Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131382e302f32342d3234203d3e20323635363834.roa
File:                     34352e352e3131382e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          chbq6OllG1JUZLgcJ56RfQFlVqbP//7DGgQKO28gOLs=
Subject key identifier:   A8:76:B2:43:05:3E:7E:F1:96:9C:D0:DF:83:E1:E7:DC:8E:14:8F:DD
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       57DEF2DC156E2B6A4C9DBDD58DD5CC5720B06BAA
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131382e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 21 Mar 2024 19:15:03 +0000
ROA not before:           Thu 21 Mar 2024 19:10:03 +0000
ROA not after:            Thu 20 Mar 2025 19:15:03 +0000
asID:                     265684
IP address blocks:        45.5.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:de:f2:dc:15:6e:2b:6a:4c:9d:bd:d5:8d:d5:cc:57:20:b0:6b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Mar 21 19:10:03 2024 GMT
            Not After : Mar 20 19:15:03 2025 GMT
        Subject: CN=A876B243053E7EF1969CD0DF83E1E7DC8E148FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:86:a1:e7:f0:9e:b1:5a:19:d6:c5:b6:67:
                    6d:92:1b:27:e3:aa:b2:5c:7c:50:94:67:54:46:33:
                    de:1e:40:23:54:43:50:66:05:22:fd:7e:2f:30:18:
                    3f:8d:71:e8:2f:8e:f1:ea:57:d1:71:14:9c:4b:b8:
                    2e:b3:c1:bb:8d:2f:63:cc:ca:7f:74:55:75:b6:04:
                    19:f7:cd:fb:f5:ba:19:18:e7:18:57:a1:64:0a:a4:
                    ed:48:7e:97:c6:4f:b2:93:cd:3e:24:b7:03:42:05:
                    84:0f:89:cf:c6:73:48:15:49:d7:cd:24:66:da:3e:
                    e1:2f:92:3e:93:19:1e:29:db:48:52:ca:a6:8f:ed:
                    92:39:c6:23:0a:73:db:e7:f0:5d:fe:d6:83:06:06:
                    24:88:2a:c1:58:34:24:8e:d8:96:ce:5e:66:64:69:
                    94:1e:d8:32:3b:e5:3f:8c:d4:24:2f:70:79:ff:e8:
                    f8:2f:95:20:11:a6:4a:01:d1:a6:54:ea:19:32:e5:
                    3d:71:09:a8:76:b9:ac:37:d6:ba:38:9b:02:53:73:
                    d3:67:59:17:d2:66:e4:23:60:44:33:ef:24:4e:27:
                    bd:e7:67:6d:d4:87:ae:77:f8:a9:4e:58:3c:c9:f0:
                    23:e1:15:9b:5d:7e:c8:c7:ad:87:45:e1:bd:1b:95:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:76:B2:43:05:3E:7E:F1:96:9C:D0:DF:83:E1:E7:DC:8E:14:8F:DD
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131382e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c7:0c:ed:d3:a8:44:12:1b:55:e7:ee:62:5d:37:ce:fe:3a:
         ad:6b:c5:4a:33:c6:37:f2:81:2e:ce:4f:2a:43:91:c7:90:6e:
         0b:ca:6b:51:2c:55:d6:c7:e2:06:19:0b:5c:b7:8e:f9:50:ce:
         25:b6:29:da:d5:72:0c:37:08:88:db:0f:df:ef:16:a6:59:33:
         d2:67:14:ef:55:11:e9:a5:78:9b:2c:40:9d:8e:3a:0f:18:a6:
         53:eb:9f:d6:b2:df:98:21:6f:0d:39:12:71:92:e2:0e:c0:a4:
         a5:a2:f9:02:81:a9:af:38:a7:04:a5:c3:7d:0a:d6:20:15:8c:
         66:07:92:55:a9:bf:81:7b:32:87:b5:81:f7:3f:4c:d8:64:49:
         e7:a5:10:87:52:e1:82:da:c4:eb:0d:18:4e:ab:48:d9:31:67:
         06:02:10:be:ae:79:0d:d0:72:3a:da:71:e2:01:81:83:fc:ea:
         a7:b3:2a:5c:72:25:f1:93:cd:de:37:d2:f3:82:71:f4:d0:4f:
         21:c9:a5:a1:03:8a:e0:e1:9b:93:e1:ec:e3:64:9d:b0:c3:e6:
         10:08:1d:1b:35:ba:9a:a2:f4:ea:e9:93:65:3a:bb:11:2c:fb:
         34:05:ec:73:55:3a:6c:25:c6:92:7e:cb:0a:d4:3e:61:67:42:
         c1:f1:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org