Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3133312e302f32342d3234203d3e20323636363838.roa
File:                     34352e3232392e3133312e302f32342d3234203d3e20323636363838.roa (raw, json)
Hash identifier:          LNHZt9cBa+LBw6JE89RP6OByb+WiPOTkhjPhFOd5JZU=
Subject key identifier:   43:A8:C8:4E:1E:3D:52:2C:8F:F1:33:02:30:65:1D:81:BD:22:5C:F0
Certificate issuer:       /CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
Certificate serial:       5E52DD67768F161A1075D4646CA65531448AA69D
Authority key identifier: 65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3133312e302f32342d3234203d3e20323636363838.roa
Signing time:             Tue 05 Mar 2024 17:48:55 +0000
ROA not before:           Tue 05 Mar 2024 17:43:55 +0000
ROA not after:            Tue 04 Mar 2025 17:48:55 +0000
asID:                     266688
IP address blocks:        45.229.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:52:dd:67:76:8f:16:1a:10:75:d4:64:6c:a6:55:31:44:8a:a6:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
        Validity
            Not Before: Mar  5 17:43:55 2024 GMT
            Not After : Mar  4 17:48:55 2025 GMT
        Subject: CN=43A8C84E1E3D522C8FF1330230651D81BD225CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:19:68:79:c3:67:80:24:76:c4:aa:de:32:
                    74:72:aa:34:60:89:29:be:93:4d:4f:7f:4b:78:1d:
                    cc:a6:1c:93:be:1d:89:d9:f6:bb:3e:19:84:66:e9:
                    09:78:70:33:ae:05:03:a2:c2:08:71:cb:a9:47:b6:
                    13:2a:09:88:d6:4d:de:7f:1b:e1:80:28:d1:6b:ac:
                    34:e5:85:59:a3:df:c2:d9:d2:b9:74:93:01:85:90:
                    76:59:82:6f:65:1f:6e:a6:0a:11:65:5c:bb:5a:f7:
                    47:6a:9d:15:6c:6a:90:8e:ed:21:7f:28:c8:4f:d8:
                    9d:13:cc:4e:e2:28:b7:ec:a6:60:5d:26:3c:8f:a3:
                    df:f0:d9:ca:25:ba:41:be:c4:6d:a1:38:94:22:2e:
                    17:b7:46:f6:bb:c4:93:7f:b4:d5:e7:e1:8b:ea:dc:
                    38:00:ec:5d:3f:9d:a1:e2:74:89:ac:5f:5c:49:72:
                    a2:56:73:be:60:e8:ad:1f:54:b1:7a:0d:3b:8a:a8:
                    50:2f:61:4c:4b:69:0f:6f:2f:66:04:5d:68:50:0c:
                    74:6d:e0:40:1d:9d:a7:e3:e2:22:cf:3c:22:e6:f6:
                    0d:a2:83:8d:ad:ae:8b:f0:b1:17:af:d2:fd:56:50:
                    6c:d2:14:98:cb:43:1a:2c:06:89:b8:22:17:09:83:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A8:C8:4E:1E:3D:52:2C:8F:F1:33:02:30:65:1D:81:BD:22:5C:F0
            X509v3 Authority Key Identifier:
                keyid:65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3133312e302f32342d3234203d3e20323636363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d7:39:e4:d3:73:e8:f5:97:b1:80:0c:eb:ba:b9:fe:4d:e3:
         ed:4a:4d:b3:7f:bb:28:98:ce:cf:91:df:06:d8:4d:20:7d:0c:
         48:4b:97:26:f7:3d:ea:da:18:ac:16:63:59:13:a2:7d:0f:44:
         c5:14:df:77:58:df:bb:b4:fa:c0:96:77:5a:d4:b3:c5:07:48:
         eb:85:70:d8:f2:2e:87:83:11:4c:c5:33:ed:c3:03:7c:76:c3:
         31:14:5e:6c:5e:7a:ad:95:d4:aa:de:b3:6f:82:79:d1:61:7b:
         6d:3f:f2:be:2d:36:d0:30:27:14:47:76:5d:1f:5f:b9:19:df:
         49:e8:0d:99:2d:02:4b:98:9b:ed:c5:9b:80:1a:09:86:e5:61:
         aa:cb:05:b3:18:22:87:cf:f4:d2:6a:49:00:be:05:e7:bf:62:
         10:69:8f:2d:f0:71:9e:bf:fa:26:25:00:b8:78:6c:0e:0c:c8:
         eb:aa:e0:b4:69:2e:42:40:90:24:0c:ef:63:c5:f9:49:7e:30:
         aa:13:92:3d:79:1b:98:17:12:85:a8:73:37:0d:ad:1b:29:8f:
         69:02:c0:c3:e3:12:0f:26:33:0b:b1:5e:23:8f:49:2f:80:3a:
         50:68:1d:8b:aa:d4:11:a5:58:8b:d0:d3:17:03:b8:af:45:21:
         3b:d7:3a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:19 2024 by rpki-client on console-fra.rpki-client.org