Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32332d3234203d3e203532343638.roa
File:                     34352e37312e3230302e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          M4SPGzHtg3MVGdwevpK3pfFMFhRdY96JAsNWMtL0SIs=
Subject key identifier:   89:F7:74:18:68:BF:68:0D:3C:E7:FF:A5:E1:B1:F7:E6:3D:09:A0:76
Certificate issuer:       /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial:       4236F0EAEB550DBC238F490DD187BEEEB03B2992
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:48:30 +0000
ROA not before:           Tue 05 Mar 2024 17:43:30 +0000
ROA not after:            Tue 04 Mar 2025 17:48:30 +0000
asID:                     52468
IP address blocks:        45.71.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:36:f0:ea:eb:55:0d:bc:23:8f:49:0d:d1:87:be:ee:b0:3b:29:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
        Validity
            Not Before: Mar  5 17:43:30 2024 GMT
            Not After : Mar  4 17:48:30 2025 GMT
        Subject: CN=89F7741868BF680D3CE7FFA5E1B1F7E63D09A076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ee:0e:39:58:16:8e:ce:0c:64:73:62:1b:bb:
                    08:33:93:ec:9f:b5:d3:3e:7f:f0:98:93:05:7a:f5:
                    80:0f:7d:47:2e:12:61:37:31:ef:98:a2:bd:fd:54:
                    38:98:0d:79:68:64:51:a7:75:68:85:6a:56:04:47:
                    a1:b3:19:89:8f:7c:4d:2d:f6:74:bb:7b:33:b2:40:
                    99:a3:d8:fb:05:1c:a0:82:03:81:a0:eb:f4:7d:e6:
                    f9:18:cc:2e:0c:74:fa:df:ca:e0:14:cd:bb:e9:27:
                    a4:30:9a:59:bc:f2:09:68:76:12:9f:9e:bf:f8:31:
                    f4:06:40:2b:49:a0:f9:ae:69:72:2c:4e:e3:54:1b:
                    56:4d:c6:42:68:19:48:d0:46:3e:c5:db:47:90:96:
                    d7:3f:4f:19:89:be:c6:21:ab:77:96:55:18:25:07:
                    c1:70:9d:81:5d:b6:5b:0f:5c:25:71:e8:cd:4d:0f:
                    aa:9b:3a:40:51:0e:9c:47:33:65:f0:79:4a:0f:1b:
                    40:33:27:e8:a2:c0:53:4f:ee:6e:4c:bb:64:11:c2:
                    b4:a9:bc:52:bd:75:8b:cd:15:e2:47:57:c8:eb:ee:
                    b1:e8:c1:6a:f8:17:f8:6c:59:72:6e:14:1c:10:84:
                    96:8a:60:7f:41:e7:87:c1:67:78:63:cc:dd:15:21:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F7:74:18:68:BF:68:0D:3C:E7:FF:A5:E1:B1:F7:E6:3D:09:A0:76
            X509v3 Authority Key Identifier:
                keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230302e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:e0:22:8d:ca:d6:4c:36:c7:6c:e0:09:40:ca:64:05:2a:9f:
         a5:50:c2:d1:92:dd:85:0d:b6:0c:2f:0d:27:db:78:2e:9b:fa:
         d3:bd:53:52:0f:f7:63:32:35:db:42:4b:f2:ae:e8:c1:0c:f8:
         0e:14:6b:4a:fa:80:5e:82:0c:d6:a4:82:fc:3e:3b:4d:81:d5:
         1a:de:0c:47:23:1e:ed:be:b0:65:f3:ea:84:a2:1e:da:dc:e6:
         a0:b3:b3:c7:b3:08:ba:01:bb:a4:dc:df:4d:b4:e4:45:1e:24:
         72:db:3f:11:fb:9a:21:74:44:bb:0d:d5:23:60:7a:02:2d:69:
         d1:14:44:44:a4:0f:0a:e6:a2:c3:5a:fe:d3:f4:66:57:5f:a7:
         15:d6:19:fb:d9:8f:ea:00:51:7c:f5:68:3b:37:65:41:24:38:
         af:4a:28:61:98:0d:26:22:ed:a7:cf:cf:b6:b4:d5:21:8b:61:
         1a:13:d9:82:64:ee:3a:bd:56:1b:40:7f:30:43:7c:60:9d:e7:
         a0:43:86:c4:b8:e4:7f:50:23:d0:fa:a0:42:c4:2c:05:45:27:
         44:05:f4:2e:47:5f:0c:79:89:81:0b:5d:c2:13:aa:52:b4:b4:
         ff:9f:78:f8:a5:dc:45:69:96:4a:b9:e2:8b:d8:95:1e:c5:b1:
         f0:76:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org