Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37392e302f32342d3234203d3e20323633313537.roa
File:                     34352e3233392e37392e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          DkiL0MY2eESfc/qIe2FEQWQhGdn66ncHgvpgqmXBsZo=
Subject key identifier:   3F:3D:4F:EC:BF:6C:4A:27:FF:6A:87:E0:3B:40:20:C0:43:4C:C7:AC
Certificate issuer:       /CN=DC06AA51EF6432276CF284539A2DF591490740C4
Certificate serial:       52E506D82D3449B5FF645ABB24319B0D7D202A19
Authority key identifier: DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37392e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 05 Mar 2024 18:02:40 +0000
ROA not before:           Tue 05 Mar 2024 17:57:40 +0000
ROA not after:            Tue 04 Mar 2025 18:02:40 +0000
asID:                     263157
IP address blocks:        45.239.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:e5:06:d8:2d:34:49:b5:ff:64:5a:bb:24:31:9b:0d:7d:20:2a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC06AA51EF6432276CF284539A2DF591490740C4
        Validity
            Not Before: Mar  5 17:57:40 2024 GMT
            Not After : Mar  4 18:02:40 2025 GMT
        Subject: CN=3F3D4FECBF6C4A27FF6A87E03B4020C0434CC7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:2e:e6:d0:2f:79:11:90:74:e8:95:82:53:
                    af:96:82:51:d8:74:eb:ff:8d:f3:95:58:3b:f0:90:
                    0c:82:8e:21:e0:99:2f:71:23:cc:a3:63:1f:99:9c:
                    49:61:77:2e:77:9b:9d:4b:84:01:97:6b:2c:19:06:
                    ab:f7:0b:a4:c4:07:64:bd:d8:b1:a5:ef:d7:05:b7:
                    dd:be:ba:90:66:f2:21:e1:c2:71:2d:f0:31:de:7c:
                    c0:d0:b8:69:db:db:2d:2e:5b:03:f4:d0:35:d2:ec:
                    26:93:26:df:da:fe:39:d7:67:1a:1b:3a:5e:81:53:
                    13:0b:84:9b:ca:3f:91:81:14:01:77:6d:17:ae:a0:
                    eb:29:03:b1:d9:43:cc:60:a0:7d:cf:20:5a:2e:26:
                    24:ce:b9:3b:ee:62:d4:63:76:28:c1:12:bb:50:c3:
                    2e:cb:d5:24:3b:da:65:9f:84:25:0a:38:86:23:35:
                    b5:5b:52:d6:17:04:e5:d9:bc:15:93:b9:04:7f:62:
                    41:ca:85:a3:6e:cc:37:2a:b1:06:d3:cf:f4:b7:20:
                    cd:43:19:eb:b7:95:e3:63:33:aa:92:eb:3f:e8:0b:
                    93:8e:d7:94:07:85:e9:1e:61:1d:94:1a:2a:40:59:
                    08:83:bf:2c:b6:8b:7e:d2:f1:11:60:3a:9f:23:38:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3D:4F:EC:BF:6C:4A:27:FF:6A:87:E0:3B:40:20:C0:43:4C:C7:AC
            X509v3 Authority Key Identifier:
                keyid:DC:06:AA:51:EF:64:32:27:6C:F2:84:53:9A:2D:F5:91:49:07:40:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/DC06AA51EF6432276CF284539A2DF591490740C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC06AA51EF6432276CF284539A2DF591490740C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF946455D6908B8FC54DDA4360B9AC8B5DA2B96DA9334975A9A95ACD89452949/0/34352e3233392e37392e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:fe:89:05:2f:7d:7f:1c:56:6c:af:3b:05:b6:9b:de:ff:
         00:45:05:3d:09:44:e3:de:80:ea:e5:8c:9f:ef:8a:66:f4:6e:
         41:dc:81:ce:78:38:e6:0f:37:e0:b9:2e:e4:63:40:54:38:46:
         e3:7b:f7:7b:24:d3:ad:5a:d3:52:28:d8:a8:97:a0:c8:51:bf:
         d7:99:d6:f3:15:76:54:12:e4:eb:18:94:ee:38:63:27:99:e2:
         9f:32:5d:38:81:47:5c:8e:2a:15:2d:de:38:5f:34:30:24:40:
         0e:df:73:85:f7:13:0e:e7:d3:03:54:ab:83:f1:23:ad:a0:3c:
         01:eb:55:ec:1b:23:dd:fd:00:e5:5b:fe:6b:46:d3:cd:fa:99:
         02:a5:20:dc:9b:6f:28:18:81:88:86:1d:c5:fc:d4:cc:b5:46:
         6f:a6:be:be:22:38:0f:d6:8a:4b:2e:c3:ef:82:40:d1:eb:c3:
         99:17:23:16:ff:18:8e:c7:86:f5:8b:fc:da:df:6c:e3:93:13:
         99:36:60:65:d5:f5:f9:9e:14:8e:7a:44:87:52:b1:96:2e:50:
         66:82:3c:b8:3d:af:59:2e:88:49:b5:9b:cc:a5:31:ae:32:c7:
         e5:1a:2c:33:0f:f4:0f:f5:66:26:5e:fe:d3:e8:f9:fd:f4:27:
         02:87:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org