Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa
File:                     34352e3233302e382e302f32322d3234203d3e20323636373130.roa (raw, json)
Hash identifier:          dPe34YdYz3FQ7rF+gqdOJUUyLMl/cBDX2N6XkytR91k=
Subject key identifier:   FF:10:DF:05:14:3B:F5:9A:14:A4:E9:97:58:A4:27:FB:B0:B2:6B:06
Certificate issuer:       /CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
Certificate serial:       0FE8A223843F6C1EDBDA5FF6E17B671DC0EFBC20
Authority key identifier: BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa
Signing time:             Thu 07 Mar 2024 12:15:00 +0000
ROA not before:           Thu 07 Mar 2024 12:10:00 +0000
ROA not after:            Thu 06 Mar 2025 12:15:00 +0000
asID:                     266710
IP address blocks:        45.230.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e8:a2:23:84:3f:6c:1e:db:da:5f:f6:e1:7b:67:1d:c0:ef:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDC3068A9AE78384E5A4F4F5244BAE4088059E5
        Validity
            Not Before: Mar  7 12:10:00 2024 GMT
            Not After : Mar  6 12:15:00 2025 GMT
        Subject: CN=FF10DF05143BF59A14A4E99758A427FBB0B26B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:de:bf:82:9e:90:74:2f:e6:12:07:24:84:
                    d9:ad:b0:20:4f:b6:6b:22:65:38:e8:ce:25:55:d9:
                    36:c4:78:6b:b9:5f:ca:94:16:2a:58:9a:9b:26:86:
                    7b:74:65:58:1f:49:87:79:46:20:ab:04:9c:4d:92:
                    b0:f0:c6:b8:f6:75:8f:e4:db:fb:a6:06:cb:fc:d0:
                    e1:c9:92:cf:3b:83:65:15:3a:9d:b5:b4:04:52:4d:
                    28:ff:1f:87:25:49:3e:5c:e5:f8:1c:0a:e2:1d:70:
                    30:72:be:59:85:8e:5c:23:b5:bf:5b:b1:3f:04:67:
                    4e:6b:18:c8:98:67:f5:7b:10:94:ad:39:cf:61:fa:
                    64:50:f5:70:ca:9f:2a:2b:b1:c2:79:0b:e3:85:99:
                    b6:e5:ba:19:46:df:0f:58:62:06:f1:5b:0e:6d:29:
                    39:b9:fe:55:3a:a9:82:9b:ac:61:fc:72:f9:25:d1:
                    b6:32:96:0a:d6:a1:ce:ca:ff:76:6c:66:e0:ef:0b:
                    92:3f:71:00:cf:7c:94:f0:6f:71:20:6a:d1:80:e4:
                    00:06:b4:0e:1d:34:ce:44:09:94:10:d9:49:e1:9a:
                    ad:00:36:58:9b:b5:b5:d7:b2:80:ff:3d:ea:e9:d2:
                    31:fa:c8:c1:aa:a3:d7:0b:15:e3:f8:ac:38:d0:3a:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:DF:05:14:3B:F5:9A:14:A4:E9:97:58:A4:27:FB:B0:B2:6B:06
            X509v3 Authority Key Identifier:
                keyid:BB:DC:30:68:A9:AE:78:38:4E:5A:4F:4F:52:44:BA:E4:08:80:59:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BBDC3068A9AE78384E5A4F4F5244BAE4088059E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4423320C805D8BEEFC4242C5671D84456763ADDFADEE04E42A1A1D44DCFBD2A3/0/34352e3233302e382e302f32322d3234203d3e20323636373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:ab:48:2f:16:a5:54:28:58:76:4d:d5:47:9a:0d:ba:5c:fe:
         db:13:54:74:46:cc:be:81:24:6a:5e:24:ef:0c:ea:ec:54:ec:
         1c:78:e2:d1:e9:79:cb:33:68:c2:d3:64:87:fa:b0:e4:50:ad:
         05:3f:31:7b:bd:72:63:06:25:21:bd:97:68:90:15:b2:6f:66:
         b5:64:17:55:e8:84:ce:41:5b:94:bc:95:ff:d2:5d:12:f6:61:
         75:1b:d8:d7:b3:ff:f6:9c:8e:08:48:82:54:2b:06:19:6d:80:
         9f:d5:7f:cb:f0:66:a3:e3:9e:79:55:56:40:fc:0a:2e:43:95:
         62:29:71:b1:21:55:ef:1d:22:3e:19:99:4c:93:aa:c2:aa:3b:
         d1:9b:5a:a3:e6:17:2e:3c:3b:5a:b2:69:fc:15:07:61:79:fb:
         34:d9:ba:c6:fa:2c:a1:2d:b2:5e:1d:d1:37:31:3f:c6:24:d3:
         42:e2:02:0e:9d:37:92:ed:87:21:ab:77:ad:88:2f:8b:ec:06:
         6e:05:5b:96:b1:3f:c0:40:38:59:e5:69:69:f4:d8:ce:77:09:
         e9:c4:63:ea:68:f6:14:af:12:e2:5f:50:f6:93:00:34:02:f3:
         8d:25:c1:0a:cb:a1:9b:1b:11:c8:33:43:18:1b:be:59:33:92:
         26:80:fa:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org