Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32342d3234203d3e203532343638.roa
File:                     34352e3233382e35362e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          UTZUwzhcAsjd2T3ZbeKtFB+UFoUtvIYzLgR8dr6VEaM=
Subject key identifier:   A1:E4:14:A7:D5:58:A0:96:9B:DD:B4:33:59:6A:C3:1A:A9:9D:84:01
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       7D64980F802E24AF2A0F039B6BD1E8BEF8332E11
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32342d3234203d3e203532343638.roa
Signing time:             Wed 07 Aug 2024 17:55:00 +0000
ROA not before:           Wed 07 Aug 2024 17:50:00 +0000
ROA not after:            Wed 06 Aug 2025 17:55:00 +0000
asID:                     52468
IP address blocks:        45.238.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:64:98:0f:80:2e:24:af:2a:0f:03:9b:6b:d1:e8:be:f8:33:2e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Aug  7 17:50:00 2024 GMT
            Not After : Aug  6 17:55:00 2025 GMT
        Subject: CN=A1E414A7D558A0969BDDB433596AC31AA99D8401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:72:8f:20:3e:22:00:f0:a4:72:39:49:b1:
                    78:28:da:e3:32:d1:f6:c6:da:9a:13:9e:92:7a:5a:
                    4e:ae:c8:7e:8f:8c:a8:94:82:df:33:96:60:62:aa:
                    0e:68:90:c2:a4:5f:42:37:23:4d:43:69:7c:d1:ac:
                    29:c8:a4:4a:f4:c2:f3:2f:28:04:e4:6b:b7:c9:f1:
                    d3:25:d1:8b:de:92:ea:d5:76:13:e8:49:91:af:9b:
                    6a:bf:62:66:bf:48:34:f8:66:ac:84:f8:8e:9f:8e:
                    cd:1c:b7:6a:1d:26:f5:93:c4:a8:25:9f:20:db:ef:
                    29:18:72:bc:4c:d5:e7:52:ba:fc:7d:d1:ee:ab:80:
                    37:30:6c:ec:df:90:de:ca:93:f1:1a:dc:72:64:d7:
                    dc:32:3f:1a:e4:1a:cf:5f:aa:a2:87:f4:0c:ee:52:
                    c7:60:0d:de:a2:93:a4:c1:b4:cb:33:1e:53:83:cb:
                    8a:3d:d9:e1:22:e1:99:99:0d:e7:79:fc:bd:e7:cc:
                    fd:eb:63:fb:fa:90:c2:dd:43:6a:d9:ff:0b:3a:9a:
                    85:40:cf:aa:06:17:b2:14:d2:39:f7:00:27:98:e7:
                    df:6c:75:fd:f3:e2:83:e9:9a:b3:5a:05:ba:70:db:
                    24:59:6d:27:64:64:76:02:71:f3:65:ba:0b:57:98:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E4:14:A7:D5:58:A0:96:9B:DD:B4:33:59:6A:C3:1A:A9:9D:84:01
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:34:58:e6:d5:56:ea:91:9f:0a:dc:c9:81:12:eb:6d:26:82:
         8f:d2:9d:f3:13:cf:2c:17:44:aa:a3:1d:52:85:00:6e:22:63:
         29:d5:b5:31:7b:1f:f1:cc:79:81:e3:e5:bb:66:07:04:90:61:
         82:38:b1:c2:02:d3:93:aa:e1:e7:af:53:7e:79:d9:8c:9b:6a:
         49:76:2d:ab:94:af:c3:11:78:fd:59:5c:6a:1c:67:f7:13:4b:
         fb:f7:29:ab:0c:79:c6:93:63:e3:f5:0f:09:bb:70:d6:98:8c:
         e0:1d:92:77:8d:ae:5c:a1:f1:53:8f:3d:66:4f:c3:58:ad:e1:
         95:16:3d:84:10:86:c6:3f:7f:26:e7:dd:a0:75:67:83:85:0b:
         26:77:ec:50:b7:2b:ab:2d:28:63:4f:9c:92:2d:c4:fe:cf:66:
         a1:29:9b:16:97:40:86:17:fb:9b:1d:bb:c8:0f:00:5c:ca:d9:
         bf:38:45:b9:e0:e5:ca:69:f1:bc:81:5d:89:02:94:29:4e:de:
         0c:3f:ca:89:88:af:03:e6:ec:a9:1c:8c:1f:7f:4c:4a:2f:98:
         d0:c8:76:b3:45:5e:51:c6:86:48:ea:60:db:b6:48:06:c3:48:
         06:d6:08:ae:a4:8b:08:af:99:b9:df:62:60:a3:32:b1:e0:f0:
         35:c1:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org