Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE21E66C337C3035D622E05D210B089A8441579E95F001F27A4381A83D5F5779/0/34352e342e39392e302f32342d3234203d3e20323635373536.roa
File:                     34352e342e39392e302f32342d3234203d3e20323635373536.roa (raw, json)
Hash identifier:          G6sOgtKaTgxv3wLsuPRJ5SuEhblYsGWwbrEX6FeYack=
Subject key identifier:   C2:4C:A9:77:DC:92:71:12:53:EC:29:76:39:90:A7:F3:9A:46:D5:29
Certificate issuer:       /CN=89212299953822D1EC60EF67B419C33581EBDA17
Certificate serial:       6DA33389FB684AD7F5F175D53F12725A0780FCEB
Authority key identifier: 89:21:22:99:95:38:22:D1:EC:60:EF:67:B4:19:C3:35:81:EB:DA:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89212299953822D1EC60EF67B419C33581EBDA17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE21E66C337C3035D622E05D210B089A8441579E95F001F27A4381A83D5F5779/0/34352e342e39392e302f32342d3234203d3e20323635373536.roa
Signing time:             Tue 05 Mar 2024 17:47:54 +0000
ROA not before:           Tue 05 Mar 2024 17:42:54 +0000
ROA not after:            Tue 04 Mar 2025 17:47:54 +0000
asID:                     265756
IP address blocks:        45.4.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE21E66C337C3035D622E05D210B089A8441579E95F001F27A4381A83D5F5779/0/89212299953822D1EC60EF67B419C33581EBDA17.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE21E66C337C3035D622E05D210B089A8441579E95F001F27A4381A83D5F5779/0/89212299953822D1EC60EF67B419C33581EBDA17.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89212299953822D1EC60EF67B419C33581EBDA17.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a3:33:89:fb:68:4a:d7:f5:f1:75:d5:3f:12:72:5a:07:80:fc:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89212299953822D1EC60EF67B419C33581EBDA17
        Validity
            Not Before: Mar  5 17:42:54 2024 GMT
            Not After : Mar  4 17:47:54 2025 GMT
        Subject: CN=C24CA977DC92711253EC29763990A7F39A46D529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:ce:02:f5:47:5d:a1:a9:21:75:bc:e8:6b:
                    0f:11:01:3e:ec:7e:5d:82:69:19:44:8d:7d:30:40:
                    b6:87:22:79:57:c6:a0:52:66:a5:c5:b4:af:d6:35:
                    e2:95:c3:0d:c5:0a:0e:27:f9:98:e3:5c:4d:b2:03:
                    2b:c8:5f:50:08:8c:c1:6a:78:89:7e:b6:7f:a9:e4:
                    03:98:39:e2:05:70:ee:be:06:d3:99:f5:7d:7a:53:
                    37:b9:7e:02:dd:1d:3d:29:d8:c4:a9:3f:c0:1c:f1:
                    49:d2:7e:45:20:61:79:de:36:a9:8a:e4:3d:44:96:
                    22:47:f0:dd:96:5a:3b:c1:30:13:c9:98:4a:75:89:
                    1f:e0:d6:81:a0:18:e2:78:e0:a2:ec:b3:10:64:a0:
                    8d:2d:b6:c7:70:80:64:53:48:6d:90:69:de:70:7e:
                    b9:55:7f:58:b4:dc:15:5a:83:f6:54:9d:3e:3d:41:
                    ac:cf:94:8b:d0:7d:29:c2:5b:a7:43:d4:73:3c:3f:
                    78:ae:e4:48:ea:87:7c:45:94:16:f7:e8:3d:d5:91:
                    6b:c0:b5:cf:07:1e:aa:5c:bd:84:31:fd:dd:02:9a:
                    4e:03:a8:1b:62:da:c3:f0:35:56:3c:39:79:39:40:
                    ee:87:32:bd:16:e2:c9:b9:cd:96:89:47:b2:e8:36:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:A9:77:DC:92:71:12:53:EC:29:76:39:90:A7:F3:9A:46:D5:29
            X509v3 Authority Key Identifier:
                keyid:89:21:22:99:95:38:22:D1:EC:60:EF:67:B4:19:C3:35:81:EB:DA:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE21E66C337C3035D622E05D210B089A8441579E95F001F27A4381A83D5F5779/0/89212299953822D1EC60EF67B419C33581EBDA17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89212299953822D1EC60EF67B419C33581EBDA17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE21E66C337C3035D622E05D210B089A8441579E95F001F27A4381A83D5F5779/0/34352e342e39392e302f32342d3234203d3e20323635373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:be:0a:14:01:4e:a0:45:5c:c9:5c:9a:b1:ce:3d:91:ec:4f:
         c3:22:15:dd:85:6c:e2:30:16:8e:03:72:68:ec:0d:f5:eb:e6:
         12:cd:7f:da:2f:0c:e3:9e:87:03:46:68:4a:fe:5d:5f:7c:62:
         d1:4c:eb:d5:d6:85:a7:56:fa:f0:8d:42:e0:c2:e0:ef:fa:7c:
         90:43:bb:17:65:1e:b7:ba:29:2c:30:5f:82:b0:13:d3:1d:ca:
         01:61:43:c0:cd:9f:36:98:83:a6:92:e6:6c:eb:e3:5f:08:20:
         ed:34:96:81:1b:a6:cf:0e:c7:dc:fc:34:4b:4a:d8:5f:de:0f:
         8a:ee:5a:fa:b8:42:e3:c1:0b:bd:b8:d7:78:18:23:70:6a:3f:
         7f:7a:d1:ee:f6:7b:39:e6:47:21:70:f9:0e:bd:c1:0d:c1:0a:
         ba:a9:49:91:ce:82:0c:6c:cc:f6:b9:b9:23:86:3a:bd:90:19:
         c7:04:09:b9:29:76:c6:b7:53:d0:db:e1:48:25:40:58:66:fc:
         f7:2c:70:1e:8c:0a:a9:a8:73:1d:78:09:ca:7d:c7:56:8a:8c:
         b0:3c:6b:5d:0b:e5:66:3a:af:53:a0:da:01:b8:1e:7b:c2:ca:
         9f:02:90:00:3b:7a:7b:f4:23:46:14:a7:14:8b:9a:cc:ec:93:
         0f:79:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:58 2024 by rpki-client on console-ams.rpki-client.org