Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3232362e36382e302f32332d3234203d3e203237383433.roa
File:                     34352e3232362e36382e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier:          4drzUCpNFLU79E7eit5nZqr8UH2RkFM0fiOcPbHfALk=
Subject key identifier:   E3:E4:B9:1D:BB:00:A4:AD:6B:66:1B:48:AE:DE:2C:E3:FF:5A:0C:C6
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       0E0772250990ECDBB08AB2BF01C7F91A0332E966
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3232362e36382e302f32332d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     27843
IP address blocks:        45.226.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:07:72:25:09:90:ec:db:b0:8a:b2:bf:01:c7:f9:1a:03:32:e9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=E3E4B91DBB00A4AD6B661B48AEDE2CE3FF5A0CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:01:ac:66:d2:b6:91:fa:23:15:ae:49:5a:fc:
                    99:09:e5:04:10:55:a5:f1:5c:1c:c4:45:ec:04:98:
                    4f:40:78:b4:bf:1b:1e:11:c3:a9:ea:50:87:ad:0b:
                    0c:ce:a4:b2:d2:a6:4d:9c:6a:04:61:a0:9b:ae:89:
                    cc:b4:44:62:09:ab:0c:7a:53:2b:a4:fd:c4:d6:d4:
                    64:e0:75:00:d6:89:68:3a:9b:83:00:e9:5e:80:c3:
                    7a:30:dc:ab:9b:e0:1a:cd:b4:73:98:f1:91:7f:35:
                    0d:06:c6:1a:dd:3a:31:29:16:72:8f:7a:3e:20:93:
                    78:c4:87:78:07:59:2d:9a:b5:a5:dd:40:93:9d:70:
                    46:1a:1e:d1:01:d2:e6:93:2e:51:eb:87:6e:e4:dd:
                    98:5a:77:00:70:f3:e4:f5:af:7c:37:97:dd:0f:99:
                    3d:42:09:e2:f7:9d:2f:5b:c6:2e:5c:67:63:e2:31:
                    c9:14:a1:6e:60:5f:1e:69:85:67:21:6f:9a:c9:b7:
                    a2:4b:1a:29:ad:d1:d1:6d:92:0b:1d:4c:b5:c7:b1:
                    45:ba:71:c1:44:2a:fd:a4:73:fd:7b:bf:75:73:f3:
                    e2:6e:c6:21:eb:de:89:dd:b7:4b:3c:22:a7:b5:21:
                    5d:df:44:35:cb:1a:50:e5:2e:d8:b7:7e:44:62:6b:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:B9:1D:BB:00:A4:AD:6B:66:1B:48:AE:DE:2C:E3:FF:5A:0C:C6
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3232362e36382e302f32332d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:23:06:a6:69:01:08:b5:18:09:84:cd:94:5c:a6:0f:98:e2:
         66:63:41:7b:0c:ea:65:43:27:d3:24:6e:e9:ca:d0:38:a5:b1:
         aa:ed:1a:37:bb:96:1b:c0:3d:bc:8c:09:28:f9:e9:b2:d0:ca:
         65:08:5a:c9:28:f9:1b:a5:c4:be:91:e7:c8:9e:54:93:30:3c:
         b5:91:4a:2f:d4:6e:90:cc:39:a4:ec:e6:74:f0:01:3b:aa:89:
         b0:0a:2a:4e:9f:73:43:6f:ab:27:38:ca:a7:d5:5b:9f:b9:c5:
         8a:6c:68:78:4e:22:40:d3:a6:ea:cc:ef:f5:d0:a6:df:fa:ff:
         3b:35:70:6d:f8:29:6d:7c:05:b6:42:3b:8d:c1:d1:d7:25:65:
         5e:43:ab:fb:16:66:45:b8:fd:78:10:2c:04:29:d9:57:e1:55:
         6f:ea:3d:6b:f0:fa:7e:7e:6c:95:76:a1:24:f9:1b:88:05:a8:
         e6:ce:30:0d:59:ea:bd:cb:ea:87:fb:4d:03:8e:22:d8:ee:5f:
         97:78:58:fb:b3:5e:b5:9a:66:13:c9:19:28:1f:6c:d6:fa:ce:
         42:ca:7e:9e:cf:bd:da:7e:19:11:66:f9:7b:d3:81:37:59:3a:
         78:3b:2f:bb:86:4c:aa:88:5c:41:dd:7b:2c:5b:d7:0a:23:94:
         1d:d2:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org