Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/34352e3138392e3231362e302f32322d3234203d3e20323633373933.roa
File:                     34352e3138392e3231362e302f32322d3234203d3e20323633373933.roa (raw, json)
Hash identifier:          u/X+sJZbS2e9Cs4ryMTo9Jf8ClgH58Uly8xIu7nwHss=
Subject key identifier:   99:97:E4:DC:2B:FD:8A:82:19:8E:0E:B2:AA:0C:FF:D0:F1:42:45:E7
Certificate issuer:       /CN=E893E7DF088A28A1F63079C5C26B3F63D1DB965E
Certificate serial:       591117A7F76C6B136DAD7428495EC4F961F17ED7
Authority key identifier: E8:93:E7:DF:08:8A:28:A1:F6:30:79:C5:C2:6B:3F:63:D1:DB:96:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/34352e3138392e3231362e302f32322d3234203d3e20323633373933.roa
Signing time:             Tue 05 Mar 2024 18:07:28 +0000
ROA not before:           Tue 05 Mar 2024 18:02:28 +0000
ROA not after:            Tue 04 Mar 2025 18:07:28 +0000
asID:                     263793
IP address blocks:        45.189.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:11:17:a7:f7:6c:6b:13:6d:ad:74:28:49:5e:c4:f9:61:f1:7e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E893E7DF088A28A1F63079C5C26B3F63D1DB965E
        Validity
            Not Before: Mar  5 18:02:28 2024 GMT
            Not After : Mar  4 18:07:28 2025 GMT
        Subject: CN=9997E4DC2BFD8A82198E0EB2AA0CFFD0F14245E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:33:6a:dc:76:a0:3e:53:27:ac:df:08:c3:
                    f7:8d:02:7d:00:b0:08:93:9a:59:39:ef:6d:98:48:
                    7a:ba:16:99:5d:3e:5f:7d:51:8d:8f:10:77:f6:1c:
                    94:5a:ce:d7:d6:9f:3f:64:e2:84:11:b1:e1:d3:18:
                    66:20:44:57:7d:2e:44:02:6b:a5:21:d0:47:fc:5b:
                    a4:9d:78:c9:76:8c:5b:6d:4f:cd:a1:9d:e4:30:b5:
                    dd:59:04:c9:75:5c:02:b0:14:2e:4d:ce:95:0f:4f:
                    31:5c:89:f2:9a:c6:ca:09:de:88:7a:6a:df:29:96:
                    39:15:b8:30:ec:97:46:83:e7:6d:2e:b4:58:25:ed:
                    ad:62:ad:de:37:46:03:41:86:a2:a3:58:2f:54:f3:
                    e6:eb:d1:5a:50:ed:f4:08:f9:ca:b5:82:89:aa:0c:
                    43:38:84:85:33:62:da:bc:55:61:3a:aa:89:9e:ec:
                    55:ba:3e:94:62:0e:7e:e6:45:90:4a:37:4f:e7:05:
                    37:25:7e:40:ac:88:fb:1c:9a:e9:5e:c2:5b:de:17:
                    28:ef:63:49:23:4a:e2:b2:21:66:41:67:b7:bb:a8:
                    2a:20:c5:ec:0c:ea:ee:69:40:f1:48:a1:1a:4e:d8:
                    30:b9:7c:9b:f2:39:c0:ab:76:c2:22:fe:08:ed:bc:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:97:E4:DC:2B:FD:8A:82:19:8E:0E:B2:AA:0C:FF:D0:F1:42:45:E7
            X509v3 Authority Key Identifier:
                keyid:E8:93:E7:DF:08:8A:28:A1:F6:30:79:C5:C2:6B:3F:63:D1:DB:96:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E893E7DF088A28A1F63079C5C26B3F63D1DB965E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDF8F0F5D4C1C13B8DC15D3D2E7148D87101FECA19F695464DAADA661340AC5D/0/34352e3138392e3231362e302f32322d3234203d3e20323633373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:c5:e9:be:20:b9:77:a6:e7:7a:50:36:b5:41:68:49:c0:b8:
         94:30:94:82:d6:17:c7:e0:8b:c1:06:58:63:a9:5f:06:85:46:
         61:a7:9f:53:01:e0:33:b2:33:bc:29:dd:69:29:d1:4f:2a:05:
         ab:c6:61:93:8c:56:8b:9c:14:e9:63:3a:fe:97:2f:69:ce:6a:
         d5:88:5f:37:a2:a8:44:60:25:1d:40:b6:e5:ce:d5:bf:cb:85:
         67:39:c6:b6:3f:bb:90:26:da:fa:62:90:ed:43:9c:92:1e:16:
         db:c2:f9:d9:99:8e:30:64:b9:9e:30:34:83:bc:47:5b:9c:b9:
         8e:c5:7b:e4:48:af:78:46:53:45:f0:45:57:09:cf:e1:3a:1c:
         63:5f:9f:f3:f0:1c:05:75:cb:bb:50:f2:2d:4c:2d:4b:05:f7:
         10:f9:55:75:f5:5a:5b:fb:13:87:f3:b8:f4:6e:95:7c:9c:1b:
         1c:2f:e8:df:4d:01:02:09:94:fa:2f:69:6e:b6:d9:21:ae:6d:
         3b:c4:ab:35:ad:28:f9:35:3b:95:9c:f2:53:5b:b9:9b:33:35:
         ae:10:92:b3:92:35:7a:24:9a:1b:66:5b:da:3b:2c:03:68:7a:
         55:49:e1:c8:71:dc:4e:5d:01:90:ba:06:51:75:16:95:35:06:
         b1:1e:e8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:11 2024 by rpki-client on console-ams.rpki-client.org