Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e203532343638.roa
File:                     34352e37312e3230302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          L05tmb+4PcmZzvfFKD4c5h7wKoeOv03UdKsQgzFurbk=
Subject key identifier:   E0:C8:98:E2:46:86:0A:4A:8A:AE:81:90:ED:8A:31:6D:C9:AB:1A:75
Certificate issuer:       /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial:       0395A003EC8DFF93D98D629E536027037A40B009
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:48:30 +0000
ROA not before:           Tue 05 Mar 2024 17:43:30 +0000
ROA not after:            Tue 04 Mar 2025 17:48:30 +0000
asID:                     52468
IP address blocks:        45.71.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:95:a0:03:ec:8d:ff:93:d9:8d:62:9e:53:60:27:03:7a:40:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
        Validity
            Not Before: Mar  5 17:43:30 2024 GMT
            Not After : Mar  4 17:48:30 2025 GMT
        Subject: CN=E0C898E246860A4A8AAE8190ED8A316DC9AB1A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d1:ec:29:96:df:7a:04:b0:98:e0:be:7d:8a:
                    a3:6b:25:ed:fa:24:e8:45:da:aa:8e:ce:77:e1:ee:
                    2f:b4:89:46:6d:72:27:6f:74:a7:70:ff:6b:54:cc:
                    1d:41:46:cd:c4:58:21:d4:f1:31:51:b6:90:d7:94:
                    53:d0:84:8f:af:a1:ed:b3:50:38:18:63:92:ca:aa:
                    d0:cb:3a:7c:4c:f6:92:5d:4e:e8:58:b7:9c:da:70:
                    f7:77:93:b4:a7:66:5f:23:0f:9b:0e:49:87:25:85:
                    68:43:74:93:4d:a8:f3:36:14:b4:33:bc:fa:0f:3f:
                    d8:84:03:5c:a5:3a:f1:85:c6:31:22:c4:5f:d6:8c:
                    8b:d8:59:a6:39:23:e7:fb:9c:33:f7:59:e4:3c:ac:
                    66:53:84:59:64:e8:70:82:01:1f:d6:50:4f:f1:55:
                    41:a0:c5:a7:25:e7:2c:79:7b:31:c1:63:39:43:2f:
                    c6:d4:93:b3:bf:a7:ba:79:d4:45:4e:6d:42:1a:33:
                    29:58:b6:76:bc:60:8a:f8:be:be:2f:64:30:dd:f2:
                    2a:e1:38:32:b8:18:eb:64:38:08:08:83:3e:e2:81:
                    b4:69:5d:52:70:7d:c1:75:fc:cc:1c:19:90:42:37:
                    90:83:10:45:7a:20:51:75:f2:77:25:9c:fb:61:96:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C8:98:E2:46:86:0A:4A:8A:AE:81:90:ED:8A:31:6D:C9:AB:1A:75
            X509v3 Authority Key Identifier:
                keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:99:f1:1f:50:97:e9:dc:8e:84:eb:69:5c:79:59:a7:df:20:
         54:aa:64:a5:b6:1e:ee:38:93:d7:7c:22:19:af:e0:27:2b:85:
         23:d0:db:9d:a4:db:93:e6:92:aa:05:6c:86:32:65:d4:22:36:
         4c:da:24:02:09:a1:75:0b:84:7f:46:cd:6b:e1:aa:4f:08:cd:
         2d:9a:d6:56:40:8b:d0:39:94:d3:f4:f6:1a:c1:6b:66:e9:2c:
         9d:4d:ec:dc:74:af:42:43:0c:3d:8b:1e:38:c7:0d:27:05:7a:
         7f:52:5c:12:bb:6b:0b:6c:a7:48:93:1c:dd:92:a7:b9:f1:0e:
         e2:a4:d4:a0:1d:5a:b5:3c:87:ad:e9:11:90:70:cb:90:05:90:
         d0:76:72:7f:fe:5e:c0:3e:7d:f7:e8:58:06:33:61:43:62:b5:
         a9:0f:54:1e:77:5f:5e:63:1f:18:c8:89:c9:44:d9:24:0a:95:
         d7:28:64:75:e7:7a:73:98:af:e9:6a:07:9f:34:00:e0:c8:10:
         f2:3d:c1:80:be:65:74:e4:10:c5:38:5e:c6:24:13:af:03:54:
         ef:9f:4d:7e:ae:a0:c4:ff:40:20:7a:50:bc:fb:43:7f:d4:ec:
         2c:13:ef:ad:24:74:92:5b:c8:38:63:db:fb:b7:4c:43:7e:e0:
         00:ad:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:19 2024 by rpki-client on console-fra.rpki-client.org