Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/34352e3233352e3137322e302f32322d3234203d3e203238333934.roa
File:                     34352e3233352e3137322e302f32322d3234203d3e203238333934.roa (raw, json)
Hash identifier:          jDqVg/IrcgBj3REt0zFVg4iLiAayZ2no64Ocqws2mp4=
Subject key identifier:   4E:FE:0F:53:D4:43:66:9F:B9:2A:85:F7:1D:03:CF:20:56:B6:A1:B7
Certificate issuer:       /CN=F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC
Certificate serial:       066E8C922BBC46B13413579AEF3ABEFF9B41F410
Authority key identifier: F8:D2:CD:82:6F:48:FF:E7:EC:EA:8E:C4:4B:68:0D:FE:2A:21:F8:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/34352e3233352e3137322e302f32322d3234203d3e203238333934.roa
Signing time:             Tue 20 Aug 2024 01:05:00 +0000
ROA not before:           Tue 20 Aug 2024 01:00:00 +0000
ROA not after:            Tue 19 Aug 2025 01:05:00 +0000
asID:                     28394
IP address blocks:        45.235.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:6e:8c:92:2b:bc:46:b1:34:13:57:9a:ef:3a:be:ff:9b:41:f4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC
        Validity
            Not Before: Aug 20 01:00:00 2024 GMT
            Not After : Aug 19 01:05:00 2025 GMT
        Subject: CN=4EFE0F53D443669FB92A85F71D03CF2056B6A1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ec:76:52:31:08:98:45:00:bc:07:94:74:19:
                    a2:0a:1a:3d:f8:e8:2f:57:b3:c3:6d:0f:72:c2:7a:
                    d4:db:c0:7f:c4:76:af:f3:41:79:09:b4:cb:23:b2:
                    79:2c:ff:43:ba:82:f8:2b:4b:86:50:0e:e5:9d:e0:
                    b6:69:e5:0b:c4:d7:05:be:c0:09:be:4b:dd:90:b5:
                    17:62:1a:a1:0c:d9:48:65:91:23:ff:4c:7e:5e:af:
                    86:43:53:38:23:5b:18:4a:18:73:7a:14:48:92:c2:
                    0b:af:65:4f:ad:2a:b6:dc:7a:2b:73:b0:e3:81:68:
                    ea:b3:69:4f:4f:60:56:55:7b:d9:61:f0:9a:06:3c:
                    b5:7d:f5:1d:cb:e4:cf:9d:61:8f:85:40:38:15:c4:
                    90:a8:88:e0:43:1e:4c:04:92:8e:fa:ae:81:e3:6a:
                    a1:43:17:29:bc:18:a8:8f:92:aa:bc:5e:e6:05:f0:
                    a8:02:7d:cc:9e:75:28:2b:fa:23:b4:ee:76:79:96:
                    6a:f3:69:78:1c:4e:9f:0c:be:8c:ec:6e:ea:7b:15:
                    09:f2:e5:ef:3d:1b:cb:09:9e:8b:25:17:9f:77:1e:
                    bd:28:d2:5d:ff:c7:08:3c:16:03:16:83:15:2f:55:
                    31:1e:c6:45:b6:7f:0d:d3:44:da:d4:29:07:0e:a9:
                    11:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:0F:53:D4:43:66:9F:B9:2A:85:F7:1D:03:CF:20:56:B6:A1:B7
            X509v3 Authority Key Identifier:
                keyid:F8:D2:CD:82:6F:48:FF:E7:EC:EA:8E:C4:4B:68:0D:FE:2A:21:F8:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8D2CD826F48FFE7ECEA8EC44B680DFE2A21F8CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81AEA0C3BE79184F5FD4BA05DC11E6C44E187E4DBB55F49B62AC3973D83D10D2/0/34352e3233352e3137322e302f32322d3234203d3e203238333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:6a:a0:3a:6d:56:47:d7:2c:9b:c5:d9:be:c1:f8:bf:e6:1b:
         fe:24:22:4b:21:a6:25:b8:98:13:ef:d0:ae:3d:d2:01:da:75:
         4c:65:54:76:a3:e9:4f:43:2d:79:2a:a9:bf:c5:4a:83:c3:37:
         19:2f:ba:c4:1d:1b:0a:cb:95:c2:43:fb:23:51:17:4b:2b:39:
         86:f0:1d:df:ec:82:4e:c2:de:44:1a:1c:cc:3e:c4:25:d8:cb:
         bd:ff:1f:43:af:1c:88:61:1d:dd:f6:41:10:37:3a:cb:83:62:
         c9:fc:60:ae:02:31:b9:c1:52:17:96:34:66:ae:19:34:8d:04:
         ff:0a:93:d5:0d:c2:12:42:dd:18:38:ce:f9:57:f3:7e:e2:28:
         13:f6:ba:08:ed:8a:10:d8:49:be:4d:80:bf:65:76:d6:aa:31:
         08:81:ee:e3:40:e2:6d:d0:0f:bf:57:b7:2b:a7:b2:42:37:a3:
         83:84:0c:d1:9f:22:59:70:a9:da:91:f5:d5:30:b8:19:54:ae:
         25:47:03:8e:08:8c:15:45:b6:38:b1:f7:42:39:e8:c0:d0:59:
         96:01:00:24:20:a4:b7:22:98:cd:4e:b8:e3:0c:e1:68:cc:45:
         6c:7d:f1:6a:41:7a:0d:42:16:07:f8:d4:3e:fb:58:c4:21:cf:
         64:e9:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 19:09:56 2024 by rpki-client on console-fra.rpki-client.org