Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131362e302f32342d3234203d3e20323635363834.roa
File:                     34352e352e3131362e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          4GM0kZG9wMlg6AwaIW94OCGvo34Ux0I8mpuvi6onrbQ=
Subject key identifier:   AB:CF:AF:5C:52:F9:77:04:49:D6:2C:32:EC:3F:5F:DB:48:E0:A4:9B
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       1C387B66BBAFE786381207B2A787C77CB368957A
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131362e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:00 +0000
ROA not before:           Thu 21 Mar 2024 19:10:00 +0000
ROA not after:            Thu 20 Mar 2025 19:15:00 +0000
asID:                     265684
IP address blocks:        45.5.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:38:7b:66:bb:af:e7:86:38:12:07:b2:a7:87:c7:7c:b3:68:95:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Mar 21 19:10:00 2024 GMT
            Not After : Mar 20 19:15:00 2025 GMT
        Subject: CN=ABCFAF5C52F9770449D62C32EC3F5FDB48E0A49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:fa:ec:e5:11:5b:81:6d:4f:be:91:8d:d3:
                    59:0c:e7:ea:08:cd:a5:08:eb:70:18:07:b9:1e:7b:
                    37:48:88:d2:ed:77:63:6c:81:88:c2:1d:ed:54:cf:
                    8a:10:4e:cd:8e:65:dd:a4:52:29:3b:ed:b0:9f:cc:
                    8d:e4:d8:cf:30:3d:7c:0d:2f:9d:12:2c:85:b0:ff:
                    3c:74:e6:71:2e:c8:d6:98:ca:8f:22:94:f2:ff:bd:
                    1d:34:d0:d6:e6:eb:71:66:8f:c5:09:5a:a0:9b:0e:
                    6e:40:8e:f8:50:66:ea:a5:31:fe:4e:fe:d0:8e:fe:
                    96:d9:93:e6:41:4c:16:2e:04:8a:71:40:eb:a7:59:
                    f8:a8:ef:96:4d:63:f2:2f:87:9d:6c:8b:f4:ec:8b:
                    fe:5b:b9:66:98:db:39:0f:7d:5a:45:7a:14:f9:37:
                    b2:c1:80:fe:d3:6f:28:1d:46:7d:e4:5d:e8:dd:02:
                    51:ff:ff:24:f0:2c:8b:f5:c5:54:8f:fa:3d:66:41:
                    11:53:2f:2d:25:0f:65:36:cb:0a:b9:81:84:c8:e7:
                    9f:ea:9b:73:2d:d5:cd:1c:10:c9:3c:92:56:8d:9c:
                    f1:82:6a:53:82:c1:91:72:0a:38:92:e4:6c:80:66:
                    65:fa:17:32:c6:26:d3:d4:0a:28:21:b6:35:5b:89:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:AF:5C:52:F9:77:04:49:D6:2C:32:EC:3F:5F:DB:48:E0:A4:9B
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131362e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:01:b6:eb:82:e8:bc:13:8c:81:64:0f:ce:03:8a:c2:8e:
         20:ba:4d:5e:7f:7b:00:ba:69:4a:c2:c7:bf:8d:c4:6b:6c:a6:
         ef:42:c0:97:16:f3:c6:be:fd:97:b4:41:79:31:4e:ad:0c:a4:
         f7:83:a7:67:12:ae:58:ba:72:e0:0d:79:bd:2f:56:80:a1:4d:
         d1:fa:d7:f5:64:21:f0:b6:0a:06:a1:29:be:89:33:28:97:1a:
         46:20:cf:71:67:e4:0b:8c:bd:ab:9c:8c:91:14:32:e1:54:02:
         2b:56:f9:5e:59:09:f9:b2:b1:39:cc:a5:46:9e:be:cb:e7:9b:
         89:d2:93:f1:48:2e:6d:39:2b:63:f5:c7:6b:50:76:04:0d:d1:
         61:77:6b:31:9c:77:84:42:55:1a:7a:1b:65:82:a7:20:1a:b5:
         ae:ed:4d:e5:71:20:4d:2a:67:3c:f6:35:d9:6e:65:32:62:24:
         ae:bd:6d:fd:4c:c8:72:d0:95:9a:6a:73:be:24:52:9c:7f:92:
         59:7b:ca:89:0b:37:b2:cb:e1:1b:1f:92:35:38:d3:a8:82:a7:
         85:3e:e2:91:51:82:7f:76:bd:a2:95:94:ef:90:f3:d5:a2:ee:
         64:b3:4e:8b:f4:e3:3a:b2:bc:76:de:48:28:9c:04:4d:02:00:
         d8:55:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org