Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e37312e33322e302f32322d3234203d3e20323731383630.roa
File:                     34352e37312e33322e302f32322d3234203d3e20323731383630.roa (raw, json)
Hash identifier:          EHPR/h3LrFfqLD2WkZMRXlnK9AVleCiw5RVXNAnzdmU=
Subject key identifier:   96:DA:7D:44:0E:09:45:2D:FC:9A:B2:8F:85:36:47:58:31:94:03:BB
Certificate issuer:       /CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
Certificate serial:       57DAC88235F3C1684E3186A71CA8E3B0B939B37D
Authority key identifier: 8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e37312e33322e302f32322d3234203d3e20323731383630.roa
Signing time:             Tue 12 Mar 2024 15:25:46 +0000
ROA not before:           Tue 12 Mar 2024 15:20:46 +0000
ROA not after:            Tue 11 Mar 2025 15:25:46 +0000
asID:                     271860
IP address blocks:        45.71.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:c8:82:35:f3:c1:68:4e:31:86:a7:1c:a8:e3:b0:b9:39:b3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
        Validity
            Not Before: Mar 12 15:20:46 2024 GMT
            Not After : Mar 11 15:25:46 2025 GMT
        Subject: CN=96DA7D440E09452DFC9AB28F85364758319403BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ba:22:b7:5f:4b:90:75:40:0e:32:63:4f:a5:
                    e1:ba:d7:f7:10:b4:db:2d:32:41:a7:ec:98:cf:1e:
                    80:4a:f8:29:62:93:08:9d:79:c7:6f:2f:4c:cd:7d:
                    71:be:76:9e:e3:13:a0:8c:00:2e:be:a6:88:ba:32:
                    d0:90:bd:c6:ec:63:c1:8e:3a:82:10:8d:af:86:b3:
                    c4:9d:a7:c0:ff:76:b9:b7:3b:6a:44:55:11:15:d0:
                    9f:51:7f:c7:ff:10:09:13:e8:3a:0d:ea:73:90:16:
                    79:02:e2:99:82:71:a4:52:73:ea:5a:ba:2c:a8:e6:
                    d0:3f:5a:27:26:1a:e5:e4:18:63:f1:e2:76:0a:9b:
                    1f:50:5c:9e:e3:0f:f1:d3:d3:60:ba:50:73:1a:1c:
                    5d:56:e8:33:a5:a9:07:13:b7:ae:6a:33:d8:83:55:
                    8f:71:5c:ba:e6:96:ee:07:fb:12:85:8c:45:57:d1:
                    d7:32:a4:b9:30:58:5a:d1:5c:1f:ed:c6:44:93:f8:
                    44:5d:a4:5b:b4:7b:f0:76:c7:8c:06:42:82:06:67:
                    d9:ff:3a:88:57:05:1b:71:5c:04:d6:eb:12:f2:70:
                    ad:d4:38:cd:b1:51:7c:06:55:f3:f6:ed:51:b9:16:
                    81:48:70:13:77:f2:bb:b7:fb:0c:cd:68:1d:84:65:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DA:7D:44:0E:09:45:2D:FC:9A:B2:8F:85:36:47:58:31:94:03:BB
            X509v3 Authority Key Identifier:
                keyid:8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e37312e33322e302f32322d3234203d3e20323731383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:71:af:64:fc:57:0e:84:55:a0:5d:17:11:d4:c6:97:63:94:
         bb:fa:2d:f1:c1:31:36:42:92:9b:82:d6:ff:c0:0f:f3:9a:02:
         53:4b:35:13:20:7e:b5:3e:0b:2c:f7:bb:cc:4a:1b:52:e7:0e:
         e8:c5:81:fd:22:b6:2e:89:25:0e:71:32:41:4c:9e:3a:6b:aa:
         14:2b:5d:ad:c3:a0:ee:97:2a:ac:29:14:85:e4:5c:14:e1:51:
         52:8c:8c:45:a9:45:5b:63:cf:db:28:6f:91:ff:76:79:51:65:
         81:67:13:2e:9e:65:fb:4b:5e:22:9e:3e:e7:3a:9a:d0:26:54:
         19:46:e1:78:5b:97:98:b7:97:3f:3c:2c:90:17:43:80:fb:55:
         4b:2e:82:78:42:d5:ed:44:34:30:f2:9f:ea:77:c2:cb:53:7a:
         71:88:c6:cd:59:d3:09:a5:5f:8d:31:a0:8e:17:7a:5e:46:b3:
         db:9a:08:b7:8d:33:45:47:97:70:44:4b:94:5a:90:33:1e:cf:
         58:46:04:ff:43:f3:0f:2f:cc:00:9a:75:c3:69:1c:e7:95:bf:
         43:97:62:6b:86:93:63:8f:81:c2:e5:b0:aa:9f:57:f8:a6:27:
         44:f2:ca:91:68:42:72:c4:48:ca:15:92:51:24:df:ba:d1:20:
         f7:48:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org