Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37372e302f32342d3234203d3e2033333536.roa
File:                     34352e3136322e37372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          2qN9OmlUjkNfcupHCNaNlkeKARtTxJG0UGB/efwHO60=
Subject key identifier:   9E:DC:4A:BC:64:B7:FC:D9:C1:C1:27:A1:9E:ED:93:D0:1F:7D:5D:66
Certificate issuer:       /CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
Certificate serial:       0238FD806E1B35F299AB1316EECA1ADDB26C2B2F
Authority key identifier: 02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37372e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 17:57:55 +0000
ROA not before:           Tue 05 Mar 2024 17:52:55 +0000
ROA not after:            Tue 04 Mar 2025 17:57:55 +0000
asID:                     3356
IP address blocks:        45.162.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:38:fd:80:6e:1b:35:f2:99:ab:13:16:ee:ca:1a:dd:b2:6c:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ED3395A01A385371573CF59B1E5D8F2BF6D57E
        Validity
            Not Before: Mar  5 17:52:55 2024 GMT
            Not After : Mar  4 17:57:55 2025 GMT
        Subject: CN=9EDC4ABC64B7FCD9C1C127A19EED93D01F7D5D66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ae:8c:1f:4c:fa:37:18:95:10:2b:46:ad:96:
                    b1:f1:eb:cf:64:e5:95:14:d6:83:a4:ff:a9:6d:be:
                    a6:c8:d6:98:f3:d3:c9:8f:e3:d0:e8:75:2b:80:83:
                    9f:b6:b8:a6:86:28:0f:80:5b:50:27:40:33:21:e0:
                    05:05:a2:aa:49:69:5c:75:9f:6f:dc:ac:e2:29:ea:
                    9e:f0:a1:5f:a1:7c:8c:20:da:84:bd:fc:86:ce:fc:
                    0a:0b:d3:7b:96:59:13:f2:4c:fd:f3:14:cc:7d:c5:
                    1c:e1:74:5a:ee:e1:91:4d:c4:54:37:a6:7a:3c:80:
                    5d:98:44:43:06:a5:f0:a3:f5:3d:70:5f:72:d5:d9:
                    8a:38:75:7d:09:27:e3:f8:25:e4:e3:79:59:74:2c:
                    51:01:d3:0e:0e:0f:dd:74:c6:f6:8f:5f:a2:38:b9:
                    3f:5a:b8:8f:6d:0b:59:ea:0e:db:e3:be:92:ee:8f:
                    de:90:ec:6b:e1:64:06:fd:ca:1a:f3:3f:2a:80:fc:
                    20:ec:93:5a:b6:b7:51:13:15:77:79:cb:e6:8c:d2:
                    44:15:ff:14:1c:4d:40:1e:aa:ed:b4:a7:2d:8c:05:
                    57:bb:b5:c4:30:66:28:49:82:63:fc:00:41:fa:24:
                    bf:23:94:9a:37:c6:1a:f6:03:64:81:1b:4e:00:4b:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:DC:4A:BC:64:B7:FC:D9:C1:C1:27:A1:9E:ED:93:D0:1F:7D:5D:66
            X509v3 Authority Key Identifier:
                keyid:02:ED:33:95:A0:1A:38:53:71:57:3C:F5:9B:1E:5D:8F:2B:F6:D5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02ED3395A01A385371573CF59B1E5D8F2BF6D57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B9D1DF45E9A86CDA1CFE95BC5E5796EDEABD214A8B07C94BB9D6628D0656AE11/0/34352e3136322e37372e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:ab:17:2c:16:a6:1f:87:16:ed:b9:30:95:1b:ac:1f:65:
         a9:b5:57:28:35:e1:80:cd:cb:ad:9d:96:de:56:5e:3c:ae:79:
         08:59:4b:b4:9f:56:dc:91:5d:35:dd:75:17:c3:d5:ef:e6:77:
         17:32:c2:3a:27:6d:22:c7:4e:02:f2:a3:d1:bd:9c:80:26:54:
         ad:ba:e6:e8:29:66:c3:de:e0:fa:01:5d:39:b0:02:f5:60:ff:
         b3:b4:69:58:f1:91:94:4c:57:62:38:9f:ce:43:81:4c:89:bb:
         13:8c:fb:70:5b:b8:3b:dd:cd:5d:dc:28:7b:9f:29:bf:19:62:
         a0:8b:74:1c:6f:04:2c:9c:27:63:e4:05:04:7a:c0:ca:4d:92:
         ae:e9:75:01:8b:6e:0e:f3:97:3d:59:08:6d:ab:d8:68:96:87:
         20:f0:ae:4e:3f:e4:3f:7a:79:13:61:1f:98:cc:42:1b:ac:43:
         d6:07:b6:27:55:14:6c:cd:e4:3e:92:f8:01:e7:f1:1d:4f:6a:
         6a:47:26:e1:13:da:8e:08:ad:9b:86:fc:cc:24:6f:93:66:c1:
         8f:b5:b7:35:01:e9:92:8f:e0:73:e3:3d:04:e3:74:cb:01:7d:
         e0:20:1e:4c:a8:f7:91:c8:f4:0c:94:63:06:3f:95:74:70:24:
         13:0e:c1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:57 2024 by rpki-client on console-fra.rpki-client.org