Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/34352e3233332e3134322e302f32342d3234203d3e20323636373831.roa
File:                     34352e3233332e3134322e302f32342d3234203d3e20323636373831.roa (raw, json)
Hash identifier:          ma0xZ0JrCpUtnw1+n+rSOjNoZRUj94y4GHT/Kff0FsI=
Subject key identifier:   EF:3C:C5:0E:5B:33:3A:73:7D:6D:08:EB:00:8F:11:CD:36:AD:DF:49
Certificate issuer:       /CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
Certificate serial:       63CD183D0FFAE6D5A1639B21B416794A6D8F07D0
Authority key identifier: 74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/34352e3233332e3134322e302f32342d3234203d3e20323636373831.roa
Signing time:             Tue 05 Mar 2024 18:20:28 +0000
ROA not before:           Tue 05 Mar 2024 18:15:28 +0000
ROA not after:            Tue 04 Mar 2025 18:20:28 +0000
asID:                     266781
IP address blocks:        45.233.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cd:18:3d:0f:fa:e6:d5:a1:63:9b:21:b4:16:79:4a:6d:8f:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483
        Validity
            Not Before: Mar  5 18:15:28 2024 GMT
            Not After : Mar  4 18:20:28 2025 GMT
        Subject: CN=EF3CC50E5B333A737D6D08EB008F11CD36ADDF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:58:6a:4a:df:6b:70:66:4b:42:e4:d1:9f:
                    3e:cd:76:da:62:66:8c:fc:db:83:47:02:29:43:11:
                    ec:c8:1f:91:d8:f5:31:35:3c:8f:79:b5:3a:8c:8a:
                    c6:e1:bf:45:5b:78:c0:56:2e:18:cc:90:60:11:2c:
                    91:e3:2c:a2:d8:a3:35:68:45:a5:c0:0d:f6:d0:28:
                    9a:40:1f:ae:e6:bb:93:a2:db:83:14:32:d7:32:0e:
                    ad:d3:8b:6b:93:0a:d7:3d:e6:ee:c0:33:f9:bc:d0:
                    44:ec:70:97:c0:61:f3:83:da:eb:08:6f:41:b5:ae:
                    9c:62:4f:25:cf:74:92:c7:77:f7:06:39:0b:c0:53:
                    b2:28:2b:8a:f0:89:81:05:89:c5:b1:62:b5:d1:7c:
                    a1:d3:87:0e:c6:4b:3d:41:4f:13:3c:03:a3:1f:c2:
                    db:a5:7c:98:f2:46:0d:42:fa:44:e0:80:eb:32:b6:
                    5c:57:6d:74:be:1f:d1:55:ce:ea:cb:0f:c8:ac:4a:
                    24:d7:7e:61:bd:d0:c9:0a:f4:c5:77:26:87:12:16:
                    bd:2f:90:9d:bc:59:c4:bf:2d:3b:02:ec:6c:57:10:
                    66:78:e4:44:20:e0:e4:64:4f:2f:a6:96:f1:58:b7:
                    2f:0a:fa:a1:8e:42:cd:48:3e:af:32:91:97:76:14:
                    32:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:C5:0E:5B:33:3A:73:7D:6D:08:EB:00:8F:11:CD:36:AD:DF:49
            X509v3 Authority Key Identifier:
                keyid:74:AA:43:08:C5:C1:EF:C7:C5:C0:06:F2:CC:6F:5C:7B:E6:02:14:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74AA4308C5C1EFC7C5C006F2CC6F5C7BE6021483.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E732833F41857046EBB8A6ED12B3D4652A7292DCF8898F1C2CD76DE48B54B04/0/34352e3233332e3134322e302f32342d3234203d3e20323636373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:55:78:e7:b4:f9:f8:b2:b7:af:20:8f:87:cc:ff:fa:c7:
         4f:5b:29:e7:62:d1:90:80:03:7e:ab:16:23:20:8f:2e:86:c6:
         0b:32:87:c3:c3:fe:ba:45:d9:7e:4a:86:30:36:ae:dc:ae:e5:
         08:fb:bc:5c:c3:77:f2:c5:e5:7a:08:cc:bf:c1:fb:78:48:d5:
         62:5b:05:d6:d5:23:a5:a1:77:2a:67:4b:d9:87:94:ff:cc:67:
         3c:a3:d9:b4:c2:61:64:a7:84:53:c3:42:39:98:d8:71:4f:fc:
         f1:15:00:ce:b0:20:b8:ad:e6:27:a1:b9:48:64:c4:cb:61:de:
         e8:69:44:7f:48:97:65:86:75:a8:8c:da:b5:db:d0:5f:85:8c:
         00:4c:f3:4e:e7:56:c3:fa:3f:ca:0b:b1:00:4b:47:c3:4e:60:
         2a:ce:67:50:d9:3f:0e:ce:c6:84:a6:84:0b:03:fd:52:42:4f:
         76:44:b4:37:31:25:ec:8f:59:93:1e:7d:d9:ff:65:c2:27:82:
         91:05:50:f1:82:e6:b4:df:98:7b:91:05:7c:b1:fb:35:3d:92:
         ad:63:c6:ec:17:ef:44:a2:7e:dd:9a:cc:d9:4e:4c:9a:c3:34:
         4d:92:d3:24:c5:5a:74:7e:a6:19:43:1c:3f:19:05:82:c0:d0:
         9e:66:e4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org