Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32322d3234203d3e20323636383534.roa
File:                     34352e3233392e36302e302f32322d3234203d3e20323636383534.roa (raw, json)
Hash identifier:          XSUvPXVx98YaIewMY6shkcm7prHAM31i82faLrBdnSY=
Subject key identifier:   C6:38:17:17:58:BA:A9:70:66:3B:43:F6:86:46:57:E0:C4:83:5C:6E
Certificate issuer:       /CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
Certificate serial:       79B499A42C3120A2AC16B60C39D28256880DF105
Authority key identifier: AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32322d3234203d3e20323636383534.roa
Signing time:             Tue 05 Mar 2024 17:59:14 +0000
ROA not before:           Tue 05 Mar 2024 17:54:14 +0000
ROA not after:            Tue 04 Mar 2025 17:59:14 +0000
asID:                     266854
IP address blocks:        45.239.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b4:99:a4:2c:31:20:a2:ac:16:b6:0c:39:d2:82:56:88:0d:f1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADA207DD1F23D0467C67E6A40AD7F7359785A137
        Validity
            Not Before: Mar  5 17:54:14 2024 GMT
            Not After : Mar  4 17:59:14 2025 GMT
        Subject: CN=C638171758BAA970663B43F6864657E0C4835C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:d1:b8:e7:a7:02:9d:7f:a6:95:76:20:bf:
                    35:fa:cb:c0:6d:69:b2:80:f7:c9:00:f7:78:0b:97:
                    61:63:d3:f0:0a:eb:c2:56:f4:a4:a4:b9:39:54:56:
                    77:bc:5b:41:75:2c:1b:96:32:d7:e2:9c:47:c9:71:
                    2a:41:5d:51:fd:c5:b9:23:1c:17:32:03:73:af:81:
                    df:80:81:b6:86:4f:c3:a6:91:a7:ce:e5:a3:11:69:
                    7a:95:51:61:57:1d:d2:99:6b:97:76:09:76:10:5e:
                    aa:dc:97:a1:fe:93:30:13:99:a1:b1:15:bf:2d:9e:
                    62:98:36:44:2b:d4:cd:b4:0c:44:ad:00:42:fe:a1:
                    e6:63:e6:d3:84:15:2b:9c:70:0d:f1:61:70:5f:ec:
                    fd:f9:68:7e:d6:7f:c6:97:f0:7b:27:e2:25:90:97:
                    25:62:00:37:aa:35:dd:2e:74:42:77:47:4e:59:e5:
                    56:d8:7b:b4:8e:c1:f4:a9:de:31:f7:de:fc:b0:2c:
                    eb:e6:aa:92:90:44:74:29:fa:99:02:b9:c5:74:29:
                    ab:18:b1:fb:38:ae:03:6d:1b:fc:05:92:3c:0d:37:
                    d2:21:b6:8a:86:c6:ef:f3:aa:d3:ca:a1:b1:36:ff:
                    c4:80:f4:cb:2f:53:f1:b7:54:87:e5:79:fd:8d:98:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:17:17:58:BA:A9:70:66:3B:43:F6:86:46:57:E0:C4:83:5C:6E
            X509v3 Authority Key Identifier:
                keyid:AD:A2:07:DD:1F:23:D0:46:7C:67:E6:A4:0A:D7:F7:35:97:85:A1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADA207DD1F23D0467C67E6A40AD7F7359785A137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8C7ABB9B6C22975616248C48B9E8346633C335C0D6658116E528E60D87DE662/0/34352e3233392e36302e302f32322d3234203d3e20323636383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:c3:c2:c8:8e:2b:bc:db:c3:bc:b8:fe:ab:5c:8c:b6:38:22:
         8f:33:8a:88:72:15:2f:38:0c:40:05:31:91:92:88:93:9c:aa:
         66:d2:2c:c0:2c:64:53:43:c0:b8:e1:36:a7:32:ae:ef:f9:5d:
         fb:e0:58:5f:d1:85:34:24:f2:37:c8:8c:80:71:63:c0:4f:3f:
         3a:8f:6b:8b:bb:25:a3:42:c4:b9:e9:cd:4e:9e:84:0d:b5:9d:
         53:9e:95:5b:18:e2:3c:b4:2f:e5:51:cf:e6:51:b5:e6:ec:78:
         bf:95:59:7e:a9:1b:2c:46:20:69:de:39:d1:1f:30:ed:de:4c:
         a5:fb:f9:1f:c9:f2:2e:d7:66:45:75:f8:9e:4a:30:ca:c5:34:
         5f:28:67:08:af:09:58:45:d9:63:9e:13:1a:1a:79:79:46:07:
         a1:6e:a3:f8:53:fc:59:d2:62:aa:4f:a3:e0:ae:77:bc:20:fb:
         19:43:dc:86:41:2d:08:5f:46:d2:42:9b:38:6e:71:cf:c2:8f:
         9b:72:af:d9:22:14:8b:4e:9a:d0:a7:95:53:1e:ab:05:00:72:
         d4:fc:bc:ba:04:17:91:74:d1:8a:2f:c5:3e:c2:a1:17:00:23:
         e8:65:48:20:ad:03:55:f3:04:6f:a5:b2:9a:40:d3:ec:35:97:
         16:ef:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org