Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39392e302f32342d3234203d3e20323636373737.roa
File:                     34352e3233352e39392e302f32342d3234203d3e20323636373737.roa (raw, json)
Hash identifier:          ut6qmkn7HWliWrkmbMPqGeONzDfsGg92obaOwYhuUZI=
Subject key identifier:   98:A7:CE:CC:14:75:9F:E9:94:B8:AB:7E:1E:76:C0:2C:2E:47:6A:59
Certificate issuer:       /CN=E99008F3C333627E9F8C6939370696F7049C22EB
Certificate serial:       3B6EC536886138AA7E3363F956F0E32473E8740E
Authority key identifier: E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39392e302f32342d3234203d3e20323636373737.roa
Signing time:             Wed 02 Oct 2024 16:35:00 +0000
ROA not before:           Wed 02 Oct 2024 16:30:00 +0000
ROA not after:            Wed 01 Oct 2025 16:35:00 +0000
asID:                     266777
IP address blocks:        45.235.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Oct 2024 02:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6e:c5:36:88:61:38:aa:7e:33:63:f9:56:f0:e3:24:73:e8:74:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E99008F3C333627E9F8C6939370696F7049C22EB
        Validity
            Not Before: Oct  2 16:30:00 2024 GMT
            Not After : Oct  1 16:35:00 2025 GMT
        Subject: CN=98A7CECC14759FE994B8AB7E1E76C02C2E476A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b9:3b:ce:ca:96:c8:6e:d5:44:73:9d:3f:31:
                    c6:cf:8c:41:3f:e9:b7:99:00:67:03:1f:cb:09:f6:
                    b7:fd:34:b2:c1:fe:54:ce:c9:9e:8c:77:ec:57:0d:
                    d9:32:ae:1c:91:c7:86:2a:71:a8:15:23:11:2b:b1:
                    ac:b8:bb:81:60:c7:4e:22:89:f9:1c:89:72:ea:41:
                    4b:1d:c8:c7:a3:90:bf:ba:3d:df:43:14:0a:1b:10:
                    03:d7:4a:c5:99:3c:90:ed:d1:e6:35:6b:65:ba:82:
                    bb:c3:b8:e7:22:85:99:ad:48:69:9b:bc:1d:e0:5f:
                    37:2b:b9:26:f1:32:33:cf:e5:08:10:7b:e9:91:b6:
                    e8:d3:7d:43:9a:d4:98:b4:1e:71:94:ef:9b:e6:1f:
                    6d:1a:2b:36:be:0d:dd:10:dd:c2:31:2a:0c:a2:5a:
                    05:0b:8d:9d:cd:77:ae:ee:e9:c9:33:32:ea:f9:e5:
                    e1:b9:62:a2:59:f4:37:65:8f:4c:60:bb:80:84:41:
                    80:79:6b:26:92:23:b6:e1:68:59:08:82:a7:f8:0f:
                    29:d0:04:8e:89:7d:e8:59:96:cf:29:91:02:3c:14:
                    dc:1d:7d:72:7a:a2:8c:6a:22:2f:42:13:3c:20:4a:
                    b7:80:37:30:e0:e3:dc:36:17:2b:f3:23:41:6e:7f:
                    52:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A7:CE:CC:14:75:9F:E9:94:B8:AB:7E:1E:76:C0:2C:2E:47:6A:59
            X509v3 Authority Key Identifier:
                keyid:E9:90:08:F3:C3:33:62:7E:9F:8C:69:39:37:06:96:F7:04:9C:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/E99008F3C333627E9F8C6939370696F7049C22EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E99008F3C333627E9F8C6939370696F7049C22EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7EBCF407F62BAF133DCE080C31AE7D4F2CEF8A603A472BCE4A78EBCA932C84E/0/34352e3233352e39392e302f32342d3234203d3e20323636373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:59:15:32:d2:05:e9:1f:0f:8b:5a:88:e8:c9:53:58:1b:
         3a:72:8f:2d:ec:f6:c1:62:d0:c6:f7:d9:75:3e:78:5a:fb:38:
         81:ce:12:89:c5:a5:d8:d0:3c:fa:b1:26:2e:88:17:3e:ed:b3:
         0f:aa:95:8c:b1:ba:22:e6:97:2a:7d:d5:54:a8:ef:b0:b4:22:
         45:4d:0c:d1:dd:38:97:83:42:ec:06:d7:60:02:e3:1d:4f:74:
         2b:bd:c3:4e:14:ca:2f:71:79:d9:ec:9e:b6:f0:ef:fe:4b:37:
         64:c9:d9:7a:0f:d5:a7:a1:b7:05:35:21:73:62:36:0a:9b:c4:
         f7:51:51:d6:af:f2:10:b1:de:01:bd:f2:82:52:67:b2:ae:e2:
         08:a5:4b:65:92:dd:ad:cf:53:fc:6d:55:16:b6:9c:b9:bc:02:
         48:c4:88:60:c4:60:72:43:4b:09:3b:22:0d:dd:63:2e:b7:76:
         fb:35:97:ef:d5:16:99:8c:46:3d:f9:98:06:1e:23:4e:3d:a6:
         da:ca:05:37:46:88:21:f3:8f:eb:9b:6c:88:88:62:8e:12:71:
         04:94:5f:04:fe:87:e2:d5:ea:a2:61:3c:94:6c:66:71:91:69:
         65:71:6f:06:23:42:08:18:b8:c9:e4:f8:79:5a:c3:9a:ca:a9:
         a1:a9:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 03:59:37 2024 by rpki-client on console-fra.rpki-client.org