Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa
File:                     34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier:          nvNwhPPRFJDLNwnw1R18px3QDjoPVGOpoef1exkRgS8=
Subject key identifier:   70:D3:3F:97:10:CB:34:BF:E3:EF:A7:72:7F:D8:56:B3:29:25:C7:F2
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       4C01A10DA45911113EC59A377C5412E8B90074AC
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa
Signing time:             Tue 05 Mar 2024 18:00:04 +0000
ROA not before:           Tue 05 Mar 2024 17:55:04 +0000
ROA not after:            Tue 04 Mar 2025 18:00:04 +0000
asID:                     266819
IP address blocks:        45.237.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:01:a1:0d:a4:59:11:11:3e:c5:9a:37:7c:54:12:e8:b9:00:74:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Mar  5 17:55:04 2024 GMT
            Not After : Mar  4 18:00:04 2025 GMT
        Subject: CN=70D33F9710CB34BFE3EFA7727FD856B32925C7F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fa:ff:b0:f5:e0:40:2a:25:d3:ef:77:79:ba:
                    81:7d:e2:c4:ca:1f:18:47:f4:99:ff:24:5e:19:92:
                    fc:d7:74:b6:ae:fa:8d:5f:6c:cf:e2:54:77:a1:29:
                    e7:44:c2:be:7b:41:52:fc:53:3c:79:cf:14:fa:73:
                    66:a2:5e:21:43:11:e0:7f:67:16:a6:da:6c:e0:28:
                    d3:9e:94:c4:ca:71:24:17:22:a5:82:0c:c3:6e:76:
                    28:67:e0:47:c3:90:8f:25:86:09:64:f1:86:ca:11:
                    12:5e:c7:02:bb:3d:80:ce:ee:23:3f:67:16:bb:a5:
                    1f:0b:aa:0c:98:ad:5f:41:36:5f:4e:0c:a0:d6:77:
                    b1:04:14:8c:52:57:66:b3:ce:31:67:e2:20:56:b2:
                    4c:93:02:fa:0a:bc:5d:4c:27:aa:97:d3:14:02:76:
                    1a:78:83:ea:c2:78:5d:e1:43:f4:8b:a4:a3:13:7c:
                    72:23:de:75:f9:85:0c:47:a6:d4:2b:09:85:b3:59:
                    f7:62:34:47:be:f2:4a:e1:ec:5c:23:aa:cd:56:c5:
                    a4:e9:7c:88:8b:6f:8a:5a:c4:fa:55:5d:91:54:d8:
                    fe:f4:a9:ae:d0:10:38:61:83:4c:ec:09:ed:60:d6:
                    0b:08:cd:fd:1b:01:13:df:a9:7e:ab:58:73:d6:74:
                    0c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D3:3F:97:10:CB:34:BF:E3:EF:A7:72:7F:D8:56:B3:29:25:C7:F2
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232322e302f32342d3234203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:17:b1:53:29:a7:fc:59:57:bb:ea:fd:4a:29:eb:f4:dc:6c:
         66:17:f3:d8:a5:c1:b8:ff:19:58:24:67:5c:7f:7e:53:09:bd:
         88:4a:2a:0b:3f:7b:2a:00:cb:a0:d8:f2:9e:85:e8:aa:9b:89:
         cb:41:ba:82:71:2e:c6:46:4c:e5:0c:e4:d8:40:c2:97:b9:f3:
         3c:bf:f2:af:72:7d:5b:94:5c:6c:bb:32:8e:3e:d8:42:9c:f9:
         bb:c3:15:e6:62:dd:74:9f:c2:6e:ea:1e:7c:b2:7f:92:93:62:
         78:02:a8:0b:c2:42:f1:0e:f8:40:09:22:17:34:26:f0:05:2d:
         50:26:83:81:5e:28:1b:a4:7c:8e:a2:be:28:da:fd:63:01:ed:
         14:73:5d:c0:17:ff:34:45:79:dd:0f:ff:63:f5:81:61:17:45:
         fb:82:66:69:0d:8c:51:88:46:4c:a1:59:76:98:16:55:d6:5b:
         74:57:f3:1a:9b:cb:2f:77:f5:ec:ac:75:fc:51:c1:a2:88:94:
         d4:94:27:15:ed:cc:0a:6b:cd:77:1f:ec:f3:8a:fe:67:6b:8f:
         4f:19:7d:21:ce:05:30:54:6d:23:c8:9b:ab:c5:26:b0:fa:53:
         27:32:de:6b:8c:4b:e6:48:0d:a3:b3:55:dd:75:2f:b5:bb:12:
         ba:b7:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:34 2024 by rpki-client on console-fra.rpki-client.org