Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34352e3136382e38302e302f32342d3234203d3e20323637373431.roa
File:                     34352e3136382e38302e302f32342d3234203d3e20323637373431.roa (raw, json)
Hash identifier:          i8mSudcT2yrmAVxYgdFwfsFJ1N28ITLunFawVLrx0Pg=
Subject key identifier:   DE:EC:76:9C:5D:84:47:79:0E:21:5E:A3:C5:E1:43:3B:EA:92:72:72
Certificate issuer:       /CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
Certificate serial:       3A78F725DF1FDE2656569ACBD0CE8BCA4AA5C2C8
Authority key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34352e3136382e38302e302f32342d3234203d3e20323637373431.roa
Signing time:             Tue 05 Mar 2024 18:11:24 +0000
ROA not before:           Tue 05 Mar 2024 18:06:24 +0000
ROA not after:            Tue 04 Mar 2025 18:11:24 +0000
asID:                     267741
IP address blocks:        45.168.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:78:f7:25:df:1f:de:26:56:56:9a:cb:d0:ce:8b:ca:4a:a5:c2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
        Validity
            Not Before: Mar  5 18:06:24 2024 GMT
            Not After : Mar  4 18:11:24 2025 GMT
        Subject: CN=DEEC769C5D8447790E215EA3C5E1433BEA927272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:51:63:45:37:6d:cd:06:86:ab:bd:e0:6c:
                    ea:2b:41:27:61:0a:97:58:ff:20:33:ef:f7:1c:7d:
                    a5:2d:10:fc:4e:6e:b1:45:bd:2d:c2:bf:73:c7:70:
                    ac:30:e6:60:6b:fd:4f:0c:d5:d1:22:76:22:24:65:
                    a2:9d:8a:18:b3:3b:ff:45:d5:bd:14:35:57:1f:9f:
                    0b:45:5d:30:7f:88:0e:59:28:b6:fc:00:54:40:b8:
                    53:2d:54:23:2c:7d:71:64:94:18:a8:78:6c:c5:50:
                    18:95:20:6d:0e:93:7d:e2:fa:ec:d5:5c:61:0a:bd:
                    f0:75:ca:b9:54:a4:16:10:ca:51:df:44:9b:e4:f8:
                    6e:b5:eb:6a:be:87:75:da:b9:06:40:96:72:a4:bc:
                    d0:40:f6:e8:77:b9:14:8f:06:cd:02:b2:20:f1:3b:
                    ca:6e:4a:61:4d:4d:3b:1f:35:3d:59:82:73:f7:8d:
                    53:07:8c:91:00:14:3b:9e:ad:56:66:0c:c4:33:2b:
                    7f:27:c5:fe:d1:8b:97:a6:d1:60:49:57:18:37:5e:
                    09:4f:7a:71:44:b0:0f:6e:7e:94:e2:77:fb:92:83:
                    d1:68:e9:65:c8:3e:fd:37:1b:0b:f2:74:88:8a:2a:
                    cd:22:6e:2c:9c:e1:3b:0e:d1:01:8d:e4:eb:cd:5e:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EC:76:9C:5D:84:47:79:0E:21:5E:A3:C5:E1:43:3B:EA:92:72:72
            X509v3 Authority Key Identifier:
                keyid:34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34352e3136382e38302e302f32342d3234203d3e20323637373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:d7:a9:34:90:cb:59:d5:6b:c5:8b:15:d4:20:b9:4a:af:
         fe:d6:bd:d2:de:5a:31:c3:df:9e:32:82:35:57:d1:a6:2a:db:
         6f:9b:ed:89:d0:31:1e:dd:35:11:37:fa:16:02:de:3e:e0:2b:
         dd:4c:d9:0e:02:67:c4:0b:01:47:18:e7:67:bb:73:ed:90:fd:
         21:c5:cf:ca:e5:00:fa:21:88:21:17:41:62:1f:aa:66:2a:3a:
         34:94:f8:6a:6e:02:4e:ba:e2:cf:88:73:36:48:e5:af:39:85:
         cb:fa:cf:a4:cd:cd:2b:73:97:ae:0c:c2:f2:59:95:58:b5:ab:
         32:4a:0a:3a:fd:f4:ac:5f:5d:2e:82:35:9d:31:8c:77:75:5f:
         f1:7d:94:1f:f3:26:74:3a:33:9e:84:6c:08:5a:ae:39:c1:4e:
         2d:38:41:3f:21:c9:17:d5:7b:c4:72:8c:c9:f2:c8:fa:71:79:
         2f:2c:ae:16:06:b2:cf:e4:db:4c:f2:1e:f1:83:ac:20:01:ae:
         55:e5:20:ef:89:0b:40:c3:87:cd:c3:46:32:1b:fa:55:30:cc:
         99:75:ec:12:52:7c:45:58:bb:05:21:79:53:5b:8c:0d:39:15:
         2d:27:29:1c:36:0a:21:92:8e:09:31:3b:f5:88:50:85:ea:96:
         3e:16:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:30 2024 by rpki-client on console-ams.rpki-client.org