Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38382e302f32342d3234203d3e20323731383932.roa
File:                     34352e3136322e38382e302f32342d3234203d3e20323731383932.roa (raw, json)
Hash identifier:          EacXrUK4uOUVfx5+VAfnoERb6r5wxSExHlgBF6eBpRU=
Subject key identifier:   8B:DB:7E:29:23:37:CC:22:8A:5F:AF:20:E5:9C:BD:10:F0:78:BC:67
Certificate issuer:       /CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
Certificate serial:       0D6C039D906A463B785BDFDAB2BCAB86FF568BDF
Authority key identifier: CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38382e302f32342d3234203d3e20323731383932.roa
Signing time:             Tue 05 Mar 2024 17:43:05 +0000
ROA not before:           Tue 05 Mar 2024 17:38:05 +0000
ROA not after:            Tue 04 Mar 2025 17:43:05 +0000
asID:                     271892
IP address blocks:        45.162.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6c:03:9d:90:6a:46:3b:78:5b:df:da:b2:bc:ab:86:ff:56:8b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC
        Validity
            Not Before: Mar  5 17:38:05 2024 GMT
            Not After : Mar  4 17:43:05 2025 GMT
        Subject: CN=8BDB7E292337CC228A5FAF20E59CBD10F078BC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:86:cb:47:83:03:bb:6c:a5:16:63:48:c7:
                    5e:d2:4c:32:db:2c:7b:6d:12:ea:a4:a0:b1:4e:ce:
                    6d:40:61:e9:0c:61:5f:52:e7:b5:8c:31:a1:3f:fd:
                    0b:1f:a0:b4:46:fb:28:7e:9e:4f:29:ba:14:1b:47:
                    0e:a9:c1:19:43:d0:a5:49:6a:69:19:3c:5c:af:a6:
                    67:b8:59:06:2a:60:0d:6b:43:b9:82:20:ac:48:63:
                    8d:43:8c:72:d3:46:52:21:2d:1d:91:7b:18:8c:ac:
                    aa:76:91:a7:5f:90:85:89:3e:0c:41:e8:b4:2f:26:
                    98:8c:f7:f7:00:b9:44:0a:84:f6:3a:2f:5e:7c:4b:
                    72:1b:c5:42:ed:d8:3a:b3:f5:e8:ef:c9:07:2e:29:
                    79:8e:7d:3f:80:1b:50:48:8b:72:bd:89:e0:ec:0c:
                    b5:97:8e:46:56:8e:66:48:fe:fa:51:fd:7e:a2:f1:
                    83:bb:91:9f:62:7e:7f:c2:93:98:37:4d:49:f3:49:
                    16:0e:47:b9:4d:8f:59:88:f0:5e:ff:c4:d8:e9:e6:
                    ed:f3:2f:2e:6e:4c:3b:8e:bc:dc:18:45:c7:39:94:
                    b9:6c:3f:6a:01:7a:50:77:01:3f:57:79:e8:be:aa:
                    ea:2f:6d:2b:b0:46:70:5d:73:d4:a6:43:08:81:1b:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:7E:29:23:37:CC:22:8A:5F:AF:20:E5:9C:BD:10:F0:78:BC:67
            X509v3 Authority Key Identifier:
                keyid:CA:3F:AF:C2:E5:5B:DF:D3:3A:26:03:F6:83:9D:05:EC:F5:2A:2C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA3FAFC2E55BDFD33A2603F6839D05ECF52A2CEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98BF5B30C834ABA56A689AEC6631F7C2D8E257D4AD18A41FDCDC08C151AC26CC/0/34352e3136322e38382e302f32342d3234203d3e20323731383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:c2:dc:62:7e:33:28:1e:35:d9:3a:81:de:37:3f:57:ed:40:
         14:ad:e0:34:f1:c0:88:5d:6d:27:58:a3:4d:20:6d:eb:a4:d0:
         12:d5:f0:6c:39:32:c6:b6:91:8a:50:c2:36:db:d4:3c:64:02:
         f5:a2:d1:7e:dc:f9:d0:c6:3f:6d:58:89:da:5b:9a:7b:f4:f4:
         e5:ab:56:26:3d:25:4a:a6:06:e6:02:06:2f:19:a8:71:10:ec:
         10:ba:0f:e0:6e:2d:d8:1f:27:06:ba:f5:20:72:0f:35:c2:23:
         88:cf:17:67:cf:9e:9e:03:d1:db:9b:99:78:02:76:0b:17:53:
         f1:71:d6:5f:22:dd:32:90:a0:3c:11:57:36:fe:77:c7:4a:44:
         bd:ce:b3:cc:fc:ae:6f:9a:e2:36:32:9c:73:d3:b4:d7:2c:ec:
         de:ec:62:ce:69:75:b3:3c:5d:e5:0d:fa:b6:1e:c7:4d:8e:a8:
         78:a7:f7:43:2f:d8:2e:69:d2:48:a8:f7:5d:3c:08:fa:e8:5c:
         ab:23:6e:2a:e1:5f:1e:89:8d:bc:f3:d9:30:f5:75:f9:ae:4f:
         76:86:5e:a3:c3:96:69:78:95:18:8f:52:e4:57:f2:75:73:c8:
         00:06:9f:a9:b8:3c:29:7b:70:b3:b1:26:3b:22:f7:58:c3:d4:
         ff:47:84:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org