Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/34352e372e3234382e302f32322d3234203d3e20323635373338.roa
File:                     34352e372e3234382e302f32322d3234203d3e20323635373338.roa (raw, json)
Hash identifier:          ujueqMRI/INqOBdJozxX3B7o1/I1TRUiE4uhl6r//SU=
Subject key identifier:   5D:4F:CE:E9:22:62:F4:C0:D0:F6:63:79:9C:08:6F:7D:2A:43:08:87
Certificate issuer:       /CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
Certificate serial:       1D2617A07EF554A05CE75EB9FADFDA8AF5D4CA81
Authority key identifier: 9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/34352e372e3234382e302f32322d3234203d3e20323635373338.roa
Signing time:             Tue 05 Mar 2024 17:44:53 +0000
ROA not before:           Tue 05 Mar 2024 17:39:53 +0000
ROA not after:            Tue 04 Mar 2025 17:44:53 +0000
asID:                     265738
IP address blocks:        45.7.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:26:17:a0:7e:f5:54:a0:5c:e7:5e:b9:fa:df:da:8a:f5:d4:ca:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
        Validity
            Not Before: Mar  5 17:39:53 2024 GMT
            Not After : Mar  4 17:44:53 2025 GMT
        Subject: CN=5D4FCEE92262F4C0D0F663799C086F7D2A430887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:27:26:eb:54:90:ba:df:d7:66:15:4e:c8:
                    c9:34:1f:7c:77:9b:0e:35:a9:bc:bd:7a:fc:5a:d9:
                    6a:0b:07:4b:fc:3d:af:99:67:7b:b9:6a:ce:ab:8d:
                    60:25:72:7f:d2:14:60:7c:58:07:db:ab:9d:0e:76:
                    66:7d:fa:ff:9d:31:f3:99:8a:48:cb:75:a5:76:bd:
                    67:f2:2e:d6:a2:e5:b3:d9:3a:f1:1e:1d:f2:81:32:
                    cc:0d:4b:cf:12:54:46:29:9d:27:eb:6e:be:bb:55:
                    18:d6:a6:c3:75:b5:1e:1c:24:49:a5:e7:59:73:28:
                    6e:86:ee:e0:ac:14:1a:1c:50:d0:72:17:02:a0:4d:
                    fc:02:b2:6d:4b:ff:b3:4d:0d:56:a3:cf:a7:d3:1e:
                    83:3a:55:a5:d3:1c:c4:9b:c9:b5:5f:a3:b2:d3:02:
                    11:3b:86:fd:99:c2:b0:08:30:c1:86:91:9a:45:cb:
                    20:c9:2d:7c:b9:b6:26:e7:29:0b:69:48:72:af:ac:
                    63:a0:af:93:c6:7e:5f:31:3b:6e:7e:59:55:87:7c:
                    95:38:05:74:86:d6:98:da:18:a0:4e:62:15:1d:c5:
                    36:7f:98:fc:b8:77:36:c4:a4:2a:4f:b9:8c:5d:73:
                    1e:55:e8:8b:24:67:14:78:91:46:b4:fd:ed:13:9d:
                    7d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:CE:E9:22:62:F4:C0:D0:F6:63:79:9C:08:6F:7D:2A:43:08:87
            X509v3 Authority Key Identifier:
                keyid:9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/34352e372e3234382e302f32322d3234203d3e20323635373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:a1:3f:eb:a7:29:ea:52:01:ac:a4:c5:8b:68:d2:9f:ac:c7:
         46:97:4b:6d:23:56:0d:4b:c6:fe:6f:50:50:8c:d8:07:3c:8e:
         98:ea:69:67:5d:e3:f1:1d:6c:48:85:9a:a9:03:e9:4d:3b:fc:
         9b:b5:aa:15:6b:38:ab:33:a9:b9:94:7c:10:2c:41:ea:6a:8e:
         4c:e7:12:5f:27:29:8e:bc:70:b6:d5:56:68:4e:14:6a:72:9a:
         0e:e1:59:ae:f9:70:63:50:c8:87:36:c0:0a:d7:a4:ea:37:cf:
         8f:aa:9e:7a:b8:8b:43:48:52:48:52:f3:10:21:bb:6a:99:4e:
         a0:9b:c3:7e:80:c5:07:5c:3e:c1:72:ae:4c:7f:28:2c:8b:68:
         fe:03:68:a7:e4:2b:ae:f7:af:33:39:18:71:6f:be:c5:5d:45:
         02:96:58:81:8c:ea:48:a2:70:d6:67:37:1c:d0:97:e9:0b:8f:
         ad:e9:ec:e4:d9:0a:45:58:a3:39:c6:85:bc:ef:8d:2b:00:73:
         9c:b4:2f:70:20:54:11:c1:35:6e:c9:5f:86:dd:e3:49:13:b2:
         e2:91:46:89:bb:30:aa:66:05:13:b4:30:3c:33:e4:1c:e6:8b:
         7f:08:09:bd:85:b4:fd:d5:56:6c:7e:44:07:26:e7:bc:88:7c:
         d7:78:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 03:58:33 2024 by rpki-client on console-fra.rpki-client.org