Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e20323634363638.roa
File:                     34352e37312e3230302e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          qvJsfk5TRssrfjDoJSG3DDHkHmZQX37SBQBuM2LBN+E=
Subject key identifier:   CC:00:1F:C4:07:BE:93:EE:B0:CE:C5:2E:EE:68:4B:71:7B:B2:11:1E
Certificate issuer:       /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial:       2C78F01F2C9E0D89D0CA0C7B7DAF2FE551F9DB4B
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:48:31 +0000
ROA not before:           Tue 05 Mar 2024 17:43:31 +0000
ROA not after:            Tue 04 Mar 2025 17:48:31 +0000
asID:                     264668
IP address blocks:        45.71.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:78:f0:1f:2c:9e:0d:89:d0:ca:0c:7b:7d:af:2f:e5:51:f9:db:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
        Validity
            Not Before: Mar  5 17:43:31 2024 GMT
            Not After : Mar  4 17:48:31 2025 GMT
        Subject: CN=CC001FC407BE93EEB0CEC52EEE684B717BB2111E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:12:52:aa:84:6d:6e:85:02:46:63:19:0f:94:
                    69:65:0a:8d:3f:de:48:90:ef:98:88:94:c6:7f:96:
                    d6:c4:7f:b6:13:3d:c7:31:24:c7:75:e4:36:ef:70:
                    ff:05:2d:af:5d:a2:cc:e4:b3:3f:e7:c4:72:cb:12:
                    7b:dc:cf:eb:11:26:a3:76:17:8a:6a:1d:b8:e9:bd:
                    2b:03:be:5f:2b:69:a8:4d:43:d6:fa:4a:fa:46:39:
                    af:48:e6:a0:6b:cb:75:50:96:bc:ab:d9:9c:1d:e4:
                    b1:4f:8d:14:8e:4c:c6:2e:8a:b2:a7:ad:24:b5:7f:
                    22:00:be:d0:60:9d:73:a8:4e:78:7a:4b:f8:58:28:
                    31:ff:2d:9f:03:a8:39:0b:68:a6:fa:c5:d6:95:bb:
                    da:f8:2f:91:22:65:c9:8f:f8:14:f8:35:41:e9:b8:
                    b4:25:3c:15:fd:35:fb:40:5e:8b:57:09:af:46:00:
                    94:c4:fb:31:dd:fa:27:12:a3:92:2b:f0:d9:3d:47:
                    05:d1:d0:a0:3b:b8:17:c9:9d:40:44:cb:94:49:90:
                    a9:fc:67:9e:d4:58:21:90:80:af:ac:18:28:3e:10:
                    70:e2:21:ac:42:44:9e:82:9b:c0:5f:af:67:1c:ef:
                    d2:94:3c:2d:24:e2:e0:d9:4b:05:a0:ec:80:4b:12:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:00:1F:C4:07:BE:93:EE:B0:CE:C5:2E:EE:68:4B:71:7B:B2:11:1E
            X509v3 Authority Key Identifier:
                keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:80:4c:19:21:25:6c:56:b5:3f:87:cc:da:c8:8d:d0:d2:
         52:1c:02:be:1b:7b:72:ab:11:ff:0a:d2:8b:cf:57:7d:c1:ff:
         ee:84:f9:27:9e:98:90:56:f4:51:61:0c:59:6b:5c:e9:67:bc:
         9c:97:33:77:1a:5e:50:84:5a:9e:a2:c9:b8:44:c5:2b:24:06:
         d1:61:3a:97:5d:35:61:0c:8f:f7:dc:e9:d6:5c:a0:25:d0:e6:
         53:3f:78:a4:8b:70:c4:a7:f4:85:fb:58:62:4f:dc:59:56:9f:
         c5:3e:6f:80:de:fc:3a:d1:c2:86:c8:0f:f2:dc:ef:10:48:55:
         8a:8a:32:a3:fa:12:4f:e0:8a:06:6d:ff:48:95:c8:01:89:f3:
         36:19:b1:1a:ff:6e:13:eb:f2:2a:34:0f:47:f2:05:48:92:0e:
         48:b6:a8:d3:c2:5b:e2:83:aa:cd:67:76:45:43:d8:ac:9e:d7:
         ec:7b:6a:a8:37:23:cb:a8:e9:a4:66:fc:cb:b6:cb:60:1f:be:
         ac:e7:79:cc:f1:e5:2b:ff:05:01:48:7f:54:04:5f:a6:d7:ce:
         f6:2c:dc:65:bf:e0:76:ae:39:65:8d:21:33:ec:e3:22:08:08:
         27:f1:f8:80:e3:18:1b:bb:de:57:5e:44:60:03:22:5a:9b:2f:
         8f:c1:f9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:12 2024 by rpki-client on console-ams.rpki-client.org