Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e332e302f32342d3234203d3e20323636373534.roa
File:                     34352e3233322e332e302f32342d3234203d3e20323636373534.roa (raw, json)
Hash identifier:          WsxQRFjC+yOItfm37ahL0AJeiNzFYNMej/QMZ1ZMks4=
Subject key identifier:   05:88:7A:04:9C:51:CB:8D:1B:47:EF:CB:A7:C6:B4:84:49:D7:3D:08
Certificate issuer:       /CN=64E2A9B1818F618CC381651138A0484A9CB1B197
Certificate serial:       3EB87C6408DA65561D2112291E5171F16D8A7744
Authority key identifier: 64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e332e302f32342d3234203d3e20323636373534.roa
Signing time:             Wed 14 Aug 2024 20:55:01 +0000
ROA not before:           Wed 14 Aug 2024 20:50:01 +0000
ROA not after:            Wed 13 Aug 2025 20:55:01 +0000
asID:                     266754
IP address blocks:        45.232.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b8:7c:64:08:da:65:56:1d:21:12:29:1e:51:71:f1:6d:8a:77:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E2A9B1818F618CC381651138A0484A9CB1B197
        Validity
            Not Before: Aug 14 20:50:01 2024 GMT
            Not After : Aug 13 20:55:01 2025 GMT
        Subject: CN=05887A049C51CB8D1B47EFCBA7C6B48449D73D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cc:b2:64:25:91:fb:5c:6d:69:07:ec:03:aa:
                    15:ef:bc:65:d6:84:18:ad:57:58:07:e0:90:d0:05:
                    92:6f:ef:d8:8e:be:38:87:6b:60:b2:e4:4e:b9:d5:
                    81:53:17:b3:42:20:4c:87:08:69:10:0f:ac:72:b1:
                    3f:07:58:38:cb:46:46:27:88:2b:6f:0b:cc:8d:24:
                    79:18:da:3f:7d:71:1c:88:3a:a5:81:5e:46:e5:42:
                    b9:c0:12:db:cd:60:0b:7c:2a:76:fd:2a:93:aa:c0:
                    62:0c:f8:59:27:2b:a3:83:39:61:96:46:fc:89:ed:
                    4f:d4:83:e6:5e:3f:fc:ba:c2:e6:60:b1:d2:da:d7:
                    11:47:9c:24:28:6d:62:24:53:8f:99:42:aa:c5:3c:
                    81:63:07:a6:3f:f6:06:1f:04:f7:8d:ed:a4:37:46:
                    ce:c1:75:dc:ed:31:ea:49:5b:11:ae:b3:3f:b5:84:
                    13:a4:78:90:ec:d6:ba:02:54:2a:0e:d0:92:2e:53:
                    ff:37:60:2b:d0:4d:6b:f4:8f:eb:5d:94:d9:4b:a2:
                    03:44:5d:71:ba:6d:30:72:34:64:3f:e3:7c:0a:dd:
                    d3:2e:df:67:6c:03:86:5e:d3:8a:a3:39:48:98:f9:
                    bc:fd:a7:bf:a8:7b:8c:d5:17:db:83:78:11:6c:21:
                    51:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:7A:04:9C:51:CB:8D:1B:47:EF:CB:A7:C6:B4:84:49:D7:3D:08
            X509v3 Authority Key Identifier:
                keyid:64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e332e302f32342d3234203d3e20323636373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:89:ba:de:b3:6d:50:95:35:93:ea:90:4e:c4:b9:a0:33:7d:
         af:20:16:f2:60:00:5e:7d:31:97:db:a2:c2:ba:e1:62:2e:8c:
         5f:f1:ca:05:13:af:cb:9b:6b:f4:10:0e:10:70:9e:2e:5b:e0:
         e9:23:20:9c:5c:a2:ca:c7:91:2c:2b:5c:5d:dd:01:2a:8a:c5:
         e6:a8:29:2a:64:49:69:90:34:b1:88:d8:bc:39:83:4b:bd:78:
         2e:92:aa:77:94:3f:27:c2:4e:ee:16:f0:1d:7c:31:90:3b:58:
         9d:30:a5:1c:02:61:4d:5f:aa:ed:1d:f2:3b:1e:c6:29:e1:21:
         8f:40:4d:8a:09:dd:3e:e2:3d:dd:b2:3d:51:b8:75:f9:a1:d6:
         61:fa:de:25:10:78:cb:20:13:ae:78:b3:1e:d4:5c:51:80:e4:
         ae:2b:2e:38:83:93:cf:42:e6:fd:98:56:32:3c:d3:6f:6c:ca:
         e5:6f:86:a9:fd:44:8a:73:fc:fa:dc:43:2e:e3:6a:6c:00:a4:
         7f:b1:8e:e4:5b:5e:11:8b:19:1c:14:74:0c:bf:19:7a:79:1c:
         34:f6:c7:f4:b2:a2:4d:f5:0a:76:b5:11:e4:2d:37:fb:a8:fd:
         7c:8d:fe:eb:50:26:f3:64:93:96:93:87:b7:bb:a3:c9:6a:a2:
         ee:69:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org