44:3b:76:e5:13:b9:a9:a2:bd:bb:b1:f8:31:
         ef:a0:2f:a2:67:b5:7d:08:18:3d:67:8f:f0:eb:af:25:f8:00:
         5d:9b:77:d3:6c:d6:21:f8:89:d7:d6:ef:96:71:4e:08:22:0b:
         5e:83:6d:cd:81:70:78:38:d0:b0:fe:06:a0:fd:52:e7:2c:d7:
         bb:c6:7e:3c:14:89:88:de:dd:15:4f:c1:2b:05:02:2f:a5:ec:
         19:99:c6:82:03:83:a9:0d:21:bd:63:8d:bb:cb:68:c7:96:6f:
         a9:ad:95:f7:28:7e:26:18:c2:cc:3f:c0:45:a8:8b:13:5b:e8:
         41:c3:f6:9d:31:af:b1:eb:3e:c7:ae:cc:13:da:4c:5a:61:74:
         88:ec:e3:c9:bf:96:ec:93:50:bf:2f:cd:4e:0d:3b:aa:8b:b1:
         ef:5e:96:41:78:ff:66:bd:a6:4f:43:54:6c:5b:37:bd:05:17:
         b6:88:d9:ec:7f:96:d0:6c:03:f9:1b:3e:44:1c:f8:36:a1:6a:
         f9:f6:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:41 2024 by rpki-client on console-fra.rpki-client.org