Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e20323731383835.roa
File:                     34352e36382e342e302f32322d3234203d3e20323731383835.roa (raw, json)
Hash identifier:          wp5sFMlM7gscVjOwudkI7TP9yTLRQTKg2FT44dl9Mi8=
Subject key identifier:   1B:77:1E:2B:B8:6F:15:0C:DC:A1:F6:27:E7:67:0B:76:1E:58:5D:8D
Certificate issuer:       /CN=AADC68CACCD7A12B6A019949E964F33953EF7228
Certificate serial:       0D9049E66410608BDB012678A3C6E75610178E0F
Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e20323731383835.roa
Signing time:             Tue 05 Mar 2024 18:14:57 +0000
ROA not before:           Tue 05 Mar 2024 18:09:57 +0000
ROA not after:            Tue 04 Mar 2025 18:14:57 +0000
asID:                     271885
IP address blocks:        45.68.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:90:49:e6:64:10:60:8b:db:01:26:78:a3:c6:e7:56:10:17:8e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228
        Validity
            Not Before: Mar  5 18:09:57 2024 GMT
            Not After : Mar  4 18:14:57 2025 GMT
        Subject: CN=1B771E2BB86F150CDCA1F627E7670B761E585D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a3:8f:fb:b6:a5:4f:7a:a3:ba:0a:7b:5c:5b:
                    b1:c5:87:48:4b:a2:ea:75:b2:70:69:74:68:be:27:
                    28:12:db:87:87:85:23:9c:80:50:11:cf:73:ad:ce:
                    ea:01:d3:18:a6:70:c3:a8:54:38:cf:e0:29:bc:ab:
                    1d:b4:e4:fd:cd:7e:52:cf:bd:3a:f6:03:71:4e:02:
                    96:da:d9:74:32:6b:2a:4c:7a:26:86:9b:16:77:b4:
                    42:49:1b:b1:37:20:19:be:0c:d0:99:66:dd:fd:35:
                    52:13:94:e9:6d:0e:87:eb:2e:c8:2f:c8:9a:b1:d8:
                    e0:6c:4f:59:a2:9e:e9:5c:4d:d0:24:a9:d8:73:f0:
                    ed:d3:44:ab:f4:63:19:db:cc:db:e5:f9:29:b7:80:
                    db:bf:af:c5:f2:3e:f5:b4:8c:14:47:32:7d:25:66:
                    a8:52:fd:3b:2d:ea:ec:93:c5:97:db:c9:f9:8b:61:
                    86:0b:fe:84:d5:b5:a3:94:65:bb:e0:1c:cc:9c:7e:
                    83:bd:82:fd:f8:e1:99:e3:cd:40:4b:13:0a:a1:72:
                    f0:19:85:94:75:5c:9e:2c:8d:ae:5f:fa:0e:57:6e:
                    2c:b7:af:38:49:9f:c6:aa:56:5a:3b:e3:1c:a1:22:
                    e5:07:87:76:c4:37:c8:50:4f:20:7c:c9:a6:76:91:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:1E:2B:B8:6F:15:0C:DC:A1:F6:27:E7:67:0B:76:1E:58:5D:8D
            X509v3 Authority Key Identifier:
                keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e20323731383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:f1:9d:9b:0f:17:1e:5b:53:d0:72:c2:06:80:95:ac:34:6a:
         77:59:16:8d:2e:15:c1:72:55:0d:53:76:7b:19:7d:c4:d7:b1:
         37:8c:9b:28:2d:cf:ba:c2:bf:5d:0e:cd:b3:95:a0:94:05:91:
         0d:d9:18:e4:af:a7:06:9c:7c:96:5c:89:21:10:ef:6b:55:d8:
         93:91:a4:e9:94:77:1b:84:03:20:70:e6:0d:bc:b8:a1:bd:4f:
         37:8e:c5:16:44:2b:05:51:26:fa:a0:ac:0c:a1:2a:5e:e1:03:
         43:7c:e4:3a:23:f3:60:07:7b:12:be:99:72:c3:cc:90:dc:99:
         0f:76:ab:40:67:0e:69:bf:26:b5:ee:19:61:c9:eb:52:55:75:
         d2:93:66:4e:91:b6:8c:b0:37:58:c8:6c:b7:ee:6d:ce:3b:e1:
         a4:38:64:8d:74:ac:12:de:64:5a:e2:cb:52:65:c3:61:36:5d:
         5e:f0:5c:ff:91:69:02:7d:93:12:31:16:a8:da:21:a6:05:ef:
         97:7f:af:45:a7:78:71:14:8a:e6:a9:c5:8c:07:5a:be:1f:ac:
         cb:4c:de:f8:22:33:10:84:c5:94:03:57:84:32:78:d7:8a:64:
         42:e0:ee:25:3f:2c:4b:a4:d3:bb:54:1d:88:12:b6:64:fb:fd:
         52:51:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org