Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa
File:                     34352e37302e3230322e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          vpkmexwBo3FM1o29k+RPZvPwVK5Gb1kvs+PM9g2uA1Y=
Subject key identifier:   9D:F2:92:E2:21:95:A0:C9:DF:46:F6:95:7F:F4:0B:80:74:FA:83:9C
Certificate issuer:       /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial:       52720D3EDF8B0B25465DDFAFDB1F680C14BAD9A2
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:50:44 +0000
ROA not before:           Tue 05 Mar 2024 17:45:44 +0000
ROA not after:            Tue 04 Mar 2025 17:50:44 +0000
asID:                     52468
IP address blocks:        45.70.202.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:72:0d:3e:df:8b:0b:25:46:5d:df:af:db:1f:68:0c:14:ba:d9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
        Validity
            Not Before: Mar  5 17:45:44 2024 GMT
            Not After : Mar  4 17:50:44 2025 GMT
        Subject: CN=9DF292E22195A0C9DF46F6957FF40B8074FA839C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:6a:e1:3b:84:e6:f5:dc:82:b2:41:f7:c6:
                    a8:89:b2:31:70:b5:25:e4:33:09:b3:20:dd:03:e7:
                    08:df:57:99:12:d2:22:83:11:d3:e5:2e:26:f8:fc:
                    fe:20:0c:a3:63:9c:e7:8a:69:c3:50:ef:95:6b:45:
                    e3:7b:69:13:b0:d0:63:88:ac:41:b4:a9:52:56:5d:
                    2c:d0:67:1e:d1:8c:24:a9:d5:ab:3a:d8:ed:3c:f1:
                    95:57:7a:10:ec:bb:30:c1:1e:f6:95:17:79:fb:86:
                    62:eb:2e:6c:6b:16:a2:fd:ad:4e:8c:38:90:b8:c9:
                    1f:d4:9d:81:46:1b:c6:7f:00:71:85:62:58:84:0c:
                    9a:c6:37:03:65:07:8f:6d:bf:a1:72:ca:92:b3:a3:
                    ab:dc:1c:c3:3a:6b:9d:ba:62:28:4e:f5:31:52:cd:
                    6d:97:26:15:10:79:8b:8f:72:0d:5c:cd:88:36:41:
                    4d:3d:fb:4e:8b:3a:ee:54:01:c8:8f:37:54:b2:69:
                    20:cd:78:f6:19:0b:04:4a:55:a1:15:a7:b9:ec:bd:
                    91:27:6e:8c:2d:25:ce:f5:25:0f:bc:b7:89:0d:c7:
                    96:a7:33:c2:07:2e:6e:d2:a5:d7:5c:d0:72:e7:7c:
                    8e:04:ca:67:31:95:0d:6e:cb:78:e1:6b:3f:3a:fb:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F2:92:E2:21:95:A0:C9:DF:46:F6:95:7F:F4:0B:80:74:FA:83:9C
            X509v3 Authority Key Identifier:
                keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:a0:5a:55:07:e2:b5:be:30:8c:4b:80:a2:44:5d:38:47:
         14:21:4c:ff:dd:0e:0a:73:40:b6:63:ea:c1:1b:81:bb:a0:6f:
         15:e4:a7:70:f5:a8:65:67:3d:8b:48:d5:43:f3:4c:76:27:81:
         08:c8:be:ba:1d:0e:6b:42:fb:ec:25:66:80:97:4f:a8:c7:ee:
         e2:17:55:94:0e:23:40:a6:36:8d:67:95:e9:3e:4f:d4:07:f7:
         dc:48:17:b4:b8:fc:4d:c8:40:13:19:de:cb:7c:3e:39:9c:bf:
         a2:8a:b2:e2:1a:e5:c0:51:3e:69:23:3e:10:69:30:15:68:7d:
         46:a8:63:1b:a0:82:f6:ce:24:06:9b:a7:14:7f:1f:78:e3:43:
         ca:39:9d:8f:48:33:3d:d8:27:44:9c:e5:d6:75:bc:02:14:03:
         5a:59:c0:43:7b:48:a5:83:17:2b:00:8f:b0:aa:ba:08:d6:c0:
         d4:ee:4b:28:84:f8:c3:5d:8c:1b:b4:a7:9d:eb:97:21:ea:c0:
         7e:3a:ab:84:bf:07:f6:af:1c:69:c0:13:02:4f:c8:07:98:ac:
         05:ca:c3:f4:3c:dd:be:75:ea:d2:65:9d:0c:7d:9c:7d:57:c2:
         83:cb:e7:82:fa:40:2b:89:ec:60:fc:cd:77:c1:60:4a:55:77:
         bd:4d:bb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org