Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e203237393239.roa
File:                     34352e36382e342e302f32322d3234203d3e203237393239.roa (raw, json)
Hash identifier:          FG3AN0zCUN/VLcYi2Qy/1lQ5srrlgT/I1J3U7ZBiPQY=
Subject key identifier:   8F:3E:EF:35:E6:59:A2:2D:25:E3:DB:73:C6:42:75:FE:AF:16:DE:13
Certificate issuer:       /CN=AADC68CACCD7A12B6A019949E964F33953EF7228
Certificate serial:       55FDCE9502ECD57833975637184A5873A2342D22
Authority key identifier: AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e203237393239.roa
Signing time:             Tue 05 Mar 2024 18:14:57 +0000
ROA not before:           Tue 05 Mar 2024 18:09:57 +0000
ROA not after:            Tue 04 Mar 2025 18:14:57 +0000
asID:                     27929
IP address blocks:        45.68.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fd:ce:95:02:ec:d5:78:33:97:56:37:18:4a:58:73:a2:34:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AADC68CACCD7A12B6A019949E964F33953EF7228
        Validity
            Not Before: Mar  5 18:09:57 2024 GMT
            Not After : Mar  4 18:14:57 2025 GMT
        Subject: CN=8F3EEF35E659A22D25E3DB73C64275FEAF16DE13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:13:ae:76:62:4d:c4:47:ce:c2:95:f1:59:b9:
                    9f:1b:6d:4f:94:51:5b:4d:be:1d:14:f9:90:aa:54:
                    93:f2:32:dc:b2:27:4f:c4:68:79:61:5d:02:f2:f6:
                    66:92:4f:c1:56:34:9d:6e:20:fe:f9:fa:8d:b9:4d:
                    f9:cc:e3:b9:75:10:c8:06:95:fb:a6:1a:01:78:9b:
                    86:23:56:d8:2d:d0:1a:21:af:42:77:16:9f:28:63:
                    8e:92:ea:3f:0f:1b:c1:26:c0:01:3e:1b:91:eb:d6:
                    f8:d5:2f:1b:fa:76:fc:45:59:f6:76:03:c4:05:6d:
                    24:3b:5e:93:46:97:ff:92:d0:79:0f:07:ad:62:14:
                    64:d8:4e:6e:7d:0d:1e:e7:9b:90:27:38:0f:73:db:
                    83:41:4d:c0:3a:57:36:95:67:8d:c0:09:06:f6:df:
                    90:60:1e:51:4f:94:58:aa:e9:00:e2:10:e2:7b:89:
                    da:61:03:af:57:b0:ff:73:e7:24:da:ea:ee:67:b2:
                    56:7e:b0:ec:8f:d8:85:a4:06:f1:bb:ff:ce:10:09:
                    94:88:9d:d0:4f:dc:ea:6c:cd:ac:b8:2a:b9:48:8d:
                    46:5b:65:ee:8e:a5:8d:1d:3c:70:24:aa:d8:52:f0:
                    1a:20:f1:04:04:d2:ed:8d:f8:da:d1:f2:03:bd:8c:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3E:EF:35:E6:59:A2:2D:25:E3:DB:73:C6:42:75:FE:AF:16:DE:13
            X509v3 Authority Key Identifier:
                keyid:AA:DC:68:CA:CC:D7:A1:2B:6A:01:99:49:E9:64:F3:39:53:EF:72:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/AADC68CACCD7A12B6A019949E964F33953EF7228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AADC68CACCD7A12B6A019949E964F33953EF7228.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B21ED114DBD6098C28EA9DFC33E0FB1ACDACB410C91D725A1C2295B439A9FC3C/0/34352e36382e342e302f32322d3234203d3e203237393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:cc:57:59:41:ad:a0:e9:08:78:11:5f:28:32:42:3c:66:
         0f:99:50:29:94:2b:0b:42:0a:84:63:8e:d5:97:bc:6c:28:df:
         0f:d9:80:21:14:ea:7e:7b:f9:72:c6:88:75:ad:9a:ef:3d:1e:
         e3:13:5e:fe:b2:1e:71:65:5f:7e:3a:5c:a7:09:b1:f3:6e:ba:
         b6:39:72:b2:05:50:2d:0d:ba:d5:d1:36:8e:50:99:b4:43:b7:
         1c:f3:ef:92:f7:f1:75:83:98:7e:3f:81:77:d2:1a:84:3a:b7:
         a7:43:24:8a:d2:9a:6e:8e:4c:ba:b4:bd:d4:4c:c2:3c:1e:44:
         d6:02:e4:bb:28:3a:39:b8:0a:75:d9:a0:4b:21:10:72:bd:5d:
         30:c2:39:96:83:2f:5c:36:48:c8:b6:32:7f:7e:a7:df:ef:24:
         66:04:3e:89:25:d8:78:c5:e0:19:48:40:0b:57:b1:c7:c9:9e:
         98:9a:71:61:63:f9:82:27:38:18:7c:91:37:76:df:e7:7e:92:
         18:e2:f6:a4:46:27:17:71:f7:f2:29:ad:63:b4:30:81:e9:99:
         0d:75:05:a6:c2:79:26:f5:1c:46:a2:fa:4c:cf:de:17:cb:3a:
         de:f6:e8:30:61:43:16:f3:6f:02:01:62:36:bb:96:19:d7:c0:
         43:d2:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org