Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa
File:                     34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa (raw, json)
Hash identifier:          DsFIvZn1R9AbJ31NaHsoKkJGzN1jzHluXcrwXXFtGEE=
Subject key identifier:   CB:28:5A:31:B6:3B:97:7F:2B:1B:8B:1B:3A:13:A2:43:60:40:1B:79
Certificate issuer:       /CN=C097077D00F9B394156695ADC73EFDCF74721DB1
Certificate serial:       062EBA07814CE659C14EF3ADE5F15B0EFA5EC2ED
Authority key identifier: C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa
Signing time:             Tue 05 Mar 2024 18:19:42 +0000
ROA not before:           Tue 05 Mar 2024 18:14:42 +0000
ROA not after:            Tue 04 Mar 2025 18:19:42 +0000
asID:                     266765
IP address blocks:        45.234.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:2e:ba:07:81:4c:e6:59:c1:4e:f3:ad:e5:f1:5b:0e:fa:5e:c2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C097077D00F9B394156695ADC73EFDCF74721DB1
        Validity
            Not Before: Mar  5 18:14:42 2024 GMT
            Not After : Mar  4 18:19:42 2025 GMT
        Subject: CN=CB285A31B63B977F2B1B8B1B3A13A24360401B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:22:c5:ae:9d:c7:f2:0e:a0:d4:79:46:28:e8:
                    a7:e7:f1:35:bc:df:7f:a5:66:21:9a:ec:f5:cc:1c:
                    9c:d3:29:e2:56:0d:c4:bf:ff:d0:b8:cb:6c:0f:d4:
                    44:60:9c:85:1c:4c:9f:f6:72:10:ee:1e:e8:6b:ce:
                    de:02:65:d2:c8:a9:17:b9:59:7c:ca:57:47:81:2c:
                    63:3e:99:0c:54:80:cc:09:61:d6:13:28:67:62:9d:
                    ee:4e:8a:9e:7d:e4:01:78:60:09:b0:2b:06:f3:05:
                    de:e2:54:ce:43:9d:19:31:d2:5f:9f:a1:d1:4f:e0:
                    8e:92:c9:0d:bb:d3:2f:27:13:c3:87:91:5c:a3:a6:
                    05:3e:7d:96:43:7f:9f:50:7b:47:69:18:4c:cb:d1:
                    bf:92:aa:f8:83:28:8e:24:42:7a:f7:b4:ec:bc:14:
                    14:79:ba:2a:af:34:5b:88:bc:2f:98:74:1d:1e:b9:
                    4d:83:e5:d9:75:05:98:b1:55:c0:c4:03:ab:6b:97:
                    47:f5:96:65:64:b4:a8:f3:15:1c:07:65:42:eb:e2:
                    65:0a:7b:80:ba:5b:8e:2f:7a:47:27:f7:da:bb:6a:
                    69:49:06:6a:35:13:71:27:70:42:b0:31:79:3c:5b:
                    0b:82:b0:98:03:05:41:2b:53:de:35:77:f8:a1:34:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:28:5A:31:B6:3B:97:7F:2B:1B:8B:1B:3A:13:A2:43:60:40:1B:79
            X509v3 Authority Key Identifier:
                keyid:C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:22:02:03:cd:b8:b6:09:2d:57:bb:a9:ec:e4:76:34:e1:
         52:dc:45:23:ad:d5:a4:db:b7:24:1c:78:3d:1f:e6:11:d5:5a:
         6a:e8:a9:1e:96:a7:21:a6:f1:68:30:2f:0c:a7:e3:74:81:28:
         03:c9:6c:7d:56:b1:8c:bd:0e:73:28:e5:66:67:4e:fd:46:a7:
         f9:72:d8:3d:17:61:5e:a0:9a:39:a1:28:e1:f6:29:49:e6:42:
         4b:4b:fa:a3:c8:07:a8:8a:0c:e1:e9:8f:0f:6e:12:83:61:7c:
         6c:79:18:51:7a:16:b3:1e:be:69:e8:73:f1:6a:27:09:68:8a:
         35:a8:69:48:de:05:25:1f:a8:1d:f7:ff:a3:f6:23:b6:6f:ee:
         8a:04:36:aa:8c:ff:5d:c9:49:b7:07:01:6b:3a:d5:e8:21:8b:
         70:12:9d:41:d0:6b:fb:f3:8d:79:69:e5:98:fc:97:72:ec:6a:
         09:14:1b:a4:fa:18:08:16:70:d4:53:8d:6b:5c:ed:39:10:df:
         58:00:99:49:6c:2b:bc:ad:dd:fa:4d:3f:b6:39:ae:48:76:03:
         42:99:80:0f:e6:01:71:e8:ec:ed:57:21:8b:6d:23:f2:a6:74:
         f1:95:07:35:0a:ad:87:6f:ab:65:08:c2:49:fa:6d:fc:8c:37:
         38:b2:5c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org