Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa
File:                     34352e342e3230362e302f32332d3233203d3e20323635363731.roa (raw, json)
Hash identifier:          xOb55y6SyqGh2z4V2b4ja2tuh8nnirQP0oGxORPK63s=
Subject key identifier:   54:ED:DD:62:87:45:13:6B:1D:BB:E1:A3:A6:55:ED:6C:5D:C9:0A:06
Certificate issuer:       /CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
Certificate serial:       26DD56517030A97EA91C26B736FCA80514F8BCA7
Authority key identifier: B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa
Signing time:             Tue 05 Mar 2024 18:13:07 +0000
ROA not before:           Tue 05 Mar 2024 18:08:07 +0000
ROA not after:            Tue 04 Mar 2025 18:13:07 +0000
asID:                     265671
IP address blocks:        45.4.206.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Dec 2024 18:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dd:56:51:70:30:a9:7e:a9:1c:26:b7:36:fc:a8:05:14:f8:bc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4CF94EC7154D2BC51066D5BB556A7589514A5C6
        Validity
            Not Before: Mar  5 18:08:07 2024 GMT
            Not After : Mar  4 18:13:07 2025 GMT
        Subject: CN=54EDDD628745136B1DBBE1A3A655ED6C5DC90A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:cb:06:c8:e2:2d:09:5d:06:35:ca:99:b4:
                    70:d6:f5:f6:74:3b:c4:0d:56:87:3c:66:e2:73:a8:
                    ef:14:a5:27:60:01:8b:7c:0d:b1:9f:e2:28:71:25:
                    7c:69:42:18:3f:eb:3d:85:da:f4:49:74:99:be:bb:
                    07:0c:28:49:68:06:7f:d4:02:c3:ad:c3:09:57:6d:
                    2a:9a:b0:a5:41:2f:af:ba:4a:0b:ba:63:be:17:ac:
                    8d:5b:46:15:6c:2d:dc:85:6c:82:8e:c9:d0:1e:2b:
                    95:33:45:a5:a5:93:08:e4:78:96:14:e2:9f:05:4f:
                    d2:49:74:22:43:ac:0c:9d:2f:4d:01:0b:fc:58:3e:
                    c6:6e:17:cd:5f:36:9f:70:23:83:29:09:aa:61:44:
                    fa:7a:44:30:09:68:5c:82:3b:0d:d0:03:76:e7:7a:
                    03:7d:a9:4f:04:14:ed:10:60:5b:b5:67:fb:87:3b:
                    b0:e7:50:29:f8:55:77:42:4a:f8:60:73:a6:b6:8f:
                    1a:52:38:45:6b:08:dd:7c:c9:42:a3:4f:c7:53:4b:
                    7c:a9:7e:5d:a1:ad:ea:72:ee:a6:7d:2a:97:73:c9:
                    c7:fa:57:d1:c1:c8:86:e5:7a:4f:76:8b:9e:59:f5:
                    c4:a4:d6:ca:29:48:fe:03:e3:63:ee:c4:d4:45:3d:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:DD:62:87:45:13:6B:1D:BB:E1:A3:A6:55:ED:6C:5D:C9:0A:06
            X509v3 Authority Key Identifier:
                keyid:B4:CF:94:EC:71:54:D2:BC:51:06:6D:5B:B5:56:A7:58:95:14:A5:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4CF94EC7154D2BC51066D5BB556A7589514A5C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DB7C5AAE9676CA8208B3D8721D1314553F1FC4BE5B500B3A8955E9362E8C00F/0/34352e342e3230362e302f32332d3233203d3e20323635363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:09:94:c4:5b:dc:5b:67:a9:b1:66:96:bb:81:3d:19:af:20:
         40:b7:64:d4:96:0c:59:94:16:4a:1b:04:67:67:94:a6:e7:27:
         59:01:48:79:28:ae:1d:a1:71:82:9c:53:ef:f7:19:c6:23:2a:
         60:d8:3e:32:71:da:1f:54:b6:dc:d5:45:d1:01:2c:95:51:6a:
         0f:50:50:a8:bf:3a:c9:3f:29:e6:75:e6:b6:d0:a7:74:31:fd:
         3c:4a:ff:90:aa:0b:44:32:ce:33:9f:20:2c:d0:1e:d9:aa:55:
         3d:6c:1d:dd:60:58:f5:93:4e:2b:97:45:78:63:57:34:af:42:
         d0:f6:0a:2d:38:d2:34:3b:c5:df:6c:5e:d5:57:71:f5:c3:29:
         bb:54:2a:47:80:86:d6:53:76:f5:0d:9b:14:8f:f2:e6:09:1e:
         8b:87:a3:ae:70:e7:61:79:82:9b:ef:54:5a:6c:e5:11:90:b2:
         5e:f3:f5:ff:15:fc:3c:24:56:f3:67:64:4d:47:80:f9:4d:36:
         ec:60:f0:0d:1c:86:56:24:e1:98:31:0c:01:f5:bf:7e:64:1b:
         de:03:16:35:24:dd:90:0f:ab:06:ff:ec:7c:53:5b:51:71:ed:
         16:f1:72:c9:d6:52:b2:44:e5:45:56:9a:4d:50:5c:20:04:56:
         93:95:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 8 22:30:57 2024 by rpki-client on console-fra.rpki-client.org