Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4412382F090B0EB027BDCF7C46D6F198CC5C15022E569E10F0D71645F561C08/0/34352e3232392e38372e302f32342d3234203d3e20323636373238.roa
File:                     34352e3232392e38372e302f32342d3234203d3e20323636373238.roa (raw, json)
Hash identifier:          l0iO6dvpsDeqjYOPJyerUcUGbH/YhfSRF985Sg5RuTU=
Subject key identifier:   4A:68:D8:BE:E5:5C:6F:D5:9F:20:E4:C2:FF:50:30:45:87:9A:A6:9E
Certificate issuer:       /CN=A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE
Certificate serial:       7230EC39338E0F874D4511777388FA33A2457010
Authority key identifier: A3:B3:41:F8:C5:0E:7F:5D:27:2E:E8:72:F4:AE:40:F9:61:ED:BB:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4412382F090B0EB027BDCF7C46D6F198CC5C15022E569E10F0D71645F561C08/0/34352e3232392e38372e302f32342d3234203d3e20323636373238.roa
Signing time:             Tue 05 Mar 2024 18:23:23 +0000
ROA not before:           Tue 05 Mar 2024 18:18:23 +0000
ROA not after:            Tue 04 Mar 2025 18:23:23 +0000
asID:                     266728
IP address blocks:        45.229.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A4412382F090B0EB027BDCF7C46D6F198CC5C15022E569E10F0D71645F561C08/0/A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A4412382F090B0EB027BDCF7C46D6F198CC5C15022E569E10F0D71645F561C08/0/A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:30:ec:39:33:8e:0f:87:4d:45:11:77:73:88:fa:33:a2:45:70:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE
        Validity
            Not Before: Mar  5 18:18:23 2024 GMT
            Not After : Mar  4 18:23:23 2025 GMT
        Subject: CN=4A68D8BEE55C6FD59F20E4C2FF503045879AA69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:30:a7:28:e8:ef:19:a5:8f:1c:99:15:77:
                    7c:88:b8:3a:09:54:13:1f:58:4b:bc:5d:51:8f:aa:
                    64:ca:d8:a4:31:99:49:c9:45:78:51:fe:21:93:b5:
                    40:66:f5:c8:1b:a0:c4:16:58:aa:72:27:f1:d9:ac:
                    f7:6f:8d:ba:d7:68:38:15:20:ef:4c:d0:0b:6f:21:
                    d1:ec:01:bc:ee:d3:f0:a0:ca:68:e8:e4:66:7e:a5:
                    d2:82:25:fc:d6:ab:0a:10:38:b2:c5:01:a6:98:2c:
                    df:37:f0:cf:5b:79:08:03:a2:ce:30:f7:de:bf:3c:
                    79:b2:bc:41:c2:d1:bb:75:82:ee:fb:ad:c0:39:76:
                    7a:23:a1:76:66:cd:17:cf:93:ff:e0:0b:6c:6f:56:
                    11:1a:10:2b:5c:4c:cb:7e:e8:7d:39:c9:6d:d7:f6:
                    98:99:c5:d1:36:29:ab:5f:0d:21:b7:ce:5f:d4:14:
                    bd:a9:76:31:03:0e:93:4c:a3:5f:24:1b:d8:b1:d3:
                    1a:23:d4:8d:68:ca:7e:b4:0d:24:b4:e1:f0:5e:db:
                    e3:71:cb:7b:e9:99:15:f5:e3:c9:a6:55:e1:ea:5a:
                    89:11:02:60:99:9f:ca:63:15:97:0f:24:e3:ad:98:
                    2e:25:c4:ab:f4:82:75:e7:03:b9:16:0f:17:60:aa:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:D8:BE:E5:5C:6F:D5:9F:20:E4:C2:FF:50:30:45:87:9A:A6:9E
            X509v3 Authority Key Identifier:
                keyid:A3:B3:41:F8:C5:0E:7F:5D:27:2E:E8:72:F4:AE:40:F9:61:ED:BB:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4412382F090B0EB027BDCF7C46D6F198CC5C15022E569E10F0D71645F561C08/0/A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3B341F8C50E7F5D272EE872F4AE40F961EDBBDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4412382F090B0EB027BDCF7C46D6F198CC5C15022E569E10F0D71645F561C08/0/34352e3232392e38372e302f32342d3234203d3e20323636373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:b6:64:29:95:f4:35:b0:49:5a:fa:c7:d5:24:68:45:d3:
         b1:a1:e0:99:40:34:65:2a:f6:21:25:eb:7d:32:27:b2:3c:9f:
         dc:ef:8c:b9:8c:c6:dd:df:24:88:b0:67:1a:69:74:8c:9d:a4:
         b3:35:51:9b:b7:71:8c:21:5b:27:ef:0f:b6:b7:e6:39:79:e8:
         5e:a0:69:4d:98:18:eb:d3:3f:f8:83:a6:5e:f6:c6:65:35:d1:
         2b:7b:c4:ec:8b:3e:6f:8d:d2:b7:9f:74:e0:76:cf:40:51:90:
         44:12:6a:30:47:10:55:ac:31:c6:a9:73:9b:a3:c1:3b:25:7e:
         04:36:2b:c9:13:91:81:53:9e:66:65:0a:0d:de:93:ca:71:9c:
         4e:41:24:b0:b4:9e:51:94:ab:cf:b0:f5:4d:4c:b1:e5:62:4e:
         3c:cd:f2:c4:55:db:22:62:e0:20:13:5e:59:c6:8c:96:04:db:
         52:b6:8a:7a:54:b1:b4:36:a0:f4:0c:17:65:23:b6:2c:00:99:
         22:77:65:84:85:88:57:48:ec:d9:02:08:03:c0:a9:d8:fb:97:
         ec:85:76:09:dd:a2:01:10:83:8a:98:21:a5:44:6d:a8:b2:9e:
         6b:bd:ef:d6:88:c7:d3:f5:90:60:56:a2:1f:23:75:c9:bd:e6:
         9f:68:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org