Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e20323636383532.roa
File:                     34352e3233392e3132302e302f32322d3234203d3e20323636383532.roa (raw, json)
Hash identifier:          2nKOuT9VlyuNKRBQ/HFwnhoA3QI8k0LIDHz2PfnHHl8=
Subject key identifier:   DB:D3:BB:1D:DA:FB:DB:B1:8D:FC:31:B8:F3:7D:FB:84:B7:A4:A5:10
Certificate issuer:       /CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
Certificate serial:       32EE229151DA0F6C134930422FE84A7A61D18F56
Authority key identifier: 5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e20323636383532.roa
Signing time:             Tue 05 Mar 2024 18:06:36 +0000
ROA not before:           Tue 05 Mar 2024 18:01:36 +0000
ROA not after:            Tue 04 Mar 2025 18:06:36 +0000
asID:                     266852
IP address blocks:        45.239.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ee:22:91:51:da:0f:6c:13:49:30:42:2f:e8:4a:7a:61:d1:8f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F0CDDD5EE7E7A145A967535797D838518D4F4D7
        Validity
            Not Before: Mar  5 18:01:36 2024 GMT
            Not After : Mar  4 18:06:36 2025 GMT
        Subject: CN=DBD3BB1DDAFBDBB18DFC31B8F37DFB84B7A4A510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:16:07:be:e0:bb:b4:bd:97:ba:8f:da:82:
                    d2:a5:25:54:bc:dd:40:2f:e3:e7:22:44:f9:9a:a4:
                    82:d2:b0:fd:2e:ea:3e:92:9d:0f:a9:3f:02:c7:1b:
                    c6:e3:9e:17:58:c6:25:72:3f:10:b4:1c:f1:89:35:
                    3a:ae:e2:8d:dc:b3:bb:7b:2d:3f:90:56:00:71:f3:
                    bb:73:c2:66:4c:b0:5a:a5:cc:dd:3f:c9:45:79:9a:
                    a9:a8:7c:e1:9e:eb:34:74:ae:9f:17:1b:6c:b4:63:
                    08:bc:de:19:8e:d7:8c:64:7b:b8:73:68:33:3a:e0:
                    06:c8:88:77:b2:32:58:90:ad:d0:8e:e4:61:d8:c8:
                    74:e6:04:91:9c:5a:4b:fb:a6:6e:a0:fc:e0:c0:80:
                    e4:a2:54:07:41:0b:da:25:a7:ba:82:97:29:94:26:
                    99:82:95:8a:ff:e0:b7:06:67:95:38:f0:61:8c:13:
                    72:94:0c:35:ef:0c:a7:2a:d6:e6:ba:18:f9:1e:a4:
                    2d:5b:a5:c3:05:0d:56:f5:5d:4c:00:4b:f6:18:2d:
                    88:51:06:f5:9b:7f:c5:e6:3a:db:95:66:ba:da:f2:
                    19:b9:a2:f5:04:eb:02:5d:22:96:c3:2d:51:9d:5a:
                    97:1e:d1:9c:2e:d1:e0:ec:45:22:7a:8a:08:c8:6b:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D3:BB:1D:DA:FB:DB:B1:8D:FC:31:B8:F3:7D:FB:84:B7:A4:A5:10
            X509v3 Authority Key Identifier:
                keyid:5F:0C:DD:D5:EE:7E:7A:14:5A:96:75:35:79:7D:83:85:18:D4:F4:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F0CDDD5EE7E7A145A967535797D838518D4F4D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF074EDA9380C77938D60DDC25103A733CEF7859664E82C795EE19D7411AB38A/0/34352e3233392e3132302e302f32322d3234203d3e20323636383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:63:79:a7:ca:4b:22:01:4e:77:b5:b3:4c:e2:f5:2b:6d:90:
         09:e3:1d:96:aa:6b:9a:c7:8b:9d:f2:ae:f1:ca:a4:10:8d:e9:
         22:45:66:f5:12:d6:da:35:b1:29:8b:38:09:6c:a4:a6:d0:d6:
         f3:f3:41:48:2b:03:57:24:3f:e1:8f:5d:d8:f2:5f:5d:d2:91:
         cc:da:3d:4d:e0:0e:ab:0f:0d:da:ea:b4:77:94:30:23:46:d9:
         22:77:93:8c:a5:d4:68:f6:e5:52:aa:5f:68:30:e3:52:47:4d:
         18:8e:82:a6:54:d1:11:34:69:b6:18:65:22:00:b0:4d:d4:5d:
         55:55:63:f1:11:7c:18:4d:dc:cc:7a:dd:67:1c:72:39:da:74:
         94:20:b4:e4:92:ed:bf:8e:a5:48:e7:80:4b:50:2d:1e:b3:18:
         48:b4:0d:58:32:cf:d9:cc:4f:8f:a6:23:c7:74:5d:d9:5c:d2:
         88:10:ba:3c:69:b4:c5:6d:c3:cc:40:b1:23:7b:ff:26:ff:83:
         91:24:b7:70:13:78:79:06:db:6a:34:60:c7:eb:bd:f6:57:bd:
         2e:22:96:f2:b3:11:dd:1a:55:b8:a0:98:9c:d8:fe:34:4f:5a:
         23:2c:a0:26:f8:bd:31:67:32:8a:3f:b2:00:38:44:54:93:b2:
         8a:3c:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 17:33:31 2024 by rpki-client on console-ams.rpki-client.org