Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa
File:                     34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa (raw, json)
Hash identifier:          71j3YKGUOvNDapEOWU4MqT7c528vzwk1FYTiLWFcalA=
Subject key identifier:   9C:F8:24:A3:B6:58:95:10:55:A7:E8:2F:CF:7C:50:4B:5E:F4:6F:84
Certificate issuer:       /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial:       4ABA303DE67BDA85F764A6552B433EB6F61C8521
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa
Signing time:             Tue 05 Mar 2024 18:07:47 +0000
ROA not before:           Tue 05 Mar 2024 18:02:47 +0000
ROA not after:            Tue 04 Mar 2025 18:07:47 +0000
asID:                     266706
IP address blocks:        45.229.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ba:30:3d:e6:7b:da:85:f7:64:a6:55:2b:43:3e:b6:f6:1c:85:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
        Validity
            Not Before: Mar  5 18:02:47 2024 GMT
            Not After : Mar  4 18:07:47 2025 GMT
        Subject: CN=9CF824A3B658951055A7E82FCF7C504B5EF46F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:df:47:52:c9:2b:94:c3:8d:6e:d0:0a:90:
                    c4:ce:6b:e9:2c:06:d9:ba:ee:53:15:4e:a5:7e:55:
                    45:f4:96:26:e5:4f:d9:a6:cd:48:af:a0:a6:26:1e:
                    5f:a0:77:86:08:cb:db:34:f9:e3:a5:1b:8b:5e:4f:
                    a0:4d:22:f1:54:27:9d:2f:a8:9b:76:0b:40:02:d8:
                    06:d0:71:96:58:52:51:98:14:a9:0e:01:e0:a1:b4:
                    3a:b9:79:80:90:7d:4f:e0:54:7e:12:a1:ab:57:0c:
                    b0:a1:e9:53:48:c0:6a:1c:b8:29:a0:1a:2b:d8:a3:
                    62:f7:fa:07:a9:e0:85:ab:54:5f:45:8a:96:4c:79:
                    e1:76:98:ba:49:d6:a2:7c:37:7a:15:a7:81:8c:6b:
                    0f:c9:be:90:15:f8:b7:22:df:f7:91:ee:95:d3:b8:
                    b6:29:22:d4:c0:c9:33:99:da:69:a4:9d:7a:05:de:
                    e3:9b:61:87:4d:30:f6:65:cc:26:5f:92:09:ea:41:
                    39:d0:8e:58:cb:53:b5:4f:2e:8f:e2:ec:f3:92:f1:
                    b5:ca:a8:e3:e1:0d:92:55:2b:8c:8b:ee:1a:00:ab:
                    2b:88:45:c3:83:9f:98:71:07:3a:3d:d3:02:d1:bd:
                    6e:4d:25:f7:70:9e:09:36:48:a1:33:60:ee:bf:10:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F8:24:A3:B6:58:95:10:55:A7:E8:2F:CF:7C:50:4B:5E:F4:6F:84
            X509v3 Authority Key Identifier:
                keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3138392e302f32342d3234203d3e20323636373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:f9:17:27:d2:65:79:74:37:1a:e9:f7:c6:60:7b:af:57:42:
         4c:f7:1b:ac:fd:cc:46:02:3a:6c:3f:8c:ed:58:59:63:ad:f1:
         2c:ad:60:27:6e:e3:08:c1:b6:84:b7:ae:fd:e1:82:92:63:8e:
         5d:59:1c:40:96:2b:f6:de:02:e7:12:5d:68:4b:c7:d2:d5:80:
         af:7a:c3:c3:9e:22:ca:f6:b3:cd:f8:0f:9a:0e:ac:7d:a9:1b:
         4a:86:46:88:3a:55:ab:e7:e1:8b:21:d8:f4:30:06:3a:a2:ab:
         e9:c1:6a:f9:8c:dd:2c:fc:23:6b:3f:18:90:0e:be:6f:46:1a:
         af:68:05:35:ce:c3:1d:4c:c2:1f:c4:c4:6c:ef:5a:ff:d6:9e:
         ff:d4:cd:f4:7a:f3:45:86:3f:7d:d2:2b:fa:63:da:4e:a0:eb:
         6f:b1:96:6b:38:dc:2f:7b:3b:be:c2:88:99:0d:65:65:9d:e0:
         1d:b5:bc:46:58:41:cf:ac:31:8c:e9:5b:5c:e1:0e:ab:e4:8a:
         1d:c2:2f:a2:d4:a9:6d:21:6e:9e:04:91:06:6c:fd:f3:a2:2d:
         27:f4:44:4f:03:82:20:28:14:b5:6e:be:61:a0:63:73:c8:7f:
         26:82:73:4d:91:9b:33:91:96:49:db:d0:fb:bb:ae:c9:40:eb:
         3f:3e:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:14:32 2024 by rpki-client on console-ams.rpki-client.org