Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/34352e3136362e3234302e302f32322d3232203d3e20323633373631.roa
File:                     34352e3136362e3234302e302f32322d3232203d3e20323633373631.roa (raw, json)
Hash identifier:          ZnZuxyaALCjveMQbngu29Lp0g7Y8MrUR98VboqotSlI=
Subject key identifier:   39:61:10:82:83:39:73:B9:02:73:79:24:49:2F:57:09:B4:D7:4C:67
Certificate issuer:       /CN=98CE1CC64A7A92ECAEB302776732E8D0EACA257B
Certificate serial:       36EE709114E684C42E4981C6934A669612372D3F
Authority key identifier: 98:CE:1C:C6:4A:7A:92:EC:AE:B3:02:77:67:32:E8:D0:EA:CA:25:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/34352e3136362e3234302e302f32322d3232203d3e20323633373631.roa
Signing time:             Tue 05 Mar 2024 18:04:35 +0000
ROA not before:           Tue 05 Mar 2024 17:59:35 +0000
ROA not after:            Tue 04 Mar 2025 18:04:35 +0000
asID:                     263761
IP address blocks:        45.166.240.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ee:70:91:14:e6:84:c4:2e:49:81:c6:93:4a:66:96:12:37:2d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98CE1CC64A7A92ECAEB302776732E8D0EACA257B
        Validity
            Not Before: Mar  5 17:59:35 2024 GMT
            Not After : Mar  4 18:04:35 2025 GMT
        Subject: CN=39611082833973B902737924492F5709B4D74C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:64:dc:47:bc:5d:7c:69:e5:50:49:b6:69:
                    57:35:5b:96:f6:8b:07:ba:5a:d7:b2:b3:7e:67:54:
                    cd:6e:2f:12:a0:91:79:6a:cd:b6:fd:bc:58:b7:33:
                    89:24:d1:16:f5:97:17:64:3b:f3:10:40:c1:92:5c:
                    4b:4d:0e:85:a2:af:06:f3:c4:11:64:81:a5:14:29:
                    fa:51:03:af:55:69:a8:dc:b2:18:48:dc:c9:80:8a:
                    1e:41:ae:c2:ac:1e:a0:1d:8e:c9:9a:c7:82:0e:da:
                    2c:90:69:a6:81:c5:c2:93:3b:bc:db:42:88:43:7d:
                    e4:8d:5f:32:7f:e1:90:2d:61:56:06:38:55:ee:58:
                    32:0c:55:05:c3:28:34:90:7b:59:cd:48:1e:4e:32:
                    00:9a:90:dd:a8:b7:9a:eb:ff:2f:90:bf:a9:f4:f1:
                    ab:cf:e5:c5:89:63:2b:50:d6:91:27:b1:df:94:9f:
                    76:70:50:69:db:66:ae:dc:fe:a6:b1:00:f0:99:46:
                    d3:e9:0f:e3:41:ed:65:cb:a9:d7:f5:d5:b9:74:62:
                    20:ba:9b:08:a4:c5:44:ec:0e:13:e3:9e:1e:86:7e:
                    a3:8b:91:c9:aa:dc:4b:e9:06:08:62:db:f3:dc:92:
                    f4:1e:fb:85:d7:82:0b:0c:11:90:76:d0:59:92:3e:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:61:10:82:83:39:73:B9:02:73:79:24:49:2F:57:09:B4:D7:4C:67
            X509v3 Authority Key Identifier:
                keyid:98:CE:1C:C6:4A:7A:92:EC:AE:B3:02:77:67:32:E8:D0:EA:CA:25:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98CE1CC64A7A92ECAEB302776732E8D0EACA257B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4A12F708F6E69CB004597CDB85183A10FDC397C029B0A39BFFA64D9838B83FB/0/34352e3136362e3234302e302f32322d3232203d3e20323633373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:59:ee:37:1c:32:cf:31:4f:30:de:e2:7b:93:7c:27:c3:50:
         66:88:64:69:c3:e6:33:12:be:8c:d7:4c:57:04:fd:17:3c:21:
         c3:25:09:24:f4:ae:5f:79:cb:cc:02:53:a5:33:98:fb:4f:ef:
         9c:6a:27:f2:18:95:02:02:27:42:58:d0:46:e6:46:17:43:e9:
         ba:d6:bf:3a:ee:fd:85:4e:f9:d0:fc:26:a1:f2:c8:03:94:a0:
         33:73:b0:7d:98:8f:79:df:34:dc:8a:95:ff:06:5a:0c:d5:c2:
         81:6a:f0:22:11:1d:f6:22:bf:7b:86:e9:39:fc:14:b5:59:c7:
         4a:9d:2a:b6:53:f9:1e:68:58:e0:39:c2:c5:23:51:23:53:6c:
         bf:7e:ab:da:f8:73:70:bb:22:6c:e1:da:6a:2e:8c:4a:ed:fb:
         c4:a9:2d:21:e5:6a:c8:38:38:21:ee:a6:37:b4:ed:62:44:9c:
         01:b0:62:16:f2:c3:01:2c:88:74:56:c9:37:0a:ef:bc:69:66:
         bd:cb:51:0a:11:e7:8c:f4:51:f2:66:19:a3:e6:74:54:5a:cc:
         47:6a:ea:0e:85:77:ed:3d:38:d8:e3:57:b0:4c:b9:79:2c:21:
         ee:0e:fb:7a:6a:9e:a1:47:21:6f:6f:f7:54:ed:d7:25:05:cd:
         fa:27:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 12:16:18 2024 by rpki-client on console-ams.rpki-client.org