Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32342d3234203d3e20323634383336.roa
File:                     34352e37312e302e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          pmN55QGydBw2f2x8cO/Wdj3Qts374lQkp5wJ9q4DwCE=
Subject key identifier:   3F:37:90:D9:F5:33:B8:D9:9B:DC:D1:FD:5E:C4:54:37:C1:EF:B9:CF
Certificate issuer:       /CN=7535BB4128902438F1DBC015961C2F410A3FD565
Certificate serial:       1A10FC9280400F284B0E4E5354FECBB3C8E1ADE3
Authority key identifier: 75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 17:50:24 +0000
ROA not before:           Tue 05 Mar 2024 17:45:24 +0000
ROA not after:            Tue 04 Mar 2025 17:50:24 +0000
asID:                     264836
IP address blocks:        45.71.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl
                          rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:10:fc:92:80:40:0f:28:4b:0e:4e:53:54:fe:cb:b3:c8:e1:ad:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7535BB4128902438F1DBC015961C2F410A3FD565
        Validity
            Not Before: Mar  5 17:45:24 2024 GMT
            Not After : Mar  4 17:50:24 2025 GMT
        Subject: CN=3F3790D9F533B8D99BDCD1FD5EC45437C1EFB9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:42:2f:26:8f:41:32:b5:11:25:fd:b1:ae:43:
                    86:ea:cb:6d:9d:55:b9:9f:a9:07:39:3a:37:0b:c5:
                    d3:19:ec:e4:47:3f:74:49:1e:21:5c:e8:a5:92:37:
                    c1:87:e8:7d:b5:8c:27:cb:e5:34:16:65:50:00:ec:
                    35:92:4b:38:2b:a9:7b:7e:16:3d:0c:53:4a:d5:36:
                    5a:7f:4f:d0:4f:4a:56:4e:f2:31:09:63:ea:1b:ff:
                    5f:18:06:03:96:51:7a:fe:e0:b9:ee:18:09:72:2f:
                    fd:28:8c:60:01:0b:46:30:ab:92:f7:4b:49:74:99:
                    6a:6d:7d:c0:d8:cc:da:6c:43:80:a2:e7:c5:fd:9a:
                    d7:4c:a0:85:e3:fc:fd:37:0b:19:aa:51:6f:7a:53:
                    73:00:20:7a:05:63:2d:2f:e0:97:4e:71:c3:a5:b5:
                    01:01:d2:08:1a:7b:0e:d6:9d:b3:d4:51:4e:b5:c4:
                    f0:7c:2f:98:e0:bb:fe:fb:f5:40:23:69:95:02:7a:
                    4a:7c:b3:a1:93:a5:75:49:66:aa:f7:50:71:9e:45:
                    15:df:82:09:61:a0:35:40:c0:b6:88:6f:6e:64:ee:
                    b1:bd:f6:c4:97:55:68:07:ff:4f:37:d3:41:c3:e6:
                    18:a6:58:3e:2b:b7:1b:05:03:e7:e9:b0:e2:0b:58:
                    27:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:90:D9:F5:33:B8:D9:9B:DC:D1:FD:5E:C4:54:37:C1:EF:B9:CF
            X509v3 Authority Key Identifier:
                keyid:75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:82:86:ff:91:61:09:7a:b5:01:79:14:56:60:6d:fb:57:87:
         f2:c0:75:1c:c5:36:62:e2:d2:39:30:47:bf:b9:94:39:88:05:
         40:d3:92:9c:e6:b9:8c:a0:52:54:ef:73:4a:43:2d:f9:4e:0d:
         05:ec:b1:1e:08:d9:94:2c:82:32:83:42:11:eb:30:89:bc:7f:
         47:23:47:8e:05:e4:28:a8:5d:06:7e:15:01:aa:3b:7b:35:30:
         5f:36:fe:ae:34:08:40:9b:17:b8:8b:b8:a1:d6:24:88:99:12:
         a3:17:38:c0:6d:31:c9:fd:ff:80:9c:76:83:f7:f7:4d:d6:11:
         58:8a:0a:f5:39:44:7a:02:95:0f:16:63:fa:a5:0d:e6:16:d7:
         91:36:da:06:00:6e:5f:dc:ab:28:6c:df:57:34:e3:a0:e1:d0:
         3c:a3:b9:68:a5:e4:ef:7c:a5:8f:d2:5f:6f:d2:de:69:d9:2d:
         02:ff:a1:0f:55:92:c0:6b:96:f9:26:28:c0:7f:c5:47:2a:e0:
         3f:f2:68:4a:14:38:b7:8a:d6:2b:f8:5b:2b:4b:8e:6e:06:fa:
         fa:f0:58:5f:dc:58:8c:9e:b7:7d:4a:ac:eb:f7:af:38:90:c0:
         c8:9f:08:cd:b4:9d:fb:3f:70:97:e2:d0:0e:03:71:d4:1e:3f:
         f5:32:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:25 2024 by rpki-client on console-ams.rpki-client.org