Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e20323635373033.roa
File:                     34352e3233392e3132302e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          Zh53URCSJL1Z0oeBG/U8q9JwGAFHSm7wuGxztKDIa+o=
Subject key identifier:   0D:B1:07:E4:E6:8F:FA:F4:91:C9:A9:45:6C:E7:FA:23:0F:87:A6:00
Certificate issuer:       /CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
Certificate serial:       40F03B76FA2E401DDC83CC4712A2E18BE44B05F9
Authority key identifier: 5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 18:06:37 +0000
ROA not before:           Tue 05 Mar 2024 18:01:37 +0000
ROA not after:            Tue 04 Mar 2025 18:06:37 +0000
asID:                     265703
IP address blocks:        45.239.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f0:3b:76:fa:2e:40:1d:dc:83:cc:47:12:a2:e1:8b:e4:4b:05:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
        Validity
            Not Before: Mar  5 18:01:37 2024 GMT
            Not After : Mar  4 18:06:37 2025 GMT
        Subject: CN=0DB107E4E68FFAF491C9A9456CE7FA230F87A600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:89:c8:34:e0:ab:47:6c:27:3c:11:bd:f4:
                    b1:93:c0:fc:fb:b0:e1:a4:7b:e0:26:43:fd:ad:38:
                    73:69:23:09:e3:2c:b9:73:e5:89:bc:c9:98:10:f9:
                    70:13:1f:77:b8:48:dd:e6:4a:31:77:ef:c3:c1:4f:
                    8d:76:77:3a:97:ee:7e:14:48:66:f7:b8:b7:2a:72:
                    82:2c:84:fa:a7:83:b0:9c:e5:1a:42:58:80:da:52:
                    42:dc:b0:eb:e7:81:3c:3c:38:26:50:3e:55:37:85:
                    16:56:c2:62:74:8d:ed:82:5d:3d:2d:0c:a3:f5:a7:
                    a3:6f:2e:0d:84:a4:2d:8b:4b:6c:55:b7:af:06:a4:
                    86:3a:5d:6a:c1:89:a9:42:ec:56:9e:6a:c2:b6:fa:
                    66:26:f2:38:02:36:55:40:b1:fa:69:4e:74:67:bf:
                    78:96:61:32:1d:27:92:f1:09:73:ed:21:cc:c8:02:
                    86:98:3a:0e:af:0d:2f:05:66:52:a0:85:cd:0c:32:
                    03:3a:b7:c7:9f:83:5a:cb:57:c3:a5:1d:78:b9:d9:
                    71:86:50:0b:15:f4:9d:19:d5:46:70:44:e2:89:f0:
                    35:f5:a9:b2:4e:10:9c:00:86:dc:4c:da:5a:1f:03:
                    d9:e0:d2:18:dc:4c:df:73:bb:39:9b:3e:82:08:85:
                    d7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:07:E4:E6:8F:FA:F4:91:C9:A9:45:6C:E7:FA:23:0F:87:A6:00
            X509v3 Authority Key Identifier:
                keyid:5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:49:c3:3a:a1:1d:d5:2d:1b:fe:81:b1:e7:4f:71:14:2b:
         0e:3a:ba:9c:a5:04:be:2d:38:53:dd:64:e3:63:b7:7e:54:82:
         66:73:87:35:8a:92:b9:10:50:b3:a2:e4:8c:c8:ea:e1:ea:3d:
         4d:cb:e3:eb:8c:8e:4b:92:01:ac:91:3e:8d:12:98:61:23:73:
         bc:0e:20:47:e9:4c:44:1f:29:44:c6:3a:99:6a:a7:4b:84:4d:
         76:a7:35:5a:ba:dc:9c:1d:5f:7a:9f:ca:ff:6b:07:bc:50:c4:
         cd:9f:10:1d:f1:c2:d9:e1:3c:36:eb:c5:12:f2:4b:5d:32:0f:
         95:0c:9c:f6:50:a3:16:d3:c5:f9:27:d3:76:80:60:af:a8:1b:
         b2:fe:9e:4d:f2:6a:cd:d1:91:54:6b:ad:ee:a6:fb:62:72:a5:
         e5:70:4c:6a:18:05:73:b3:72:69:9d:56:b6:c6:bf:57:b3:00:
         60:00:a2:34:d8:64:36:2a:87:33:2b:3d:8f:21:43:66:db:d6:
         9e:c6:27:72:ee:57:79:f1:af:3a:05:f3:02:62:81:7e:4c:e2:
         02:ed:38:1f:02:1f:d8:12:8f:19:29:6b:9b:de:35:2f:e4:7c:
         36:25:22:31:56:42:0b:ab:19:9a:75:ee:c5:c2:96:4e:12:04:
         a2:f3:37:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org