Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa
File:                     34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa (raw, json)
Hash identifier:          vajbyWMznsWG0792qb8ruMgIlZFjV9IZeW3h4KRse2g=
Subject key identifier:   84:E8:BE:4C:16:C4:B6:7F:84:67:E1:25:F9:92:55:05:37:F2:23:84
Certificate issuer:       /CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
Certificate serial:       181C2D9430F9E34FCF426E8F02B00D2DDBD86E25
Authority key identifier: 84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa
Signing time:             Tue 05 Mar 2024 17:58:45 +0000
ROA not before:           Tue 05 Mar 2024 17:53:45 +0000
ROA not after:            Tue 04 Mar 2025 17:58:45 +0000
asID:                     265587
IP address blocks:        45.175.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1c:2d:94:30:f9:e3:4f:cf:42:6e:8f:02:b0:0d:2d:db:d8:6e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B85E7C8440D8BCDD3888C76D6D297CB010C64E
        Validity
            Not Before: Mar  5 17:53:45 2024 GMT
            Not After : Mar  4 17:58:45 2025 GMT
        Subject: CN=84E8BE4C16C4B67F8467E125F992550537F22384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:44:ff:e4:2f:1f:5a:4d:48:98:c6:68:fc:
                    21:10:77:ed:a8:1f:c8:1c:2d:69:eb:27:f8:4b:76:
                    90:36:67:8f:06:e9:8c:c7:2e:63:9b:8f:36:ac:c2:
                    9c:cd:7e:f8:7b:d1:37:57:e2:d2:9b:e7:c9:19:3c:
                    08:c0:02:a7:81:3c:f3:d2:89:e3:81:87:fc:83:28:
                    0e:6e:e3:e1:45:c1:22:47:8d:da:d5:13:e3:dc:76:
                    d0:46:90:21:dc:64:4c:ce:43:8b:ae:a6:be:f2:fd:
                    06:db:c0:e5:96:07:e1:cc:2b:0f:2f:e9:d2:a0:9f:
                    e1:fd:d2:26:e4:cc:c5:7c:d3:b6:c7:2a:3a:44:7c:
                    82:5b:b9:4a:45:98:ec:8b:25:27:f8:64:47:7c:48:
                    59:c0:15:73:47:09:f3:8d:5d:26:d7:67:ae:55:d4:
                    99:3c:d7:17:b1:d3:1e:7f:da:72:dd:c1:83:51:dd:
                    1a:69:f7:2f:fc:82:48:88:15:18:c3:94:ab:ab:38:
                    1f:4c:b3:3b:e5:c4:6e:eb:b3:64:db:23:2a:54:47:
                    a3:48:fe:73:01:7d:7d:67:56:c6:49:2f:d5:06:d1:
                    b4:fe:8a:82:67:9a:39:fa:dd:f9:6d:4b:75:c5:10:
                    48:66:0d:9f:5c:e8:09:1e:0f:65:11:23:f2:89:64:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E8:BE:4C:16:C4:B6:7F:84:67:E1:25:F9:92:55:05:37:F2:23:84
            X509v3 Authority Key Identifier:
                keyid:84:B8:5E:7C:84:40:D8:BC:DD:38:88:C7:6D:6D:29:7C:B0:10:C6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B85E7C8440D8BCDD3888C76D6D297CB010C64E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86FC589D7E403528717A3E02F14EB7F36D3F41553527658FEBACA0AF860CA720/0/34352e3137352e3233362e302f32322d3234203d3e20323635353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:87:a7:27:b9:dc:dc:ca:52:61:a3:3e:7e:b3:d4:de:81:
         09:5a:52:ca:17:8d:67:bf:c9:5d:c1:ee:de:8b:f0:3d:7a:80:
         a8:f9:03:ba:62:68:29:69:26:da:87:37:52:32:44:68:9b:d5:
         5e:c3:31:d9:02:04:5f:2c:c3:a2:9d:9a:86:28:68:63:a9:bf:
         7d:9c:98:f2:93:42:6c:0f:4b:c4:73:7a:ec:0c:7d:ce:57:4e:
         ae:52:f5:45:58:81:b0:2a:61:24:4f:79:bc:3a:d2:39:6b:8b:
         73:f1:a9:53:54:83:1d:44:7a:fd:0e:16:65:8c:8e:cc:83:12:
         75:e6:21:2b:2f:e2:56:20:1f:b4:47:45:49:90:d1:5b:0c:ca:
         13:31:d7:84:74:2c:50:91:29:83:66:7d:8d:66:52:40:67:0c:
         03:10:70:51:78:91:b1:fa:75:01:26:bd:19:b9:67:0e:93:0f:
         c0:76:24:17:04:a3:b9:e4:8f:5a:47:ba:ca:75:cf:ce:f1:4a:
         af:d1:77:a2:18:92:98:9f:36:46:ba:eb:ec:d8:b6:f0:da:4a:
         0e:36:35:bb:7d:97:ad:09:5a:0e:ff:bf:db:bc:ff:79:1a:2d:
         56:3a:19:07:c0:28:c8:90:81:72:c4:22:99:62:40:e7:e3:1b:
         14:1b:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:35 2024 by rpki-client on console-fra.rpki-client.org