Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa
File:                     34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa (raw, json)
Hash identifier:          8FD8o9Tloy03WSeBGpx7432QG0fKljVRLYTzADrw8/o=
Subject key identifier:   09:F7:15:81:B3:36:C6:04:15:77:E7:EF:34:F1:51:51:28:4D:82:BB
Certificate issuer:       /CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
Certificate serial:       102325374EE4A2DA8DBAEB17274F0444358E0D1E
Authority key identifier: BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa
Signing time:             Tue 05 Mar 2024 18:07:46 +0000
ROA not before:           Tue 05 Mar 2024 18:02:46 +0000
ROA not after:            Tue 04 Mar 2025 18:07:46 +0000
asID:                     266706
IP address blocks:        45.229.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:23:25:37:4e:e4:a2:da:8d:ba:eb:17:27:4f:04:44:35:8e:0d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8
        Validity
            Not Before: Mar  5 18:02:46 2024 GMT
            Not After : Mar  4 18:07:46 2025 GMT
        Subject: CN=09F71581B336C6041577E7EF34F15151284D82BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:9a:5e:28:bb:de:59:ae:55:3d:67:58:74:
                    e3:37:b9:32:0b:c7:ad:8f:03:7a:38:c0:c8:2e:fd:
                    5a:38:44:32:6b:1e:84:c3:2e:55:53:4b:9b:2f:74:
                    27:74:a7:58:30:e3:af:2b:af:53:b8:0a:79:19:5c:
                    2d:60:34:29:c1:e6:a9:84:9f:da:ff:a4:38:0f:f0:
                    ae:50:08:aa:34:e8:be:9f:f0:ea:b9:08:fa:09:0a:
                    80:f2:80:81:74:5c:ce:ae:44:3e:63:59:80:dd:48:
                    e6:09:9b:a7:6b:6d:33:61:66:61:86:c8:7f:38:dd:
                    4d:12:b3:d4:67:3a:b7:13:1c:dd:44:8f:1e:e3:4a:
                    91:4b:5f:20:09:03:c2:17:ad:22:11:e5:53:f8:79:
                    61:60:f7:82:03:29:25:cc:9e:78:47:46:2b:42:84:
                    52:3f:b1:09:ff:3b:38:6c:ef:6e:c9:8c:57:d2:24:
                    14:ae:6e:55:39:ba:c3:bf:39:14:92:44:eb:39:06:
                    80:21:03:b5:41:01:0e:6e:7a:d9:16:c5:cd:0c:ed:
                    2f:32:c7:e7:11:58:a7:e8:b4:e3:c3:de:e2:08:82:
                    10:5f:1b:ab:d4:8d:39:a0:81:37:68:65:a7:31:86:
                    61:ff:75:8f:20:68:65:d7:ef:99:2b:3b:3c:d6:e7:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F7:15:81:B3:36:C6:04:15:77:E7:EF:34:F1:51:51:28:4D:82:BB
            X509v3 Authority Key Identifier:
                keyid:BF:F1:28:04:AD:7A:6B:67:DB:33:CA:50:4B:CC:2B:AC:34:A8:50:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFF12804AD7A6B67DB33CA504BCC2BAC34A850D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57335F8FDF1714020F9E1AE69D767055C38FA7877A1D2D6527EC84AEB4D354A2/0/34352e3232392e3139302e302f32342d3234203d3e20323636373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:b0:d5:bf:2c:5b:6f:ff:bb:25:8c:c5:70:25:fa:8c:9d:c7:
         b1:f6:05:23:8f:aa:5e:38:22:8d:c9:79:9a:3d:0f:c2:eb:32:
         ff:35:1c:45:51:b1:42:95:f1:ed:3f:da:67:bd:6f:bc:e0:08:
         c3:58:4d:78:51:ce:10:37:6c:ed:31:f8:83:74:1f:cd:ef:9e:
         53:ba:ef:a5:43:e9:c7:97:cf:98:6d:ee:a3:39:cb:c5:f6:a2:
         31:e9:37:23:28:aa:88:8e:24:1a:2f:b3:19:ab:cb:9f:05:81:
         1c:b1:bf:25:9d:a9:89:f1:8c:57:d1:18:4c:7a:c7:5f:4a:e4:
         b6:14:65:5a:e1:26:97:5c:53:76:62:4a:3b:91:ad:c6:7f:7e:
         7c:ed:86:e5:bf:21:ae:86:7f:f7:0a:d4:23:56:8a:90:b8:7d:
         17:fa:70:16:33:39:fa:0c:05:b1:fb:bd:5b:ab:3b:21:91:23:
         20:5d:db:bf:19:45:0d:42:49:d5:18:61:82:6f:ba:49:8e:dc:
         2a:6e:3d:4b:d0:c9:67:62:94:0a:52:42:93:88:69:21:20:91:
         e7:98:14:1c:15:4d:29:98:40:9a:8a:34:58:61:92:b9:5d:d4:
         fa:cb:bb:88:2f:4a:58:01:2a:e9:23:d9:e9:66:0a:4f:67:6b:
         ee:38:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org