Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/34352e36382e302e302f32322d3234203d3e20323731383031.roa
File:                     34352e36382e302e302f32322d3234203d3e20323731383031.roa (raw, json)
Hash identifier:          J+Vhi/H2IIIwJ46HhJTTkvFJ6JeRfn+SgABd3wsvrtg=
Subject key identifier:   D0:96:83:58:9B:3A:5E:57:F6:A8:94:56:B1:56:DE:36:58:4A:A1:C3
Certificate issuer:       /CN=351DE46C026FDAE43B8CF33874035663B8897F33
Certificate serial:       7D7FA8797AAAAF1AE7B40436E53E18F19D764253
Authority key identifier: 35:1D:E4:6C:02:6F:DA:E4:3B:8C:F3:38:74:03:56:63:B8:89:7F:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/351DE46C026FDAE43B8CF33874035663B8897F33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/34352e36382e302e302f32322d3234203d3e20323731383031.roa
Signing time:             Tue 05 Mar 2024 17:41:18 +0000
ROA not before:           Tue 05 Mar 2024 17:36:18 +0000
ROA not after:            Tue 04 Mar 2025 17:41:18 +0000
asID:                     271801
IP address blocks:        45.68.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/351DE46C026FDAE43B8CF33874035663B8897F33.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/351DE46C026FDAE43B8CF33874035663B8897F33.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/351DE46C026FDAE43B8CF33874035663B8897F33.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7f:a8:79:7a:aa:af:1a:e7:b4:04:36:e5:3e:18:f1:9d:76:42:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351DE46C026FDAE43B8CF33874035663B8897F33
        Validity
            Not Before: Mar  5 17:36:18 2024 GMT
            Not After : Mar  4 17:41:18 2025 GMT
        Subject: CN=D09683589B3A5E57F6A89456B156DE36584AA1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:84:56:74:76:00:ea:d3:b3:d2:d5:e1:6e:
                    d6:43:9e:23:c2:9a:d3:32:b2:32:05:5f:63:2d:0d:
                    0e:ad:42:71:77:75:09:d8:82:8a:4b:5d:8d:90:41:
                    9f:1e:76:8e:0f:e7:82:fd:90:b2:89:56:8a:e5:31:
                    bf:88:2f:d4:ce:1c:9d:f7:38:8e:71:8f:df:1e:b2:
                    8f:0c:5d:28:e9:f1:e7:65:c4:e5:ad:ed:6b:34:12:
                    7a:0c:db:39:a8:99:c0:43:fa:3a:9b:44:93:49:e3:
                    1d:50:e7:ad:a7:74:99:ef:b3:1f:7e:da:b8:c6:23:
                    28:59:ca:77:73:b1:41:d5:30:c5:f5:04:86:45:25:
                    d0:71:2c:aa:17:51:49:08:0b:7f:fa:e6:7a:59:3a:
                    9f:9c:da:c5:db:c2:9d:42:20:da:df:d4:fa:77:42:
                    b8:c3:2e:07:7a:84:5f:d2:36:c3:86:cd:6f:5f:e0:
                    33:3b:cf:5c:df:ff:9f:9c:e0:03:33:9c:6a:b2:74:
                    6a:05:b4:b1:da:7a:5e:de:17:4c:0f:f1:41:fa:39:
                    c1:b2:19:1f:75:26:b4:7e:bd:d5:5f:54:b1:7c:71:
                    7b:f1:86:dc:00:bc:6d:7b:14:35:1e:af:20:0d:66:
                    08:c4:89:03:75:23:6c:2e:ea:b3:25:a8:96:96:94:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:96:83:58:9B:3A:5E:57:F6:A8:94:56:B1:56:DE:36:58:4A:A1:C3
            X509v3 Authority Key Identifier:
                keyid:35:1D:E4:6C:02:6F:DA:E4:3B:8C:F3:38:74:03:56:63:B8:89:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/351DE46C026FDAE43B8CF33874035663B8897F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/351DE46C026FDAE43B8CF33874035663B8897F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE366AC214D05CAA9079C6C34982C270177125F8DD550350B581F469E25860F6/0/34352e36382e302e302f32322d3234203d3e20323731383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:bf:92:22:32:f3:0e:f5:c5:d9:ca:a8:26:9c:ff:55:25:3a:
         4e:1f:ea:aa:7e:c0:5a:6b:2a:d9:b3:e4:3b:5d:5a:05:89:4c:
         53:5e:6f:3d:25:77:0c:b2:c9:04:ef:e5:9a:8b:ab:4a:2c:d9:
         c6:0e:80:d3:23:2b:db:d0:dc:cb:9c:ac:6a:a3:a4:2e:d7:9d:
         01:a2:82:62:49:dd:cd:b2:9c:43:81:2b:c4:44:a2:cc:40:4b:
         94:de:b3:e2:af:41:ef:c4:b7:a7:da:60:71:0a:bd:97:5d:6b:
         ea:e4:5d:71:68:6e:75:74:f0:5c:e4:1a:d6:d8:24:ad:28:a2:
         be:74:c6:6f:65:b2:70:78:05:ac:0a:56:bd:56:0a:4a:bb:ef:
         38:e0:9b:c6:35:d0:b6:fc:90:d3:2b:cb:36:19:4f:89:3b:7a:
         90:bd:de:4e:00:f5:19:0b:5f:88:ff:31:19:5e:32:11:dd:01:
         8f:6f:31:29:07:5e:95:af:26:3d:6f:fb:82:b5:85:98:49:7b:
         6f:8f:d8:dc:93:49:1a:e4:fb:49:bf:64:0f:00:59:3a:60:e0:
         bd:8b:23:03:77:7a:8b:a2:15:be:cc:d3:75:69:37:e1:df:c4:
         3c:5f:74:7e:3c:4e:84:3e:0d:d0:09:f8:76:7b:16:d3:fe:ac:
         63:33:7f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org