Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34362e302f32342d3234203d3e20323636383538.roa
File:                     34352e3233392e34362e302f32342d3234203d3e20323636383538.roa (raw, json)
Hash identifier:          SHDapsQIHcdi3q2XCsNgUfCvyELhO7fQKO2mS8JGZxc=
Subject key identifier:   35:34:3A:34:FA:9B:28:79:16:D4:84:20:99:A2:F0:31:F9:83:5C:D7
Certificate issuer:       /CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
Certificate serial:       404CCB3DAB395309ACA25034062B24C0239722BD
Authority key identifier: 8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34362e302f32342d3234203d3e20323636383538.roa
Signing time:             Tue 05 Mar 2024 17:42:02 +0000
ROA not before:           Tue 05 Mar 2024 17:37:02 +0000
ROA not after:            Tue 04 Mar 2025 17:42:02 +0000
asID:                     266858
IP address blocks:        45.239.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:cb:3d:ab:39:53:09:ac:a2:50:34:06:2b:24:c0:23:97:22:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1
        Validity
            Not Before: Mar  5 17:37:02 2024 GMT
            Not After : Mar  4 17:42:02 2025 GMT
        Subject: CN=35343A34FA9B287916D4842099A2F031F9835CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:1e:c5:b6:96:f6:89:ff:88:82:bd:b6:50:
                    48:1b:5a:65:50:6b:3a:b7:c6:cd:a7:d1:f9:3c:b8:
                    6e:85:5b:ba:0d:65:5e:ea:bd:34:14:3b:9a:93:41:
                    f7:08:0b:d5:24:31:6d:f4:aa:23:a9:53:3e:be:a3:
                    eb:ee:a2:dd:1b:ce:74:ee:00:2f:eb:83:d6:82:8d:
                    61:7b:8d:c3:19:73:1a:2e:11:a6:d4:07:1e:81:ef:
                    d8:49:a3:5f:bd:08:17:15:12:13:4b:72:7b:7b:cb:
                    1c:b8:66:8f:00:d5:74:9b:f9:37:34:18:80:a5:3f:
                    23:df:90:3e:2e:42:8f:60:89:3e:f9:05:1a:9f:bb:
                    e6:66:05:7a:23:be:70:1f:68:65:52:6b:42:49:50:
                    78:9b:0a:5d:70:2c:32:5b:53:cd:a1:ac:f3:24:c1:
                    42:87:c1:cf:16:5e:55:bc:bf:1f:89:8d:42:28:d3:
                    2b:1e:e4:90:1a:d0:fd:9c:99:a1:ae:b6:a3:c0:f9:
                    92:21:50:a1:28:df:ef:08:df:56:28:dc:f3:9c:e9:
                    54:82:48:85:09:01:c8:bf:60:04:48:d7:0e:c0:e9:
                    68:c2:39:91:f2:a7:16:5f:74:66:f7:62:8e:33:21:
                    6b:1a:0d:b2:8c:bd:2b:cf:b2:38:58:10:3d:bf:c9:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:34:3A:34:FA:9B:28:79:16:D4:84:20:99:A2:F0:31:F9:83:5C:D7
            X509v3 Authority Key Identifier:
                keyid:8A:B8:9B:D2:DC:DA:B7:BD:FF:8F:56:8C:10:0B:26:8C:A2:2E:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AB89BD2DCDAB7BDFF8F568C100B268CA22E6BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC5A7EC6D7FE034F483F15190BD85B6799E360C983AD65849E0CFD077C3796A5/0/34352e3233392e34362e302f32342d3234203d3e20323636383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:8a:aa:5a:18:be:20:cf:b4:1d:c8:bd:05:8a:a2:aa:37:03:
         a6:8d:ed:ce:9b:e5:ec:73:50:29:02:5a:07:90:e0:ff:c7:5f:
         5f:51:ac:62:3e:9a:b7:16:93:86:17:43:ed:14:bd:44:29:64:
         e4:13:a8:26:9d:be:7c:86:1f:e4:2a:c0:ea:49:81:2c:c8:7d:
         a4:9d:76:ba:3f:f3:18:8c:1e:b7:26:9a:00:1d:d4:8a:85:9f:
         9c:c5:c3:c9:33:53:c0:dd:07:3f:d6:12:3f:ed:31:2e:3b:4b:
         46:a4:22:b7:c9:7f:09:55:db:c0:80:26:e2:f7:30:3e:48:f6:
         31:b7:53:b9:ee:23:8a:d5:05:58:46:4f:08:87:cc:20:c4:7c:
         5c:a3:39:de:53:e0:64:aa:e3:72:93:9c:fc:9b:ab:f1:5c:18:
         86:7b:43:a1:2d:83:55:ab:1a:fb:f7:3f:1f:54:74:3a:cf:a5:
         34:96:63:ae:fd:64:28:7c:58:4e:07:6b:af:f7:15:a9:23:1b:
         c2:8a:de:18:40:30:da:15:5e:59:10:08:fa:31:12:5c:dc:25:
         35:e2:ee:bc:20:f0:7b:1d:d5:14:0d:6f:27:b9:3a:84:76:ae:
         06:45:68:27:b2:e2:e7:88:7c:b0:e2:10:db:a1:d5:41:73:d4:
         cd:f5:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org