Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/34352e3232392e3234382e302f32322d3234203d3e20323636373037.roa
File:                     34352e3232392e3234382e302f32322d3234203d3e20323636373037.roa (raw, json)
Hash identifier:          rJHDa85opi6vJNJPYhwxixEShWf6HqLF3t/XV7RDLYg=
Subject key identifier:   32:24:D8:FB:30:48:72:76:6B:6F:81:79:1A:B3:AF:B0:C0:46:34:07
Certificate issuer:       /CN=9AF6F7454394FA95451475548870C004D4158E0D
Certificate serial:       30C1B40EA98C7BD42E6D0D2F18114D9FD1FAE4FD
Authority key identifier: 9A:F6:F7:45:43:94:FA:95:45:14:75:54:88:70:C0:04:D4:15:8E:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AF6F7454394FA95451475548870C004D4158E0D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/34352e3232392e3234382e302f32322d3234203d3e20323636373037.roa
Signing time:             Tue 05 Mar 2024 18:07:45 +0000
ROA not before:           Tue 05 Mar 2024 18:02:45 +0000
ROA not after:            Tue 04 Mar 2025 18:07:45 +0000
asID:                     266707
IP address blocks:        45.229.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AF6F7454394FA95451475548870C004D4158E0D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 May 2024 19:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c1:b4:0e:a9:8c:7b:d4:2e:6d:0d:2f:18:11:4d:9f:d1:fa:e4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AF6F7454394FA95451475548870C004D4158E0D
        Validity
            Not Before: Mar  5 18:02:45 2024 GMT
            Not After : Mar  4 18:07:45 2025 GMT
        Subject: CN=3224D8FB304872766B6F81791AB3AFB0C0463407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:7f:58:de:e4:78:d5:e5:f2:8b:e1:83:f8:
                    02:db:f7:66:78:7a:10:ef:7e:47:de:3e:80:bd:cf:
                    ee:8a:cc:67:e0:50:65:de:8e:f9:2b:6b:28:ed:6c:
                    42:2e:8e:02:e4:39:0c:64:7d:ca:eb:9f:8a:be:07:
                    41:60:75:56:53:5a:95:0a:a8:bf:99:4d:1e:b3:29:
                    a1:ef:45:cd:eb:3d:81:87:20:b1:52:3a:b6:bf:46:
                    4e:44:38:34:e0:25:2c:96:4f:ba:0b:25:60:ed:29:
                    b0:db:31:ea:8f:8a:f8:5a:dc:b6:3c:15:76:9f:63:
                    e9:df:8b:78:1f:ef:5f:28:ce:b4:7f:ef:21:7e:f6:
                    e2:9f:8c:71:7a:c0:8c:4f:74:42:39:98:32:8f:8c:
                    30:f8:e6:7e:d9:2d:43:91:76:b6:fc:d0:2c:86:d2:
                    94:a8:bb:83:bb:cf:3b:55:85:d0:69:70:fd:93:10:
                    df:94:c5:d9:7e:f2:56:97:70:78:1f:37:64:43:1e:
                    40:2d:56:71:96:20:e9:34:71:ae:cc:84:6c:4c:b3:
                    d6:84:e9:64:5a:eb:df:f3:89:82:49:a9:98:65:9b:
                    f8:5b:3e:04:f5:61:b4:f7:5e:6f:4a:09:c5:39:3a:
                    ac:9d:99:ca:a3:08:8a:5d:e3:94:80:ae:c2:aa:4f:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:D8:FB:30:48:72:76:6B:6F:81:79:1A:B3:AF:B0:C0:46:34:07
            X509v3 Authority Key Identifier:
                keyid:9A:F6:F7:45:43:94:FA:95:45:14:75:54:88:70:C0:04:D4:15:8E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/9AF6F7454394FA95451475548870C004D4158E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9AF6F7454394FA95451475548870C004D4158E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/839E6565384F85C294751388EE8A204384064042CFC6A40832C695670AA7E54F/0/34352e3232392e3234382e302f32322d3234203d3e20323636373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:22:e2:c0:bc:fc:3f:7c:25:24:de:90:24:81:d8:08:37:
         1d:54:08:21:38:92:d2:c5:8b:5a:a1:9c:99:a8:64:8b:2a:b8:
         eb:3c:a6:1d:01:9f:a8:55:98:04:3b:8e:a4:87:35:09:e4:85:
         1f:86:7e:75:f6:ba:e7:b5:12:70:fe:a4:6f:e7:3d:87:07:cc:
         3d:06:39:c7:3e:f7:8b:b6:6b:fa:93:0a:91:f7:8a:30:86:e5:
         e1:80:fc:de:02:a2:a5:95:63:41:7a:72:58:96:19:44:79:62:
         d6:27:95:20:86:dc:ef:8d:4a:28:86:1b:75:2b:95:93:8b:f7:
         4b:26:31:8f:e0:97:8e:40:60:7f:0c:13:cc:d2:04:e9:1a:d1:
         61:03:e2:0f:9e:22:2f:81:ff:ce:09:92:99:ae:1f:77:64:a6:
         fa:c2:71:75:c6:3c:13:d3:73:57:f9:00:a4:60:bd:f2:48:cd:
         b1:c0:46:2f:a7:40:3a:92:02:4d:25:f5:0b:ba:a6:1d:b4:f3:
         d2:90:cc:7e:7c:82:d2:cf:8b:23:ba:97:8e:67:23:38:83:8e:
         8e:19:e3:d8:e5:cb:3f:2f:23:e6:d4:58:fc:22:27:3e:36:5f:
         da:32:bc:11:3a:fe:57:65:ed:f9:47:38:e2:0f:9a:bc:ff:60:
         10:0e:83:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:56:45 2024 by rpki-client on console-ams.rpki-client.org