Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/34352e3233362e3138342e302f32322d3234203d3e20323636383033.roa
File:                     34352e3233362e3138342e302f32322d3234203d3e20323636383033.roa (raw, json)
Hash identifier:          bh7ON42R+fGQ0maKuAd3ps71byO0eNCOl6hzY6LtarQ=
Subject key identifier:   F5:4D:1B:76:46:DF:DA:70:18:69:E1:80:CA:4A:4F:3E:25:51:74:27
Certificate issuer:       /CN=D24B0252516038C8F5AED640DCC6496F35757027
Certificate serial:       3BE3802F986F1CAA99D6FC5A0EA27CCDD7EE725D
Authority key identifier: D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/34352e3233362e3138342e302f32322d3234203d3e20323636383033.roa
Signing time:             Tue 05 Mar 2024 18:21:34 +0000
ROA not before:           Tue 05 Mar 2024 18:16:34 +0000
ROA not after:            Tue 04 Mar 2025 18:21:34 +0000
asID:                     266803
IP address blocks:        45.236.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:80:2f:98:6f:1c:aa:99:d6:fc:5a:0e:a2:7c:cd:d7:ee:72:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D24B0252516038C8F5AED640DCC6496F35757027
        Validity
            Not Before: Mar  5 18:16:34 2024 GMT
            Not After : Mar  4 18:21:34 2025 GMT
        Subject: CN=F54D1B7646DFDA701869E180CA4A4F3E25517427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:a3:b8:6b:b8:76:b1:15:d3:02:42:7a:c2:
                    06:fc:cf:16:d0:b3:07:a7:60:64:75:cc:6d:4c:14:
                    52:9d:fc:9f:65:4c:36:b4:6e:9a:86:cb:7f:90:7f:
                    3e:36:35:b5:7d:f7:df:51:64:cd:05:af:f7:1f:9c:
                    ae:1a:07:d4:41:f1:ae:94:83:47:a5:f3:77:f4:fb:
                    3c:d3:e2:d9:c6:80:fa:2a:db:cb:8c:82:20:b5:12:
                    96:27:68:2e:27:4b:39:13:72:1f:15:49:14:b3:60:
                    1c:9f:1e:1f:44:e4:52:89:e2:0d:2a:eb:80:4d:f9:
                    c4:24:c2:74:13:97:6c:df:88:b2:e3:25:fb:42:5d:
                    94:4c:e2:73:68:e4:17:a2:aa:d8:fa:b4:2f:11:17:
                    4d:f8:87:11:a3:c6:27:b1:86:ab:a4:fb:16:d6:2c:
                    9b:3a:45:88:8a:7f:0b:57:61:ce:e3:a4:36:2c:8e:
                    e3:97:27:83:83:e5:91:10:fe:d8:7d:c3:ae:32:3f:
                    3c:f6:95:13:28:f2:5d:41:f4:10:ff:8f:ce:a1:6d:
                    18:cf:c0:9d:8b:e7:f4:94:ca:1f:b3:ae:ce:ce:60:
                    2e:63:cb:a4:b1:12:ad:bf:58:04:e9:5f:60:ec:9d:
                    c8:56:16:7e:f4:87:5b:18:d1:c8:9f:7d:dc:91:0c:
                    a6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4D:1B:76:46:DF:DA:70:18:69:E1:80:CA:4A:4F:3E:25:51:74:27
            X509v3 Authority Key Identifier:
                keyid:D2:4B:02:52:51:60:38:C8:F5:AE:D6:40:DC:C6:49:6F:35:75:70:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/D24B0252516038C8F5AED640DCC6496F35757027.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D24B0252516038C8F5AED640DCC6496F35757027.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B3146CE91205F3D5C78C516967877D31CCAD3A4AF98EF52B1DCB60168D25F7E/0/34352e3233362e3138342e302f32322d3234203d3e20323636383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:a5:a0:e1:46:ce:64:4e:df:67:34:b5:98:b9:bc:7c:03:
         57:06:46:81:3c:0e:08:f4:95:84:0d:a6:29:19:0e:47:26:b2:
         97:56:8c:6e:cf:ea:5c:88:69:d0:5a:38:74:5e:5f:b8:94:c2:
         ea:83:37:97:9d:71:8e:7c:fe:4d:a8:66:dd:bd:8f:a9:7c:49:
         ff:2d:e4:06:82:9d:1b:da:9f:65:38:ba:05:b4:75:74:05:d2:
         0d:9d:8e:43:36:87:ed:a9:76:67:53:3e:18:b0:fe:78:11:d7:
         1f:8d:72:c4:dd:63:75:75:dd:48:20:96:5f:33:2e:ef:e0:ba:
         af:b6:14:75:64:0e:d5:82:f7:f6:17:fb:bb:77:9b:a5:7d:61:
         01:e9:5b:05:b0:ba:2c:a0:ca:b5:9f:d1:31:41:2b:d4:7e:47:
         a3:a6:fc:9b:0d:2d:42:82:06:0b:6c:06:97:93:f4:bc:02:c0:
         76:ec:22:c1:44:40:bd:11:d1:d1:31:aa:2f:5b:24:06:a2:fa:
         9c:3c:86:c3:43:b1:1d:06:68:a9:cd:db:06:4a:4d:b0:6a:cc:
         cf:9e:e1:65:86:12:f3:d3:b4:93:58:65:52:b3:47:6f:37:dc:
         8b:6a:74:5a:20:57:61:66:5d:7e:61:22:fa:67:f6:0b:62:ae:
         95:df:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:05:08 2024 by rpki-client on console-fra.rpki-client.org