Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32332e302f32342d3234203d3e203233343730.roa
File:                     34352e3136342e32332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          wvnS4XbsAgz9+OUCipFSnqG5kIx+6sh7ngSGcTabmW8=
Subject key identifier:   FC:47:8F:47:F6:4B:1E:D6:75:1F:7F:F6:F0:AD:D9:09:9E:C8:49:1A
Certificate issuer:       /CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
Certificate serial:       22A7EC66D294795FB328C73392AA0AE81286247C
Authority key identifier: DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32332e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Mar 2024 17:50:52 +0000
ROA not before:           Tue 05 Mar 2024 17:45:52 +0000
ROA not after:            Tue 04 Mar 2025 17:50:52 +0000
asID:                     23470
IP address blocks:        45.164.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a7:ec:66:d2:94:79:5f:b3:28:c7:33:92:aa:0a:e8:12:86:24:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29
        Validity
            Not Before: Mar  5 17:45:52 2024 GMT
            Not After : Mar  4 17:50:52 2025 GMT
        Subject: CN=FC478F47F64B1ED6751F7FF6F0ADD9099EC8491A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:e6:86:24:80:f2:2d:84:19:59:8a:0c:cb:
                    3e:11:ba:e1:8a:42:c4:f3:c1:81:dd:1a:3d:80:89:
                    e0:61:d5:0c:1e:6d:84:2a:c3:61:3e:aa:da:fa:5c:
                    b4:20:74:a5:78:b1:21:e1:5c:36:bc:00:86:55:01:
                    2a:88:7c:28:a6:22:69:c2:8e:15:94:8e:05:0c:9b:
                    a7:70:be:c5:ad:c6:1f:0f:a7:d6:1b:f6:85:26:2f:
                    45:c4:9d:d3:89:97:10:c3:e8:c5:b0:80:fe:d9:36:
                    6a:6a:12:12:18:4a:b0:c2:0a:62:35:6a:32:9e:82:
                    a3:82:03:34:f9:49:18:7a:cc:3f:30:a9:b4:64:84:
                    73:a0:c5:4d:7c:95:14:05:f4:e6:60:6d:63:3f:4e:
                    5d:8f:d9:b3:df:29:dc:6b:3f:57:4c:99:d1:75:59:
                    7e:a3:c6:e6:d3:76:f4:b1:ad:2a:12:e1:37:80:06:
                    12:a0:d4:a9:20:7e:76:4f:33:b5:00:f2:43:6b:86:
                    c2:6f:91:e9:f3:be:68:f3:b8:43:22:2a:38:b2:13:
                    c3:ae:e4:c0:f3:c5:b5:b8:84:83:e8:38:cc:43:ef:
                    f0:67:9b:3b:c5:1e:2e:81:b5:f4:02:b2:08:97:84:
                    5c:dd:03:bd:4d:b8:62:f5:0f:28:f1:a8:2e:ce:1a:
                    fa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:47:8F:47:F6:4B:1E:D6:75:1F:7F:F6:F0:AD:D9:09:9E:C8:49:1A
            X509v3 Authority Key Identifier:
                keyid:DD:FB:95:E0:3A:29:4F:DC:FC:9F:3B:70:A2:6B:CF:74:C3:A4:CD:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DDFB95E03A294FDCFC9F3B70A26BCF74C3A4CD29.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA323EACD8EE65853EA64901C0708C7E0A6C4B49E832C9EFE0C726AC07655800/0/34352e3136342e32332e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:81:9c:0a:4d:17:b3:06:d1:62:bb:86:e4:88:80:7a:63:a7:
         53:fa:cc:6a:b2:5c:1f:10:1a:c4:69:d2:e0:b5:9f:c3:2f:89:
         46:59:e9:df:68:4b:1a:7f:eb:27:6e:7e:13:7a:d7:89:7d:54:
         fe:18:5f:36:db:68:06:06:c9:5a:48:97:19:8a:82:5e:91:7f:
         d0:45:27:c5:76:40:b6:4c:cd:a3:4a:85:40:ab:99:ce:5c:d8:
         cd:8c:89:ce:b8:74:ce:1e:34:ad:59:cb:bf:25:43:4e:d2:e2:
         95:86:e4:ad:53:dc:02:de:e4:02:30:b9:3a:7c:c4:c7:12:de:
         37:a5:6e:a4:d9:04:85:d9:58:81:ea:f8:ee:62:b0:28:5b:c3:
         7f:b8:45:7d:82:b3:db:62:14:12:46:5b:da:4f:cf:ab:31:b8:
         0a:6d:77:d6:35:49:e5:d1:dc:83:73:b9:d7:a0:e4:4b:5f:2d:
         cd:92:7c:b8:57:5f:4b:1d:25:07:ae:d1:c7:5d:ec:3e:41:09:
         75:3e:91:b6:16:b5:dc:32:c3:15:f3:3c:f1:f2:d4:d3:cb:63:
         68:41:9b:d6:91:07:90:92:5b:49:95:54:21:90:ec:4f:8a:b8:
         af:4e:90:b5:95:f2:62:b7:d2:47:43:a3:50:ef:e5:f7:88:1a:
         c2:69:a5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:57:52 2024 by rpki-client on console-fra.rpki-client.org