Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34352e302f32342d3234203d3e20323636383538.roa
File:                     34352e3233392e34352e302f32342d3234203d3e20323636383538.roa (raw, json)
Hash identifier:          ouRYasnsL6R5LGyXeQiuKnbBYs6CuhRPH1Xb2oigRiA=
Subject key identifier:   1B:CA:DF:04:78:98:62:D7:93:D9:AB:03:E6:34:21:04:62:48:08:F7
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       475A35AAD6F553B55AB75AE5A87C4F6AB19D6974
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34352e302f32342d3234203d3e20323636383538.roa
Signing time:             Tue 05 Mar 2024 17:42:02 +0000
ROA not before:           Tue 05 Mar 2024 17:37:02 +0000
ROA not after:            Tue 04 Mar 2025 17:42:02 +0000
asID:                     266858
IP address blocks:        45.239.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5a:35:aa:d6:f5:53:b5:5a:b7:5a:e5:a8:7c:4f:6a:b1:9d:69:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Mar  5 17:37:02 2024 GMT
            Not After : Mar  4 17:42:02 2025 GMT
        Subject: CN=1BCADF04789862D793D9AB03E6342104624808F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:36:70:c1:4e:85:4d:42:70:b2:41:9c:a4:
                    00:e5:b6:67:bb:00:1f:da:32:cc:dd:f9:52:ca:1c:
                    d8:a2:4c:a3:72:db:0c:83:28:a4:47:fe:68:e2:05:
                    3a:db:7b:52:40:83:ac:96:81:dd:c6:ff:1b:9c:6f:
                    07:5b:7b:0d:bf:44:de:9c:b3:33:10:8a:a7:64:99:
                    38:dd:98:14:aa:3f:20:57:78:9f:c3:34:2a:b8:c7:
                    5a:d5:25:b7:8f:05:66:f2:ad:17:a8:ef:c2:df:d5:
                    af:23:b3:ba:a3:83:fb:6c:61:e4:22:a7:13:d8:b9:
                    cf:aa:f0:ce:4f:ee:60:ed:96:76:de:5f:40:6c:20:
                    e8:52:99:31:c7:82:f9:c8:a7:e6:27:87:62:a6:d9:
                    03:26:53:a0:b2:14:e2:1b:42:57:e8:87:72:75:5e:
                    1a:34:12:d0:ea:cd:64:cc:29:5c:1d:62:14:df:73:
                    97:f1:37:68:b8:c7:05:ba:62:4f:e5:e6:cb:ff:92:
                    21:10:fd:90:c0:b2:51:58:09:03:eb:b8:59:92:75:
                    33:d6:43:2d:ef:15:47:4a:fe:bd:ba:c0:25:6b:f2:
                    64:0b:5b:0e:54:79:1a:8e:16:e2:36:94:44:7f:a6:
                    ae:85:30:f1:e1:e9:90:af:03:20:49:12:02:0e:44:
                    48:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:DF:04:78:98:62:D7:93:D9:AB:03:E6:34:21:04:62:48:08:F7
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34352e302f32342d3234203d3e20323636383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:35:ae:64:71:da:ef:28:43:10:3a:3d:d6:54:d9:c0:cc:eb:
         0a:ca:c3:8b:b1:21:73:94:88:70:34:0c:87:f2:e6:30:46:fa:
         d5:a5:39:01:15:b5:fe:d3:52:2c:f2:7b:f2:98:d9:df:a3:24:
         9e:f0:3d:e4:62:bb:e2:24:16:2b:5f:43:b7:b9:d5:be:e8:f8:
         ab:2a:cd:8d:83:10:a8:f7:fa:20:81:9d:e6:ea:a3:bd:d4:14:
         7f:f7:88:f0:7b:22:68:51:b9:c7:f0:70:4b:24:6a:5e:ed:7f:
         8c:28:bf:67:fc:8c:8a:cb:05:3b:91:16:ee:0d:ce:c1:54:26:
         9c:f4:62:a4:42:d6:de:7b:27:55:f9:59:6e:4a:90:62:77:92:
         61:1d:38:39:8f:1c:63:29:12:aa:33:e6:f3:03:e8:a4:9b:7f:
         56:11:84:83:6f:b7:5d:09:2a:37:b1:7d:e3:82:4c:9f:e6:a9:
         6a:f8:d6:46:e0:cf:8c:8d:ee:2a:96:c9:87:3b:05:0a:62:e0:
         e8:bf:63:10:99:5d:4c:3b:46:cc:23:40:ad:9d:b6:a3:05:a2:
         50:b9:13:cd:a0:20:e1:c8:d0:64:ec:f4:ed:74:d1:84:e9:c4:
         0c:75:d6:55:e9:91:26:d8:f9:32:97:c2:84:5f:d5:6e:bf:05:
         c0:16:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org