Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32342d3234203d3e20323636383136.roa
File:                     34352e3233332e3136382e302f32342d3234203d3e20323636383136.roa (raw, json)
Hash identifier:          FYa4TMgQWIjWe/8Sc+WNsttthPW4RFeMfD6ljCQE2Hc=
Subject key identifier:   12:D0:69:50:AD:95:58:8D:11:22:2B:08:8A:8A:C8:4A:50:4A:D0:65
Certificate issuer:       /CN=19CE919187E9F056A78CCAAFBDDADB939E099337
Certificate serial:       3BF0ABCFBA6C85A99A7BD3842FEF6F94BCD6CBBF
Authority key identifier: 19:CE:91:91:87:E9:F0:56:A7:8C:CA:AF:BD:DA:DB:93:9E:09:93:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19CE919187E9F056A78CCAAFBDDADB939E099337.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32342d3234203d3e20323636383136.roa
Signing time:             Tue 05 Mar 2024 17:40:26 +0000
ROA not before:           Tue 05 Mar 2024 17:35:26 +0000
ROA not after:            Tue 04 Mar 2025 17:40:26 +0000
asID:                     266816
IP address blocks:        45.233.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/19CE919187E9F056A78CCAAFBDDADB939E099337.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/19CE919187E9F056A78CCAAFBDDADB939E099337.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19CE919187E9F056A78CCAAFBDDADB939E099337.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f0:ab:cf:ba:6c:85:a9:9a:7b:d3:84:2f:ef:6f:94:bc:d6:cb:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CE919187E9F056A78CCAAFBDDADB939E099337
        Validity
            Not Before: Mar  5 17:35:26 2024 GMT
            Not After : Mar  4 17:40:26 2025 GMT
        Subject: CN=12D06950AD95588D11222B088A8AC84A504AD065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b9:d2:82:1d:40:df:a9:97:a6:1d:79:83:18:
                    c1:d0:ff:ab:2d:0e:5f:e4:e0:f6:21:ac:36:e2:4d:
                    27:05:3d:0b:c5:ce:65:86:9a:72:ea:32:c7:7b:be:
                    53:9f:55:c8:60:0d:e5:81:49:67:6c:47:db:d8:1e:
                    98:80:22:8c:62:b4:62:80:13:f5:4b:4f:8e:94:10:
                    1b:4d:49:aa:56:b7:41:ef:a6:f9:ef:e5:ba:83:ac:
                    f3:52:a7:f8:40:a8:7e:b1:0c:86:51:c0:54:32:57:
                    86:68:1b:40:c1:41:95:2f:38:88:44:38:b1:f5:35:
                    92:30:bc:6a:67:f7:a4:30:eb:60:50:9c:71:ba:7c:
                    33:5d:9d:8e:f9:45:72:e6:14:a1:1e:d6:d8:84:e3:
                    dc:13:72:5a:48:08:06:ae:f8:0d:9a:f6:96:e6:db:
                    3b:80:39:87:16:aa:bb:53:aa:7b:37:d0:07:a1:0a:
                    a4:95:64:b3:10:27:61:b6:bb:a1:35:f1:f0:c6:3b:
                    ff:48:48:b0:9f:e4:af:5b:a3:a8:d7:1d:c1:be:b7:
                    00:fa:cf:8b:17:cf:ab:4d:fb:fc:79:69:3d:6e:9a:
                    2c:15:da:99:8c:b6:ec:61:2f:d2:06:af:5c:c6:27:
                    0f:02:5a:75:dc:93:ca:bf:e8:a7:9a:2d:e7:2e:bf:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:69:50:AD:95:58:8D:11:22:2B:08:8A:8A:C8:4A:50:4A:D0:65
            X509v3 Authority Key Identifier:
                keyid:19:CE:91:91:87:E9:F0:56:A7:8C:CA:AF:BD:DA:DB:93:9E:09:93:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/19CE919187E9F056A78CCAAFBDDADB939E099337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/19CE919187E9F056A78CCAAFBDDADB939E099337.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32342d3234203d3e20323636383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:1b:11:21:15:36:9c:ba:52:d6:cd:2b:17:03:b2:87:a4:3f:
         19:63:75:2a:f1:8a:b4:f3:c9:29:50:2b:06:d9:b8:f7:27:f6:
         10:8d:c7:79:f6:53:ca:64:42:4d:5b:d5:d3:82:29:d5:11:df:
         c0:e5:92:78:23:e4:7d:9a:79:1d:0a:26:ab:9e:30:06:06:a6:
         43:41:8e:8f:ea:75:c1:40:dd:c4:ee:10:2b:d3:10:95:dc:6e:
         a0:b3:0d:32:70:6d:0d:4e:14:92:4e:7d:25:1e:26:5d:55:16:
         2d:d9:3f:4f:eb:c6:e3:45:4c:e2:bb:50:67:3a:7a:41:76:01:
         47:46:dc:a1:42:70:01:27:89:84:28:8f:b9:2e:a7:70:14:7d:
         a1:0b:7e:e0:be:16:80:19:99:00:59:53:93:cf:da:c9:2d:f6:
         27:83:4d:cb:83:d5:2f:4a:ba:6a:3b:57:ae:5e:a5:23:27:57:
         59:f3:21:ee:dd:32:88:c3:70:2b:1e:ef:37:fa:d4:2c:b3:a1:
         d0:57:ae:6f:58:56:08:00:3d:55:0b:fa:eb:ca:47:0f:9d:3f:
         9b:75:c0:dc:3c:95:c8:e6:66:f3:7f:43:71:49:e3:11:da:c8:
         bd:20:8a:bd:97:8e:31:22:cf:18:c2:24:a9:34:1a:38:87:1d:
         bb:fa:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org