Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230322e302f32332d3234203d3e203532343638.roa
File:                     34352e37312e3230322e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          OjgjGQZHKSiLRKI5HjAWsP72KamINsJ3pLU24AcPYwg=
Subject key identifier:   B7:CE:E0:FC:76:66:7A:2F:83:8F:F4:B0:10:D7:49:BE:67:22:C5:B6
Certificate issuer:       /CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
Certificate serial:       6B6513EA6BCEEF715AB19DC0F9F0B2CED2AA1FFF
Authority key identifier: F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230322e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:48:31 +0000
ROA not before:           Tue 05 Mar 2024 17:43:31 +0000
ROA not after:            Tue 04 Mar 2025 17:48:31 +0000
asID:                     52468
IP address blocks:        45.71.202.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:65:13:ea:6b:ce:ef:71:5a:b1:9d:c0:f9:f0:b2:ce:d2:aa:1f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0922EC2833EAD17A747DBA885C8FF32611CEA72
        Validity
            Not Before: Mar  5 17:43:31 2024 GMT
            Not After : Mar  4 17:48:31 2025 GMT
        Subject: CN=B7CEE0FC76667A2F838FF4B010D749BE6722C5B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:f7:d9:9c:51:86:d3:2f:c4:fb:39:b6:24:
                    8b:54:74:d9:a3:91:41:8e:56:6b:b3:30:7f:0c:61:
                    dd:d5:22:2a:b3:09:cb:0b:6b:49:dd:22:f3:08:1c:
                    3d:86:63:eb:de:2b:79:01:56:b1:47:de:c3:dc:99:
                    73:51:92:a8:60:0c:87:b6:76:6d:bd:9e:34:f0:f0:
                    52:1f:d8:d9:a1:73:db:2c:59:a3:cf:97:71:81:f1:
                    af:3b:41:53:70:94:e0:5f:66:b9:85:c3:4a:10:ad:
                    7f:e7:60:b8:d2:9d:5c:c3:4a:4b:ef:36:8c:84:2c:
                    ff:fb:98:2d:25:d1:25:bb:6b:cb:c1:5b:f2:b7:f3:
                    49:4a:c1:de:a8:9b:a6:52:03:68:ef:05:72:3f:72:
                    a1:b4:22:6f:d4:e6:68:63:ae:26:29:11:64:ca:22:
                    f8:ec:a2:35:c3:47:d3:49:ab:f6:1a:19:66:3a:56:
                    6d:5c:a6:7d:70:96:45:49:0f:50:7d:59:7f:77:7c:
                    d5:69:6f:4e:42:e9:7d:2d:4a:04:31:52:88:31:cc:
                    0a:49:31:e7:19:52:99:58:68:51:4f:6a:4f:91:eb:
                    a7:5f:8b:f4:8b:8a:2f:4b:27:3a:bc:ce:29:9c:8a:
                    a8:75:a6:0c:1e:fb:fb:98:dd:e2:bc:b1:64:f2:66:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CE:E0:FC:76:66:7A:2F:83:8F:F4:B0:10:D7:49:BE:67:22:C5:B6
            X509v3 Authority Key Identifier:
                keyid:F0:92:2E:C2:83:3E:AD:17:A7:47:DB:A8:85:C8:FF:32:61:1C:EA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F0922EC2833EAD17A747DBA885C8FF32611CEA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5908941AC14891934A6AB9537E6AC980A20D5FEB8F41AC8436184D5C68486FC8/0/34352e37312e3230322e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:24:5a:9c:37:68:ca:2f:fa:c2:19:82:43:11:ce:96:d7:44:
         f0:b8:63:9b:8c:f6:97:2a:6c:c7:b5:ec:48:c5:32:6a:ad:3d:
         53:f6:0c:e0:a0:c9:01:19:31:c4:0d:11:a0:6a:f4:a3:b4:8d:
         41:02:a9:ce:e2:34:45:45:fb:23:9d:80:ec:88:e7:66:1e:1b:
         74:2c:09:b6:c4:38:2d:f6:ef:2c:47:ef:00:38:34:c9:d9:ae:
         55:76:73:59:ba:ee:ca:51:da:ce:6a:0a:cd:8c:53:60:02:ef:
         60:df:cc:4d:df:7b:2d:3b:eb:16:ee:40:a2:9c:fc:e8:aa:cc:
         ca:d1:46:99:70:38:77:19:cd:71:c6:12:bb:12:1d:0d:b8:32:
         e2:16:96:aa:70:99:cc:74:48:bd:5c:80:28:be:70:68:3c:7a:
         7a:81:b9:d8:fb:be:be:16:73:fe:64:bf:78:54:d5:d1:98:32:
         6a:21:ee:73:87:3a:79:5c:86:f4:de:b5:ca:5c:38:65:ed:c1:
         89:1f:da:4e:b5:a9:0b:ff:5d:98:6e:f3:45:42:7f:c1:bd:b8:
         63:aa:2d:bb:b2:d4:3f:6e:54:8a:13:7e:c6:9d:95:c7:83:9d:
         44:61:50:a6:db:62:de:a8:7e:e2:72:81:93:7c:f3:92:21:cb:
         61:8c:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:07 2024 by rpki-client on console-ams.rpki-client.org