Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa
File:                     34352e3233322e3130362e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier:          yDRBurjC/sTBYprfXTo7PsfJ78FZRmnAW1rZfgx8ArA=
Subject key identifier:   ED:57:F6:B1:B7:0B:1B:06:CD:57:0C:0A:EE:4B:E6:17:E9:A6:5D:78
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       5EA4CE2BE04D1A6D5D3FF751E89A57C0389BCB04
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:47 +0000
ROA not before:           Tue 05 Mar 2024 17:39:47 +0000
ROA not after:            Tue 04 Mar 2025 17:44:47 +0000
asID:                     27843
IP address blocks:        45.232.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a4:ce:2b:e0:4d:1a:6d:5d:3f:f7:51:e8:9a:57:c0:38:9b:cb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:47 2024 GMT
            Not After : Mar  4 17:44:47 2025 GMT
        Subject: CN=ED57F6B1B70B1B06CD570C0AEE4BE617E9A65D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:10:6a:b2:72:ec:20:1e:a1:c5:d7:ca:ca:
                    4c:12:63:c5:98:05:cd:03:d8:7e:3c:b7:d9:a8:6d:
                    92:58:e6:0b:93:db:1a:63:a2:64:9d:96:b0:e4:a9:
                    24:61:c3:21:6d:42:e9:b1:ac:a9:30:c8:83:05:d5:
                    07:fb:98:d7:b5:ea:59:91:00:ca:59:92:c1:35:25:
                    b8:4e:70:6b:1d:0f:5f:e8:38:75:47:16:85:3a:f5:
                    0e:1c:5c:23:7b:6e:0c:80:24:4e:d9:fc:0f:50:37:
                    80:b5:e1:23:9e:90:59:f1:b3:46:bf:75:6d:59:95:
                    91:0c:c1:c6:c4:11:4b:0a:35:88:7f:f2:1e:18:83:
                    49:d4:a6:bc:7d:90:03:d8:ef:cb:22:fa:93:b6:98:
                    af:fa:fa:e4:4b:9a:90:dc:8f:a1:fa:50:e4:5a:4a:
                    95:76:f4:ee:07:15:bd:4e:3b:f8:f1:f2:31:3e:ff:
                    71:d6:35:5f:f8:94:9e:f2:72:22:a8:85:90:b0:cd:
                    07:a9:6d:13:bc:b0:a9:8a:11:c6:dc:95:43:2c:c3:
                    e5:fe:14:af:d7:70:f3:d3:cb:1a:5a:f8:7d:03:64:
                    6c:03:66:f4:ba:8a:fd:d0:48:83:d0:05:6b:0e:94:
                    f9:62:0d:46:ed:6e:14:9a:6e:4b:a0:04:01:a4:9f:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:57:F6:B1:B7:0B:1B:06:CD:57:0C:0A:EE:4B:E6:17:E9:A6:5D:78
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:af:64:0c:c7:9b:43:ed:e5:73:c4:96:02:e2:ac:9a:7b:4a:
         c4:91:f5:3d:0b:c4:26:d8:c9:32:3f:f1:fd:79:61:e1:21:26:
         0f:c2:35:06:19:4f:5f:76:12:71:f9:6c:9f:d9:23:31:7f:f8:
         28:d5:09:b9:62:11:4c:71:15:87:e8:e0:4d:70:0f:c6:7b:18:
         d1:9d:3e:8f:b7:2c:b6:2b:ab:83:b6:5b:c9:7f:72:9b:d6:dd:
         ac:12:5d:18:aa:74:20:e9:65:5c:ef:fe:f8:b5:2c:e1:14:bc:
         9b:69:09:cd:da:fc:da:23:ef:63:51:e0:7e:89:e9:b2:de:6e:
         ff:9b:43:1c:70:21:d4:f6:fb:08:73:99:72:97:27:7d:06:e5:
         5c:1b:78:7d:aa:40:e8:49:5f:f8:b6:b7:cf:39:f1:82:e9:bc:
         00:37:15:82:45:cf:10:2a:8a:3e:03:78:99:5b:b0:76:d5:cd:
         55:83:fb:e1:e9:8a:99:63:13:ae:5f:7b:5d:aa:91:64:a8:b6:
         1b:a7:3e:41:a9:27:db:de:be:d7:5a:cb:bf:c8:7e:5b:d0:3b:
         e8:f3:2e:4b:f5:5b:29:d4:21:09:11:7b:f4:89:10:82:c3:dc:
         c7:e4:39:29:4f:69:53:fa:08:20:ca:1e:fd:5a:9e:df:01:d5:
         0d:54:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:29 2024 by rpki-client on console-ams.rpki-client.org