Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/34352e3233352e39362e302f32332d3234203d3e20323636373735.roa
File:                     34352e3233352e39362e302f32332d3234203d3e20323636373735.roa (raw, json)
Hash identifier:          9tFIW7984iFf6KsZdAHpDXqwzcWm67XFajtgwbIU89U=
Subject key identifier:   E5:95:1E:58:AE:4E:B1:5B:39:77:6D:4E:81:B2:21:59:F2:6F:8A:34
Certificate issuer:       /CN=0DE8977243535CE0F3EC273478A6A417B2521028
Certificate serial:       4365786886CD38A1E7EA04D83FB46872B55E4F2A
Authority key identifier: 0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/34352e3233352e39362e302f32332d3234203d3e20323636373735.roa
Signing time:             Tue 05 Mar 2024 18:19:35 +0000
ROA not before:           Tue 05 Mar 2024 18:14:35 +0000
ROA not after:            Tue 04 Mar 2025 18:19:35 +0000
asID:                     266775
IP address blocks:        45.235.96.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:65:78:68:86:cd:38:a1:e7:ea:04:d8:3f:b4:68:72:b5:5e:4f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE8977243535CE0F3EC273478A6A417B2521028
        Validity
            Not Before: Mar  5 18:14:35 2024 GMT
            Not After : Mar  4 18:19:35 2025 GMT
        Subject: CN=E5951E58AE4EB15B39776D4E81B22159F26F8A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3a:5a:e1:b2:ce:77:27:63:a8:07:c4:42:59:
                    70:58:c5:a5:d5:de:0a:ed:05:f3:32:b3:a7:d5:25:
                    28:c6:d2:cf:17:3c:e8:83:e9:99:94:3a:c2:22:54:
                    57:fa:15:4c:1e:de:05:e5:3d:a8:71:8c:80:9f:53:
                    9c:31:2e:49:f8:e4:f4:8e:69:43:46:40:01:27:23:
                    5e:26:3e:bc:46:28:85:28:02:79:77:2a:cf:6d:68:
                    9d:8c:11:19:0a:7c:ae:1b:58:e8:14:db:8d:a4:da:
                    e7:e9:f4:19:32:71:29:db:b0:49:19:6e:2d:5c:d2:
                    76:f3:b3:32:17:b0:47:78:00:72:d8:47:25:53:c8:
                    fd:84:e3:cf:63:03:0e:cd:ec:d9:8f:c3:2a:91:a8:
                    57:3e:98:0c:5e:07:ef:08:02:1c:76:01:2f:16:54:
                    a8:38:b7:1d:bc:33:01:29:52:0e:17:69:ef:c7:41:
                    80:6e:b0:11:e1:d8:fa:ab:db:a9:ee:9a:a6:82:02:
                    02:6b:44:c3:47:fb:e1:bc:10:cb:b7:ae:77:a0:13:
                    63:c8:1e:ad:c0:c6:b9:04:6d:ee:77:be:5c:b0:14:
                    d0:c8:b8:26:0e:1b:31:e6:28:8f:08:b1:98:74:96:
                    67:63:24:6e:81:0e:18:5c:1b:28:be:f0:39:2d:e4:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:1E:58:AE:4E:B1:5B:39:77:6D:4E:81:B2:21:59:F2:6F:8A:34
            X509v3 Authority Key Identifier:
                keyid:0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/34352e3233352e39362e302f32332d3234203d3e20323636373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:ae:56:a6:11:4c:c1:14:55:e8:f5:38:57:89:09:10:54:
         47:be:9d:ca:a4:d0:bc:57:a4:e3:66:21:0c:c6:a8:e1:71:b1:
         18:b4:78:ec:52:44:14:6f:c4:b6:f8:37:e6:a9:c8:f4:c9:f0:
         82:1e:ad:77:f2:3e:bf:3f:6d:7d:21:81:22:94:59:a2:13:e9:
         dd:9e:4c:85:20:16:9a:e6:06:a4:03:94:33:ec:af:52:55:56:
         19:03:74:d9:b7:56:de:69:30:b0:75:95:38:50:31:e7:3b:20:
         7d:ae:f2:3c:84:ce:e3:4e:1c:24:30:42:17:4d:58:6b:b7:bc:
         e4:99:57:c8:49:c3:74:3d:76:cc:27:49:17:af:c0:61:eb:35:
         e1:d9:b4:ce:00:67:69:c6:24:e2:5c:8a:cd:00:49:74:cd:4f:
         99:da:c2:d7:f0:f0:ed:45:d7:99:84:d6:0f:31:a3:15:fb:b3:
         a2:49:cb:d6:65:f4:24:59:ee:3a:81:be:29:42:6a:88:05:53:
         e4:92:9d:8e:a4:aa:18:59:c5:5c:47:5f:23:a6:6d:48:d5:e9:
         ee:66:c2:63:24:dc:3d:5d:f4:89:2c:e6:4d:15:9e:f4:05:2b:
         c9:99:cc:47:48:7f:db:9c:71:13:7b:8a:ca:19:13:dc:06:24:
         82:55:bc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:41:55 2024 by rpki-client on console-fra.rpki-client.org