Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37372e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233392e37372e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          HZ/Jnf7xxosImwPZLBcLQkBUqADmlYVP8Bfz4C6AQPs=
Subject key identifier:   17:73:61:3D:AD:E1:BE:85:2B:7C:D3:9C:93:F3:D7:9E:45:9A:F8:F3
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       526492D9EE1BF283A917F4493ACB2C90F8C3366A
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37372e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 05 Mar 2024 18:02:40 +0000
ROA not before:           Tue 05 Mar 2024 17:57:40 +0000
ROA not after:            Tue 04 Mar 2025 18:02:40 +0000
asID:                     263157
IP address blocks:        45.239.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:64:92:d9:ee:1b:f2:83:a9:17:f4:49:3a:cb:2c:90:f8:c3:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Mar  5 17:57:40 2024 GMT
            Not After : Mar  4 18:02:40 2025 GMT
        Subject: CN=1773613DADE1BE852B7CD39C93F3D79E459AF8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:8b:07:f3:2b:b7:43:fe:87:ee:ba:d5:3c:
                    dd:e7:5b:30:92:23:91:ee:6b:43:2b:31:88:3b:75:
                    93:48:12:80:2a:50:80:cc:84:01:c9:35:c1:bf:b7:
                    b5:6c:a4:16:db:7f:46:f7:a8:a0:60:40:8e:e7:25:
                    4b:8c:5a:ca:2e:de:81:1f:79:e3:65:da:0d:34:4f:
                    cd:58:ec:b9:3e:bb:5d:6d:9d:c7:97:30:50:54:5b:
                    59:8d:63:1d:12:57:22:5b:e8:da:ab:bd:67:62:ed:
                    a9:e8:5a:26:72:8b:e2:3c:91:83:57:87:dd:4f:b9:
                    ce:55:40:6d:88:4a:d7:0b:b4:9d:a1:6c:ef:75:8f:
                    8c:f3:e3:7c:c1:32:17:79:4f:dd:08:da:f6:a7:d4:
                    eb:b4:72:ca:8d:53:23:65:ef:90:31:ac:6b:20:79:
                    65:6b:b8:46:f8:d8:a4:93:fa:4e:c6:c4:b2:8c:0a:
                    9a:6b:89:59:24:f2:8f:7a:4f:b1:05:85:88:ae:0f:
                    cc:fd:ce:ab:f5:ff:84:19:3d:c2:f9:4f:6f:53:15:
                    27:bc:97:e9:98:14:96:96:02:d3:8b:b5:84:c5:29:
                    3c:47:fa:f8:75:b2:7a:32:7f:be:80:57:f1:d5:1f:
                    74:f5:c7:39:c9:db:5e:c8:90:75:c0:28:47:5f:7a:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:73:61:3D:AD:E1:BE:85:2B:7C:D3:9C:93:F3:D7:9E:45:9A:F8:F3
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37372e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3a:03:0c:7f:48:db:44:7f:7f:07:09:2e:af:1e:2f:13:fa:
         42:42:56:93:ac:b5:d2:01:f5:19:6c:d8:ad:e1:37:fe:4b:7e:
         6f:5d:1e:88:09:c4:7e:92:b0:8b:10:96:f8:f5:ff:94:79:80:
         05:91:60:a8:97:32:a8:48:10:e1:77:ca:bd:52:31:89:df:a0:
         ba:be:5b:bf:3a:fb:38:31:1c:3d:e0:89:38:ed:84:53:81:76:
         85:a7:0f:72:a7:f1:db:95:b5:8d:14:40:4c:29:35:21:a7:c0:
         89:e3:41:65:91:dc:62:59:e3:cf:42:a3:93:17:da:c8:85:dd:
         40:10:dd:77:19:b3:67:c7:fe:b0:17:b9:e6:6b:f2:29:05:2f:
         6d:3e:3d:fb:4e:d3:20:ed:17:7b:c1:aa:86:d7:ac:8f:c2:4a:
         65:5e:8b:9d:5a:d3:3b:43:ca:f9:47:24:8e:c9:ac:02:37:6b:
         cb:67:7c:d1:cc:8b:9f:72:fa:a2:22:11:05:6f:bd:49:74:7e:
         4a:81:a8:ab:f0:68:b9:f7:3b:23:fc:d8:e1:2d:f7:d3:5d:dc:
         c2:32:1f:4c:4b:39:21:f5:3f:19:60:f5:68:95:6b:4c:ce:b1:
         3b:8b:e1:1b:47:29:67:b3:60:82:2d:01:1e:1a:72:30:12:56:
         86:a5:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org