Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3138392e35362e302f32322d3238203d3e20323639383533.roa
File:                     34352e3138392e35362e302f32322d3238203d3e20323639383533.roa (raw, json)
Hash identifier:          90YMqy9BYn8VoU8RLscclE3RpzFSwKXMENWUsDPdQOI=
Subject key identifier:   0E:F6:EB:1E:59:02:BB:B0:13:9B:5D:02:B0:30:A9:3F:64:E3:DA:04
Certificate issuer:       /CN=A705052BB6C34BD8AC98D939073DF4308F336B54
Certificate serial:       2E02C14FEE200AFC4D479CF0F22C555DCDFAD18B
Authority key identifier: A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3138392e35362e302f32322d3238203d3e20323639383533.roa
Signing time:             Tue 05 Mar 2024 18:02:00 +0000
ROA not before:           Tue 05 Mar 2024 17:57:00 +0000
ROA not after:            Tue 04 Mar 2025 18:02:00 +0000
asID:                     269853
IP address blocks:        45.189.56.0/22 maxlen: 28

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:02:c1:4f:ee:20:0a:fc:4d:47:9c:f0:f2:2c:55:5d:cd:fa:d1:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A705052BB6C34BD8AC98D939073DF4308F336B54
        Validity
            Not Before: Mar  5 17:57:00 2024 GMT
            Not After : Mar  4 18:02:00 2025 GMT
        Subject: CN=0EF6EB1E5902BBB0139B5D02B030A93F64E3DA04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:9a:b5:0f:b5:9f:7b:bb:20:71:7c:a4:21:
                    79:53:17:a4:2d:6e:94:90:9a:b9:1f:ee:10:0f:7f:
                    19:12:2b:d9:3e:8a:f0:5e:06:cb:99:e4:e2:d4:cb:
                    f1:40:d6:1a:20:84:d9:cb:3c:c6:fd:45:df:30:25:
                    11:e1:bd:4f:ac:76:20:63:4d:db:8f:03:77:46:64:
                    b8:43:15:0a:35:ab:b4:60:2e:a1:14:23:f7:20:c8:
                    4d:03:8a:29:e6:ca:db:16:f9:e5:13:10:fb:2a:c4:
                    b3:5c:ec:cd:5a:d7:58:5a:86:ed:34:bd:18:64:b8:
                    8a:f3:a8:66:31:0c:df:47:9f:c7:29:c5:89:48:bc:
                    57:d7:5c:60:3e:0d:35:56:43:f3:2c:2e:be:44:38:
                    35:ef:98:ce:33:73:b0:d9:5b:9f:96:2b:c3:a5:bf:
                    a0:a6:a9:be:34:ae:b1:e4:45:f2:51:ff:fb:89:ce:
                    34:c3:9c:de:57:bd:0a:47:0e:53:19:4b:6e:c9:37:
                    96:f0:5a:a0:e2:a5:d8:39:4d:ad:53:c8:36:c3:24:
                    d9:e4:c8:7b:ad:a8:d0:72:da:87:31:28:0f:af:05:
                    bd:d2:44:42:5e:bc:39:6a:d4:98:da:5f:bf:72:b1:
                    59:39:c7:70:60:cf:24:6e:84:33:c9:44:22:2f:fb:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F6:EB:1E:59:02:BB:B0:13:9B:5D:02:B0:30:A9:3F:64:E3:DA:04
            X509v3 Authority Key Identifier:
                keyid:A7:05:05:2B:B6:C3:4B:D8:AC:98:D9:39:07:3D:F4:30:8F:33:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/A705052BB6C34BD8AC98D939073DF4308F336B54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A705052BB6C34BD8AC98D939073DF4308F336B54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539E7FBA94151F41759924A90DA0E77546BC2263F0F8E061A6DCE56393EEA33A/0/34352e3138392e35362e302f32322d3238203d3e20323639383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:d6:eb:17:8a:6d:18:46:5c:a1:fa:ef:78:72:ac:d0:f2:
         a7:2f:e1:8c:39:46:b7:93:bc:9c:b0:8b:7f:22:79:bb:a6:24:
         95:76:1d:b4:2f:23:7a:46:51:81:17:b6:cb:42:cb:c6:36:8f:
         ed:01:56:aa:1a:e4:a1:3d:fc:a4:12:21:84:b4:88:5a:b7:f2:
         95:d9:c0:02:91:25:68:9f:8b:58:83:81:e9:8f:60:c2:97:00:
         4e:b5:90:ab:b4:2d:f4:b0:0c:1f:f9:71:15:e8:aa:93:ef:17:
         0b:cb:62:3f:0e:1b:3e:0c:98:06:ac:da:ad:20:a5:cf:aa:c7:
         51:07:38:e4:80:9a:67:53:db:3d:e2:7d:76:0c:f2:57:47:55:
         4c:f6:34:28:cb:a7:84:48:3d:d5:f0:99:7a:d1:72:a6:48:47:
         76:b4:86:37:ea:20:d3:5e:ae:ce:ec:e8:71:ec:3c:d1:a5:01:
         60:d5:a0:3b:50:cc:94:62:dd:4f:10:c2:d7:57:03:20:dd:d3:
         6f:fe:fa:66:fa:34:36:80:f0:1e:a4:f8:12:ec:ef:a6:4e:d2:
         9c:15:b7:a2:66:ed:00:be:bc:7c:a3:c4:68:56:76:26:e5:ee:
         bb:65:9d:c8:c1:27:2f:e9:6d:a0:d2:51:fd:04:5f:47:60:1b:
         de:58:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:41 2024 by rpki-client on console-fra.rpki-client.org