Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa
File:                     34352e3233352e3134302e302f32322d3233203d3e203631343638.roa (raw, json)
Hash identifier:          0kUHvgfB0MbPJVPi/63pBTwY6GEr6u61bwpwiHXGa88=
Subject key identifier:   8A:C5:9E:21:B8:97:57:83:F0:5A:8F:FF:A2:B0:28:48:DE:60:C9:D3
Certificate issuer:       /CN=851D006BBDF702AC914FD79F2055A11E9699775D
Certificate serial:       28B3D9A870AE69460922FD88215E0556DE9CCE3E
Authority key identifier: 85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa
Signing time:             Tue 05 Mar 2024 17:53:15 +0000
ROA not before:           Tue 05 Mar 2024 17:48:15 +0000
ROA not after:            Tue 04 Mar 2025 17:53:15 +0000
asID:                     61468
IP address blocks:        45.235.140.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:d9:a8:70:ae:69:46:09:22:fd:88:21:5e:05:56:de:9c:ce:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851D006BBDF702AC914FD79F2055A11E9699775D
        Validity
            Not Before: Mar  5 17:48:15 2024 GMT
            Not After : Mar  4 17:53:15 2025 GMT
        Subject: CN=8AC59E21B8975783F05A8FFFA2B02848DE60C9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:cf:f1:9b:56:f6:b4:1a:dd:4c:a1:70:f0:
                    5b:f0:77:23:30:10:fa:71:f0:08:b8:b3:da:1e:3e:
                    e1:ce:f4:12:11:a8:53:1e:16:5e:8e:c0:08:05:05:
                    0f:bc:9b:88:c2:a8:a6:42:59:d9:cb:1b:b2:1f:03:
                    36:aa:f9:86:cc:97:5c:2f:83:bf:55:ec:f4:ce:b3:
                    89:f5:df:33:53:58:08:10:50:54:47:bd:13:97:75:
                    11:2e:da:32:5a:78:a0:30:24:6d:5e:b8:2e:33:fa:
                    61:b5:d1:ff:3b:63:7e:61:a4:00:63:81:da:8e:72:
                    b0:9b:20:c4:a4:ad:8a:76:7c:91:fe:80:5b:9c:46:
                    4e:21:29:ac:62:d6:51:d1:69:95:4a:9f:cc:f8:4d:
                    36:c8:af:ad:11:c6:b5:df:09:02:a8:c7:d3:3d:46:
                    13:ca:ed:a9:62:37:a5:13:55:cf:bb:fa:80:06:77:
                    57:df:04:65:93:30:95:8f:82:05:86:76:47:54:23:
                    f0:8b:e9:b0:7a:42:9f:10:aa:f3:a7:d6:37:29:eb:
                    42:31:da:2f:fb:0f:a8:52:2d:79:fa:9c:fd:a9:63:
                    69:a7:ee:f8:bf:64:1b:15:3a:0d:6c:91:37:bd:f3:
                    bc:44:ba:66:19:c1:9b:da:92:91:76:52:fc:a6:f8:
                    b5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C5:9E:21:B8:97:57:83:F0:5A:8F:FF:A2:B0:28:48:DE:60:C9:D3
            X509v3 Authority Key Identifier:
                keyid:85:1D:00:6B:BD:F7:02:AC:91:4F:D7:9F:20:55:A1:1E:96:99:77:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/851D006BBDF702AC914FD79F2055A11E9699775D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/851D006BBDF702AC914FD79F2055A11E9699775D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8242C0A5944E2456F12ABB58E2FE0AC1E5DD41D3306205E4974EDFE8EEF7D69E/0/34352e3233352e3134302e302f32322d3233203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:a5:68:c9:7b:97:91:d1:81:2a:28:28:a2:1c:cb:ac:e3:
         e6:3e:bb:92:b5:7b:ac:e4:29:96:20:b0:d1:65:04:9e:10:dc:
         8e:2b:01:9f:16:7e:b9:2d:cc:fd:03:4e:ed:71:b2:a5:1e:85:
         96:f3:79:48:a7:ee:1a:a5:cb:70:b3:7c:07:8f:11:f5:0f:fe:
         5d:81:b6:80:50:de:13:69:b2:f2:5e:93:a6:30:16:9f:d5:5c:
         7f:4b:f7:08:2f:65:51:5d:99:80:38:c6:66:c0:cf:b7:6e:0d:
         94:eb:c6:b7:fd:36:e4:2b:e9:ba:fd:dc:ee:e8:4e:2d:f1:bf:
         c7:2d:79:8c:99:29:b0:7a:f5:17:2e:f7:19:bf:db:94:c7:57:
         3f:43:e5:0f:4c:06:1e:5c:7d:a8:5f:d7:50:02:08:14:cd:85:
         09:b9:fc:eb:e6:f1:50:66:d4:94:59:ea:c8:02:7b:e1:26:c6:
         3f:59:0d:56:ac:90:9f:bc:3e:e4:4b:56:e3:24:ca:7c:02:20:
         4a:6a:34:c8:d9:46:d9:f3:6e:46:dc:ef:f6:5b:62:fa:81:15:
         ab:5b:21:a7:0c:7d:40:c5:7b:58:58:9f:df:3b:1b:51:7a:a4:
         f5:12:39:11:8a:ee:17:c5:8d:28:3c:39:d0:29:0f:e2:dd:08:
         e4:49:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org