Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa
File:                     34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier:          WDl0nJedtEmVnFeRZx5Sfg6HLFxgOrwPoGtzGNO478s=
Subject key identifier:   E0:CC:14:F7:88:1F:DF:0B:85:60:82:30:93:35:92:84:30:6D:12:D7
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       2621CEF4E2F903FC48295B939642378B91D66371
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa
Signing time:             Tue 05 Mar 2024 18:00:05 +0000
ROA not before:           Tue 05 Mar 2024 17:55:05 +0000
ROA not after:            Tue 04 Mar 2025 18:00:05 +0000
asID:                     266819
IP address blocks:        45.237.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:21:ce:f4:e2:f9:03:fc:48:29:5b:93:96:42:37:8b:91:d6:63:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Mar  5 17:55:05 2024 GMT
            Not After : Mar  4 18:00:05 2025 GMT
        Subject: CN=E0CC14F7881FDF0B8560823093359284306D12D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:4b:49:7d:16:96:0d:02:2d:8f:8f:dc:49:
                    57:c8:8a:39:f6:0e:b0:26:fa:d3:f8:e3:d0:ce:85:
                    b0:31:c8:a4:4d:16:cd:85:0b:a7:54:ca:9e:e6:e9:
                    8b:00:ea:6d:bd:cc:a6:ac:d8:8f:40:12:8e:f8:af:
                    94:dd:df:50:95:18:d3:f4:f5:e8:de:4c:a8:67:24:
                    09:13:bb:41:76:42:a3:87:b6:a7:59:92:53:6d:72:
                    d3:63:83:06:f0:f7:d6:47:2f:f9:0e:a6:1e:f4:1b:
                    1b:10:b4:8b:28:13:4d:58:51:ea:b9:79:d5:ae:55:
                    07:0f:15:50:47:04:e4:d3:54:30:2d:40:79:7e:9a:
                    71:69:7a:7c:05:8e:4b:4c:99:99:83:ea:a2:a0:57:
                    bc:e9:85:ad:3b:e4:74:27:cf:5a:96:0e:91:e3:ec:
                    49:33:f3:80:a0:0f:0c:d6:3b:8b:05:cb:ad:e5:2f:
                    a1:95:e2:c5:b9:d6:58:8c:7e:3a:1d:d3:6c:01:04:
                    d1:36:e4:fe:a9:1a:4c:fa:d7:b8:ff:bb:9c:bc:55:
                    c5:95:b4:c8:0c:15:ec:57:72:3c:5a:93:b4:32:86:
                    00:0c:e4:31:6b:8a:8e:c3:08:10:71:c8:d7:48:85:
                    20:57:24:97:ea:21:cf:8b:a7:d7:e7:28:6a:06:6e:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CC:14:F7:88:1F:DF:0B:85:60:82:30:93:35:92:84:30:6D:12:D7
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232312e302f32342d3234203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:08:fe:41:6a:a8:7c:bb:fe:84:24:d0:ab:76:36:f6:7d:c8:
         84:b8:26:ca:bf:e1:39:89:03:78:25:2b:04:aa:9c:46:57:f7:
         39:1c:11:24:98:88:0b:61:b9:a4:06:33:8d:d6:09:7d:d1:22:
         49:ac:2c:30:0c:44:99:79:dc:0d:ff:94:25:d4:85:e4:40:42:
         a4:8e:d3:fe:ca:2d:48:22:a3:e1:f7:bc:be:cc:6b:16:38:58:
         45:b6:b9:04:10:8e:48:f9:b5:11:87:c5:43:59:66:81:43:c1:
         76:3b:69:dc:1a:3e:29:24:15:40:40:b1:5c:9a:71:97:57:79:
         36:7c:7c:d8:8b:00:10:71:15:e2:98:25:11:a9:ee:6a:1e:20:
         ca:10:50:68:38:31:3f:88:98:4c:fd:2b:25:00:e2:84:34:55:
         65:20:03:df:76:9e:95:f4:29:d9:e2:fd:ca:7b:7a:42:02:7c:
         60:bf:4c:03:d5:8b:a0:e0:67:2a:10:31:d3:9a:23:32:9c:b0:
         73:cf:d0:71:9c:10:68:e1:d8:3d:e1:b8:22:9e:48:cc:e6:35:
         44:c6:ea:43:93:14:01:5c:fe:42:55:cb:03:8f:87:20:d7:90:
         38:13:9b:a4:87:9c:bb:4e:6f:08:aa:80:23:23:d3:00:e2:81:
         83:e0:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org