Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
File:                     34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa (raw, json)
Hash identifier:          usrI5sNfp+FhY1lx4raUZGoiEkj+dwqA6ZJO4j7+818=
Subject key identifier:   21:AA:A7:92:40:7B:72:9E:C2:67:E7:B3:9E:5B:7C:5B:E8:0A:1D:0D
Certificate issuer:       /CN=AA2338B66632D823F77072125112B5BF1F721769
Certificate serial:       44E1F0606A7DF8AA631E381A8602F4A3ABFD53A4
Authority key identifier: AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa
Signing time:             Tue 05 Mar 2024 18:00:05 +0000
ROA not before:           Tue 05 Mar 2024 17:55:05 +0000
ROA not after:            Tue 04 Mar 2025 18:00:05 +0000
asID:                     266819
IP address blocks:        45.237.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl
                          rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e1:f0:60:6a:7d:f8:aa:63:1e:38:1a:86:02:f4:a3:ab:fd:53:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA2338B66632D823F77072125112B5BF1F721769
        Validity
            Not Before: Mar  5 17:55:05 2024 GMT
            Not After : Mar  4 18:00:05 2025 GMT
        Subject: CN=21AAA792407B729EC267E7B39E5B7C5BE80A1D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:f3:2e:0a:b6:e9:f0:f0:08:b1:53:f7:ba:
                    98:b6:a7:1d:b4:d8:95:18:3c:20:8c:b3:ff:e1:44:
                    5b:78:3e:48:30:71:b9:1f:cc:d7:2c:7e:5c:7b:d9:
                    a9:b7:45:40:7e:d9:a1:84:18:94:2a:db:f7:d8:ae:
                    a8:30:5f:e8:25:40:7a:c3:3a:0e:4e:f4:90:60:59:
                    a8:c7:79:03:f9:3f:24:0e:6f:90:e0:77:77:50:71:
                    00:4a:60:95:70:6e:0f:e4:c2:8e:09:79:4d:20:3c:
                    a8:b3:7b:8d:7c:4b:23:33:8b:aa:83:f2:06:66:b2:
                    4c:8d:b8:57:f4:8d:c6:55:f2:d9:2e:46:a4:fa:1b:
                    21:00:2f:0a:83:33:10:4c:28:17:c8:52:13:45:3f:
                    33:8a:93:7b:e5:cc:39:3f:57:83:ff:d1:43:af:11:
                    03:c4:a8:78:4a:b6:58:5c:9c:b6:dd:88:76:12:8f:
                    f0:ac:c8:31:54:7a:ec:a4:8d:d9:d3:bb:9f:08:0b:
                    9c:8d:26:d6:e0:79:46:8a:67:6d:a9:c9:ed:45:78:
                    e2:b1:c2:56:10:06:37:08:ad:d2:0b:cf:d5:a2:6e:
                    97:ca:35:4e:f0:be:fc:ca:87:4b:67:e0:d1:0a:65:
                    a1:7e:1f:1d:47:c8:96:39:52:2b:28:54:2f:e0:f2:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AA:A7:92:40:7B:72:9E:C2:67:E7:B3:9E:5B:7C:5B:E8:0A:1D:0D
            X509v3 Authority Key Identifier:
                keyid:AA:23:38:B6:66:32:D8:23:F7:70:72:12:51:12:B5:BF:1F:72:17:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/AA2338B66632D823F77072125112B5BF1F721769.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA2338B66632D823F77072125112B5BF1F721769.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/686A87C0260F7870954C01648D3E2973239D033694AA40D98723525F21162D78/0/34352e3233372e3232332e302f32342d3234203d3e20323636383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:94:08:7a:52:2e:63:66:63:31:5f:74:85:71:6c:53:51:52:
         ff:54:cc:19:3b:bf:cb:b6:02:dc:59:10:43:94:6c:f4:4f:81:
         34:0f:33:4e:5f:10:7a:ac:d4:01:6d:40:48:4b:c9:06:9c:3f:
         b7:0e:53:e3:60:fe:6b:ee:4a:de:6f:b1:38:0b:b7:31:fb:5c:
         85:8c:17:6a:73:b7:ad:c5:13:37:66:4a:62:ab:42:92:25:a9:
         81:fb:1e:d8:39:ef:b2:95:0b:f7:54:f3:af:ad:a5:70:7c:a4:
         18:a2:81:85:da:49:3e:61:85:61:67:84:f7:9f:7b:8a:19:05:
         96:54:67:73:d3:04:f3:9f:51:0b:3e:45:b5:ec:ca:8b:08:cd:
         09:61:c0:6c:f7:13:5f:a9:a6:96:9b:b4:57:05:79:0a:12:4e:
         12:8b:00:a7:45:37:c4:44:df:ad:82:38:91:65:bb:b7:4f:e6:
         d4:d8:d1:a6:a7:d4:0c:53:78:69:0a:68:a7:61:86:0c:bc:b5:
         59:c7:31:a8:fd:1d:42:81:1d:77:34:50:fe:2e:de:4a:07:d9:
         fe:dc:b3:c1:05:95:ba:99:b3:34:a3:4b:a4:69:64:b0:d2:6a:
         2d:af:de:7c:0f:5a:8f:b4:16:64:4e:6c:c4:87:5f:db:ed:dc:
         9d:88:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:13:40 2024 by rpki-client on console-fra.rpki-client.org