Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/34352e3233322e31362e302f32322d3234203d3e20323636373431.roa
File:                     34352e3233322e31362e302f32322d3234203d3e20323636373431.roa (raw, json)
Hash identifier:          UiJUbSuRZ5JcLDozoofWMn0cxw7wm8GsR/iM/7yqsCI=
Subject key identifier:   55:58:42:C5:CC:03:C5:F5:AE:D6:70:BE:9D:49:FA:3A:1E:4A:A0:AD
Certificate issuer:       /CN=8027A3E50E5FDCA71D08341C330ECCE0474FD787
Certificate serial:       6F9A3B3394B6F7289423851A50BA46167B7C8393
Authority key identifier: 80:27:A3:E5:0E:5F:DC:A7:1D:08:34:1C:33:0E:CC:E0:47:4F:D7:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/34352e3233322e31362e302f32322d3234203d3e20323636373431.roa
Signing time:             Tue 05 Mar 2024 18:11:57 +0000
ROA not before:           Tue 05 Mar 2024 18:06:57 +0000
ROA not after:            Tue 04 Mar 2025 18:11:57 +0000
asID:                     266741
IP address blocks:        45.232.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:9a:3b:33:94:b6:f7:28:94:23:85:1a:50:ba:46:16:7b:7c:83:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8027A3E50E5FDCA71D08341C330ECCE0474FD787
        Validity
            Not Before: Mar  5 18:06:57 2024 GMT
            Not After : Mar  4 18:11:57 2025 GMT
        Subject: CN=555842C5CC03C5F5AED670BE9D49FA3A1E4AA0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:3f:55:83:93:0d:85:da:4a:26:a8:14:46:
                    89:93:38:0f:19:d8:a3:a4:6e:d4:f9:a6:6f:db:d6:
                    0b:de:99:31:d6:01:c8:93:ba:28:d4:96:6c:a1:d7:
                    a1:58:12:20:9c:6e:07:8a:7b:e3:66:ab:a6:99:7d:
                    c3:0e:66:04:e1:e7:7f:02:9f:9c:a2:ad:59:29:ad:
                    80:cb:e0:92:f2:56:0b:c1:86:b9:f8:5f:79:13:0c:
                    90:20:a5:88:c5:68:b1:69:f2:2f:b6:10:e7:80:a4:
                    bf:e2:09:82:d6:29:8f:4b:6d:9a:7a:fc:e3:b8:e8:
                    52:69:87:32:f2:85:c1:93:c2:b8:02:9a:cb:71:a1:
                    02:5f:0f:16:7b:f3:f0:bf:f0:2b:95:de:a4:5d:4e:
                    52:65:ef:a6:63:fe:0b:4f:0b:2f:97:cf:b4:44:5a:
                    ee:43:62:c0:8f:a9:c8:52:9a:4d:7c:d4:c6:e1:10:
                    eb:8e:e0:c8:45:90:1f:4a:32:08:d1:19:c0:59:d2:
                    0d:e3:4a:1b:0a:65:f7:bd:96:94:54:33:9b:45:8e:
                    86:f5:46:06:32:17:be:33:18:56:27:73:7b:7b:1e:
                    8f:de:9d:36:83:c4:16:2b:0f:88:24:13:cc:44:a9:
                    a8:62:92:d8:9d:08:5a:03:e8:3b:0a:80:33:ab:02:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:42:C5:CC:03:C5:F5:AE:D6:70:BE:9D:49:FA:3A:1E:4A:A0:AD
            X509v3 Authority Key Identifier:
                keyid:80:27:A3:E5:0E:5F:DC:A7:1D:08:34:1C:33:0E:CC:E0:47:4F:D7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8027A3E50E5FDCA71D08341C330ECCE0474FD787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DFC7F4276BB512347EF103151C45F3DA2025673AAD6FB9BBAA6819BF7893E92/0/34352e3233322e31362e302f32322d3234203d3e20323636373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:73:a7:6c:4e:4d:2b:bb:fe:7d:bd:9e:05:33:c1:a8:78:
         77:c8:01:00:6f:88:34:fe:44:6c:4f:17:c7:37:be:0e:66:63:
         a0:43:40:45:f6:21:77:69:1c:46:2c:bb:b3:db:56:05:bf:16:
         09:e8:24:91:67:21:d8:54:2a:3b:12:13:50:16:38:a3:eb:ac:
         47:c1:05:50:e3:82:37:c2:64:85:ff:28:55:2a:a7:b6:cf:f0:
         df:cc:95:7f:f1:2a:f4:eb:1d:88:85:5c:b5:ac:29:a5:88:cc:
         f3:e4:77:47:bd:9c:10:2f:0a:34:e6:5d:70:0c:bb:57:7d:d1:
         3a:e0:6f:83:d1:55:31:30:75:9c:af:7b:2d:4f:ca:c8:79:73:
         90:b9:95:70:02:8a:1e:e0:c4:30:f1:77:20:66:bf:e7:e7:50:
         ac:6f:d0:48:d4:3b:11:79:fd:52:a9:d3:a0:a4:97:79:4b:38:
         05:16:1a:db:4e:26:7a:3c:2e:fe:73:9f:12:98:1e:7e:69:3c:
         3d:58:15:e2:77:a7:bd:dd:ac:0e:8e:e0:d9:3b:22:0c:63:6f:
         1a:b9:50:9c:4f:ed:1b:e5:14:a9:26:7b:5e:a2:9b:c5:97:99:
         4e:35:f6:b9:a6:d6:e0:17:1b:01:59:dc:6b:30:c3:fa:92:02:
         85:d8:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org