Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34352e3136392e35322e302f32332d3234203d3e20323637373431.roa
File:                     34352e3136392e35322e302f32332d3234203d3e20323637373431.roa (raw, json)
Hash identifier:          ZaxjV8q5FcaKidPvQ5y/YZqdXwSiCPtxOD7mESo+BWI=
Subject key identifier:   6B:38:B4:6F:5F:80:30:A5:AA:AF:F3:A7:F9:C0:B6:1F:38:5A:08:B7
Certificate issuer:       /CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
Certificate serial:       10946B8B3DB93943E1ECCFF887325F44C2F17B49
Authority key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34352e3136392e35322e302f32332d3234203d3e20323637373431.roa
Signing time:             Tue 05 Mar 2024 18:11:24 +0000
ROA not before:           Tue 05 Mar 2024 18:06:24 +0000
ROA not after:            Tue 04 Mar 2025 18:11:24 +0000
asID:                     267741
IP address blocks:        45.169.52.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:94:6b:8b:3d:b9:39:43:e1:ec:cf:f8:87:32:5f:44:c2:f1:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F
        Validity
            Not Before: Mar  5 18:06:24 2024 GMT
            Not After : Mar  4 18:11:24 2025 GMT
        Subject: CN=6B38B46F5F8030A5AAAFF3A7F9C0B61F385A08B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:21:be:c3:61:20:19:a4:bd:01:98:2a:09:
                    21:7e:75:2e:b9:26:a1:f1:20:c8:c0:c5:f3:c6:0e:
                    e1:f9:85:de:6c:a0:c7:ed:24:54:b7:bf:b6:46:d9:
                    25:9c:f7:cb:39:72:32:46:5d:70:0a:84:29:9c:82:
                    f4:3a:f8:1b:8b:28:5d:20:33:b9:cf:8b:cf:ca:23:
                    2a:ff:9a:40:32:e5:60:d3:51:d9:d5:e2:b4:80:af:
                    af:1d:ab:07:39:8e:d1:96:03:b0:d0:26:13:7a:4c:
                    f6:d2:8c:18:20:94:09:ed:4e:90:c7:3d:49:a8:3b:
                    ff:99:e5:ea:58:88:1d:31:e2:a6:0f:87:f7:f0:0a:
                    b2:d3:3a:62:75:0e:1f:0f:f0:89:f3:d0:43:82:37:
                    7e:32:35:93:58:53:4f:c0:d5:aa:55:06:04:58:22:
                    1a:de:84:16:11:ed:aa:1b:6d:e9:41:a3:9c:41:da:
                    68:eb:a5:5e:3f:56:63:ab:47:3a:d7:25:bc:fc:ba:
                    2e:3d:13:e2:79:87:ab:02:46:d2:76:d0:31:8d:af:
                    89:bc:2b:be:9c:6b:91:c2:ff:df:97:ad:87:41:e3:
                    39:f0:48:23:e2:cc:77:70:b4:77:99:b9:ce:06:bc:
                    d4:57:5f:5b:50:ca:46:60:7e:a2:9e:a8:4b:35:58:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:38:B4:6F:5F:80:30:A5:AA:AF:F3:A7:F9:C0:B6:1F:38:5A:08:B7
            X509v3 Authority Key Identifier:
                keyid:34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34352e3136392e35322e302f32332d3234203d3e20323637373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:71:87:cb:7a:4e:7e:85:1b:d6:91:44:75:b2:26:42:1b:3e:
         fa:47:be:b2:3f:94:26:c7:e3:f2:69:32:07:d8:49:13:04:df:
         d6:78:93:7d:3f:a3:01:f9:8f:f4:8d:ad:54:b4:66:e3:11:43:
         e6:c1:45:b1:42:03:3a:53:33:9f:ba:58:e3:3f:4c:69:55:20:
         45:27:dc:ee:3d:d0:4c:0b:a1:83:15:04:e7:c0:13:0f:43:dd:
         15:23:2e:7f:c1:d6:89:14:0e:21:fb:76:e9:3e:b0:3e:d0:6c:
         75:77:8a:dd:41:20:83:28:6a:8f:59:f1:cf:34:12:84:65:0f:
         e4:b2:cd:3b:a0:21:cc:a7:92:e5:ba:4f:fd:f3:13:29:d5:43:
         ac:ab:c4:e1:60:57:83:07:43:ed:0b:ac:3f:f4:e8:9d:e6:40:
         82:a2:42:ef:44:b9:33:04:c3:96:c1:fb:f4:6b:43:74:d0:ba:
         16:a9:57:d3:ba:6f:1d:7e:a5:e0:88:89:9d:59:3a:af:8f:91:
         95:35:2a:18:fe:df:1a:e9:17:27:12:bf:14:21:bd:98:3e:7f:
         34:df:f6:a3:54:17:1b:f9:fa:13:55:80:a9:6e:22:88:d6:de:
         f8:96:d7:98:2e:c0:63:e4:0e:53:c4:82:5d:e9:87:a5:47:86:
         31:7f:1a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:30 2024 by rpki-client on console-ams.rpki-client.org