Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323636373137.roa
File:                     34352e3233312e35342e302f32342d3234203d3e20323636373137.roa (raw, json)
Hash identifier:          Ic3lzhbuV+xS8Ms3jOmidlnVbq0LbsmKoq0McVU2PRc=
Subject key identifier:   5A:AA:8B:60:F2:B3:41:B7:DD:72:7E:7E:AD:F6:62:8C:BD:72:AF:FD
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       5FE0949B48626B9FD370173773DB436725761B2A
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323636373137.roa
Signing time:             Tue 05 Mar 2024 17:41:16 +0000
ROA not before:           Tue 05 Mar 2024 17:36:16 +0000
ROA not after:            Tue 04 Mar 2025 17:41:16 +0000
asID:                     266717
IP address blocks:        45.231.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 14:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e0:94:9b:48:62:6b:9f:d3:70:17:37:73:db:43:67:25:76:1b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Mar  5 17:36:16 2024 GMT
            Not After : Mar  4 17:41:16 2025 GMT
        Subject: CN=5AAA8B60F2B341B7DD727E7EADF6628CBD72AFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:70:7e:da:9e:8a:38:8f:61:40:3d:0a:b8:
                    a9:31:cc:25:3f:be:1d:5d:f9:1a:6f:ab:c0:94:cf:
                    68:96:b0:a3:38:c7:99:63:07:e0:4a:3f:88:a6:a8:
                    0f:f5:93:0f:be:17:a4:71:50:ac:cb:37:56:c6:79:
                    1a:83:70:4f:bd:34:6d:2b:97:85:3a:85:b9:c2:97:
                    88:cd:c3:f2:56:0b:53:b0:69:b4:bf:c1:9c:04:83:
                    da:d0:4b:42:43:03:ad:85:1e:bd:83:97:88:8e:12:
                    64:81:5c:bb:fb:06:18:71:2d:02:ec:e0:2d:05:d9:
                    88:f4:bd:5c:00:f2:40:c0:23:60:87:92:44:a3:74:
                    5d:7a:5b:e3:73:b7:8b:d4:91:5f:58:30:f3:04:66:
                    de:f1:9a:0f:d9:05:73:3a:16:90:bb:38:c6:6e:3a:
                    37:56:b7:e3:27:55:ee:4d:df:b3:3e:e2:30:2c:c7:
                    db:13:53:ac:28:ba:66:fa:bc:ac:08:60:31:0a:ef:
                    d5:bb:e8:c1:4d:8d:3c:be:14:54:84:47:cb:12:a0:
                    d3:af:ab:da:ff:e1:bd:ff:82:55:a0:77:4b:d9:6b:
                    da:9b:ac:b4:e3:6d:dc:b2:21:e6:8e:39:55:a9:b5:
                    7d:40:de:b9:66:0b:e6:5b:78:b7:60:4a:a3:58:90:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AA:8B:60:F2:B3:41:B7:DD:72:7E:7E:AD:F6:62:8C:BD:72:AF:FD
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323636373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:60:d3:85:9b:0d:27:59:14:13:ad:a0:ea:70:e1:2b:e8:7f:
         98:b5:a9:d3:3b:4f:01:6b:7b:70:e7:f6:2f:14:32:ba:06:69:
         fd:73:2a:06:87:6a:10:35:7b:5c:0b:8e:37:76:cd:54:a1:9f:
         11:80:e8:18:5c:4d:83:b8:fb:b2:c2:16:0c:da:86:9b:75:16:
         d4:30:9b:bb:04:80:5d:86:b0:3c:1f:5f:b6:c2:10:cb:d8:77:
         d7:74:d2:1f:52:ca:ca:ad:0e:4f:6b:7f:ac:4a:5a:6b:6d:65:
         c3:1e:f3:6d:2d:65:49:89:17:4d:c7:bd:80:d3:4f:1e:db:a6:
         7d:86:5f:19:dd:0e:8e:95:e2:45:92:64:81:62:89:b1:36:37:
         dd:00:c1:36:c8:73:6a:69:76:da:33:17:83:d1:7d:cd:b5:22:
         24:f6:30:5a:d2:a9:ce:e8:36:d9:db:23:e9:65:83:56:e3:6e:
         33:2e:ee:88:e9:d0:a0:ae:79:54:89:5a:07:68:e9:2b:3f:60:
         6a:a2:86:57:37:34:9d:55:5f:7a:be:3e:4b:c6:03:dd:25:af:
         77:36:59:7c:92:cf:d5:f1:d9:60:4f:01:29:7b:36:bc:e7:b8:
         30:94:8b:7b:2b:4e:de:dd:e0:18:d3:e6:7d:1c:2e:e3:d7:78:
         36:c0:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:28:26 2024 by rpki-client on console-fra.rpki-client.org