Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
File:                     34352e3233302e37322e302f32322d3234203d3e20323634383537.roa (raw, json)
Hash identifier:          uv0SNKGfHau0PsxKHa/pKoWkv0D7DOkcmSQ0K3CQVZA=
Subject key identifier:   B5:FD:2E:75:64:02:48:F4:51:FD:54:8C:6F:57:D7:46:84:7D:CE:96
Certificate issuer:       /CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
Certificate serial:       0523B00D7B211F99A402B11854FC48C4F619243F
Authority key identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa
Signing time:             Fri 19 Apr 2024 11:05:00 +0000
ROA not before:           Fri 19 Apr 2024 11:00:00 +0000
ROA not after:            Fri 18 Apr 2025 11:05:00 +0000
asID:                     264857
IP address blocks:        45.230.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:23:b0:0d:7b:21:1f:99:a4:02:b1:18:54:fc:48:c4:f6:19:24:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A400B3A5D53E4EA3825ED69A583478D86023E84
        Validity
            Not Before: Apr 19 11:00:00 2024 GMT
            Not After : Apr 18 11:05:00 2025 GMT
        Subject: CN=B5FD2E75640248F451FD548C6F57D746847DCE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:91:e3:05:ec:e4:a8:99:46:09:2f:27:06:
                    ea:58:f4:ae:04:39:66:ab:9b:14:4c:c6:c9:88:48:
                    8f:b1:68:71:82:00:70:b4:4a:86:8a:53:c2:b5:2f:
                    a3:5e:0d:bf:ab:57:ca:60:c3:5d:55:92:08:03:86:
                    4e:6b:48:ca:e6:a5:2f:44:e2:d0:f5:a8:54:51:4d:
                    96:3f:13:73:fe:c8:cc:d1:00:ce:28:73:ed:f7:00:
                    ac:a6:a4:c6:e8:ec:bb:74:a4:6e:aa:7c:f5:45:b9:
                    c5:df:51:1b:74:07:87:87:2b:0a:39:27:2b:dd:6b:
                    73:ad:51:91:e7:a5:54:5d:bf:ef:92:19:06:b6:da:
                    b3:3e:fa:23:e5:6e:85:83:81:6d:57:02:d0:22:25:
                    6b:2f:12:f3:5b:28:87:51:79:3f:78:6d:de:4e:db:
                    9e:88:87:f7:a1:f5:28:3c:39:35:87:55:96:6b:2f:
                    56:6b:cf:30:72:c3:75:a4:80:92:7e:38:0f:9d:81:
                    47:e3:95:88:6e:32:4c:c6:90:fd:fa:c1:db:2b:24:
                    bd:22:b8:85:fe:c1:90:5c:c2:f5:07:54:04:3c:70:
                    bc:62:92:a7:59:04:6b:ff:20:a1:84:4c:0f:4a:77:
                    28:22:7d:96:2e:73:b4:06:ec:8c:d6:f8:6b:c3:24:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:2E:75:64:02:48:F4:51:FD:54:8C:6F:57:D7:46:84:7D:CE:96
            X509v3 Authority Key Identifier:
                keyid:3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/34352e3233302e37322e302f32322d3234203d3e20323634383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:03:13:9a:fc:49:f8:55:3c:8d:a9:88:d2:0d:72:91:47:de:
         c1:17:04:82:df:32:e8:92:57:3d:f7:b8:72:4f:3e:35:7a:0c:
         27:35:9f:92:f0:c6:8b:ab:13:f0:45:f3:4c:77:dc:4e:9a:9e:
         d0:f1:c9:9d:18:1a:98:e1:a4:09:50:3d:ef:c7:8a:7c:bf:9c:
         aa:4e:e8:9a:eb:c0:7a:f1:6d:b4:83:30:7a:e4:22:e6:09:a5:
         35:15:a8:95:a5:af:a1:2c:3b:c1:9a:d0:63:94:f8:73:33:d7:
         06:21:1c:a7:94:d0:0b:de:61:c2:e9:4a:65:b2:f1:ea:49:3e:
         90:29:b4:bb:2e:88:5c:76:ef:d0:02:c8:03:b1:24:dd:12:62:
         05:d5:2b:e2:e0:f6:7a:80:b8:4c:4c:28:d1:61:e2:22:c6:70:
         51:a9:6e:bb:37:50:f8:8c:b7:c0:22:cc:7e:2e:e7:c4:2a:91:
         26:2a:ab:1a:6d:dc:04:8d:7e:47:52:2d:ff:9b:72:c4:40:6e:
         ee:4d:6d:d3:a1:5c:fe:18:8f:9b:88:7e:8e:84:90:bf:b6:17:
         0d:78:d8:97:c9:6e:17:f6:c8:49:b4:38:d6:8c:b0:d0:37:9e:
         c7:e9:78:fb:f1:25:0f:a1:82:64:6d:18:bc:f0:68:b2:ab:42:
         aa:8c:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org