Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa
File:                     34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa (raw, json)
Hash identifier:          I4fVZOxYhwzrqsnXyUKlaklpgW9wxbCoP+IADPdPP4w=
Subject key identifier:   8D:53:EE:95:49:D9:75:0D:97:80:BB:FD:47:E8:57:1D:AF:5B:B6:E7
Certificate issuer:       /CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
Certificate serial:       0C45CDCD7DB22CE2F02F1A8E5EB77B715402AB62
Authority key identifier: 29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa
Signing time:             Tue 05 Mar 2024 17:54:44 +0000
ROA not before:           Tue 05 Mar 2024 17:49:44 +0000
ROA not after:            Tue 04 Mar 2025 17:54:44 +0000
asID:                     265862
IP address blocks:        45.225.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:45:cd:cd:7d:b2:2c:e2:f0:2f:1a:8e:5e:b7:7b:71:54:02:ab:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294404D5D1365B2F805F2EB408D0F8D20B0AF0E8
        Validity
            Not Before: Mar  5 17:49:44 2024 GMT
            Not After : Mar  4 17:54:44 2025 GMT
        Subject: CN=8D53EE9549D9750D9780BBFD47E8571DAF5BB6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:65:7d:d1:7e:3d:48:06:f1:32:c5:22:80:
                    38:41:e3:37:c1:d8:3c:44:b5:5f:cd:2f:d9:5d:46:
                    a1:41:8d:8b:f2:da:62:31:ab:57:61:0e:24:d4:54:
                    0f:a3:fb:9e:90:23:0c:c2:25:85:b7:f3:ff:ec:a7:
                    e5:f0:ec:e5:e1:7e:e7:07:98:b1:60:37:d8:de:a4:
                    c1:55:d9:05:d6:02:65:cd:28:d6:c3:b7:c4:5f:18:
                    ca:38:c3:72:3d:52:96:29:2d:4f:af:20:4c:22:40:
                    23:c8:b8:ff:aa:52:5c:06:69:81:cc:0c:24:1e:5f:
                    f9:1a:38:5a:be:b7:66:3b:3f:df:20:57:e9:e2:93:
                    1e:fb:9a:82:33:75:a5:53:96:ac:26:b3:7d:ed:50:
                    be:bd:d2:2d:ac:05:19:b9:d4:ec:b4:2d:59:db:e9:
                    40:a9:5b:2b:85:97:22:b6:81:83:2a:c5:38:30:cd:
                    47:ac:12:9b:11:a0:e4:b4:33:f5:11:b1:ee:b1:e6:
                    ef:ad:f8:8a:71:e7:49:66:8c:f4:81:df:fe:ad:67:
                    9d:9e:73:23:6e:62:ca:2d:2e:30:f1:8d:1f:df:a3:
                    b8:eb:64:1b:01:1c:34:4d:fe:78:0a:08:c1:21:ce:
                    e3:e0:1d:c4:74:bd:44:56:0e:de:76:62:2c:8e:93:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:53:EE:95:49:D9:75:0D:97:80:BB:FD:47:E8:57:1D:AF:5B:B6:E7
            X509v3 Authority Key Identifier:
                keyid:29:44:04:D5:D1:36:5B:2F:80:5F:2E:B4:08:D0:F8:D2:0B:0A:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/294404D5D1365B2F805F2EB408D0F8D20B0AF0E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81B8FA271F836B033CA04A4A02513BBDE8656FB3993834FACC5E0C93BBF488A9/0/34352e3232352e3231362e302f32322d3234203d3e20323635383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:46:00:1d:21:63:a9:28:a0:2f:99:08:9b:2f:a6:55:ff:37:
         9b:70:c4:4e:0c:78:4c:22:de:35:31:85:c3:e7:36:48:46:1d:
         9e:71:7b:c6:2e:45:ee:4d:1a:f2:7b:d9:f6:bd:92:59:ac:e7:
         bb:29:5a:9e:6f:fc:5e:86:9d:1a:b3:fc:04:6f:9d:ff:55:4a:
         ed:1b:85:88:8a:b2:2d:be:2a:3e:42:c8:72:96:9d:d6:78:94:
         d7:de:3f:f2:c3:21:3e:42:e5:0e:c3:ed:7e:c7:76:17:35:f8:
         72:ef:00:28:d8:16:7a:63:fb:82:ac:e5:91:1d:f1:4d:7d:04:
         ee:8a:bc:c3:80:36:7f:6f:fd:3a:66:b7:8f:a3:40:80:3a:a6:
         d2:49:d8:1d:8f:bb:ed:2c:48:49:02:2e:8d:5c:54:5c:b2:47:
         dd:7e:75:91:ec:cb:e6:97:42:91:5e:43:fb:fe:ac:50:ae:ce:
         40:b2:04:41:24:ca:80:73:36:f3:d6:be:69:9b:13:35:3e:54:
         87:74:c7:14:22:8a:a5:27:b1:73:0c:b5:f7:b9:ea:e1:f7:fe:
         9b:84:da:f4:89:9f:65:ae:db:91:46:42:f8:bc:83:6e:29:65:
         77:08:72:b6:1e:52:02:09:3e:bb:e5:ea:77:12:32:0b:6c:d3:
         8f:1c:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:12 2024 by rpki-client on console-ams.rpki-client.org