Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e20333934363834.roa
File:                     34352e3232392e33322e302f32322d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          3H/10Nngq+FJ49FOiDBLGt2W/u5lTZpAbwUxSaBKs+4=
Subject key identifier:   DB:F3:6D:B4:59:28:35:0F:95:8A:08:63:7E:2D:D2:24:98:FE:46:FE
Certificate issuer:       /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial:       0355ED6CB2A2B945240EE0E1F37D73A3F078D579
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 18:17:35 +0000
ROA not before:           Tue 05 Mar 2024 18:12:35 +0000
ROA not after:            Tue 04 Mar 2025 18:17:35 +0000
asID:                     394684
IP address blocks:        45.229.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:55:ed:6c:b2:a2:b9:45:24:0e:e0:e1:f3:7d:73:a3:f0:78:d5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
        Validity
            Not Before: Mar  5 18:12:35 2024 GMT
            Not After : Mar  4 18:17:35 2025 GMT
        Subject: CN=DBF36DB45928350F958A08637E2DD22498FE46FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:ed:6d:0c:b8:ff:01:39:04:dd:9a:4d:af:
                    7f:42:74:2a:26:70:93:b0:ec:cf:03:f0:04:7b:aa:
                    9b:05:55:47:4c:7e:4f:b7:61:02:33:d8:49:31:e2:
                    9a:29:c7:96:3c:44:a1:10:b4:bc:69:54:2b:68:07:
                    66:94:86:e6:5a:4e:46:09:0b:ca:9f:40:b9:98:ec:
                    b8:0d:d9:d4:3a:25:db:b3:a8:ba:ee:ee:1d:cb:42:
                    44:42:2a:43:e3:0f:33:d5:c9:57:a6:85:05:d9:d3:
                    8d:0c:9f:ff:7d:09:dc:93:01:b8:66:7e:14:97:cf:
                    81:38:0e:89:61:49:1c:11:b5:38:a2:71:e3:66:fc:
                    4b:10:40:b9:49:d9:5b:5e:4b:d5:71:d9:86:18:e7:
                    29:d9:8f:61:93:38:46:d0:50:41:1f:33:d6:81:a3:
                    5a:e4:e1:22:44:6a:e7:91:73:a7:cd:99:59:e4:82:
                    42:ed:cc:c5:61:03:68:d2:b7:51:62:c1:06:ce:33:
                    e2:f2:85:3c:45:30:d5:bc:d9:7a:03:38:78:31:04:
                    7a:8b:90:26:56:82:ab:6f:9a:76:21:82:9f:24:71:
                    a3:78:90:f6:da:b7:23:b0:17:8a:b1:e2:a1:3c:75:
                    51:aa:6a:4a:24:e1:29:6b:14:ec:d5:0a:fa:88:74:
                    7c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F3:6D:B4:59:28:35:0F:95:8A:08:63:7E:2D:D2:24:98:FE:46:FE
            X509v3 Authority Key Identifier:
                keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/34352e3232392e33322e302f32322d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:90:67:8f:c5:30:10:fe:fd:48:9c:9c:8c:66:3a:15:57:
         b7:5c:4c:4a:1b:cc:b1:a6:a5:1e:29:7d:8c:79:0f:bc:ad:e8:
         56:37:d0:0f:00:68:48:11:27:e3:df:4b:d8:1e:d6:63:32:fd:
         78:eb:7d:aa:95:76:22:68:24:5e:ef:fe:5e:66:e5:67:84:50:
         82:2a:af:99:e8:65:c9:0c:51:b9:a6:e9:7d:a2:8c:55:72:8e:
         d1:bb:3d:68:a9:d6:6b:74:02:ef:c4:cd:63:b3:24:fc:87:01:
         79:c6:9b:bc:6f:53:16:63:ac:35:0d:32:57:36:f2:54:f2:38:
         bc:3e:26:88:12:70:a7:3e:4f:60:28:e4:4d:71:77:d5:35:b2:
         08:e0:e6:df:54:14:0d:53:c2:4e:26:70:ef:2f:18:4f:04:2c:
         98:0d:ec:25:f2:02:90:7a:1f:b1:62:97:e5:bd:3c:9a:df:d3:
         c9:81:26:39:fb:5a:4a:35:d4:a5:5f:be:d5:f4:ea:bf:41:30:
         69:25:42:b0:24:5b:99:8c:66:88:8a:37:b7:91:ef:5f:82:9f:
         73:63:6b:25:99:ee:08:c5:91:6a:cb:57:d9:42:44:44:ce:f0:
         a3:ef:2c:68:90:1a:d6:55:f0:a7:7d:32:ad:dc:75:d2:9a:05:
         94:76:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org