Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323032.roa
File:                     34352e36352e3230332e302f32342d3234203d3e20323032.roa (raw, json)
Hash identifier:          j51zxb10+SuULwLuBSOs80L7GApdV3r3P6RIJiUw2uM=
Subject key identifier:   11:01:39:3E:04:35:7F:D2:2E:61:B4:1C:33:6B:30:6E:B5:7B:67:66
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       7B0AC2951417F16797000DA55D51FF8489D1F1D4
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 17:46:50 +0000
ROA not before:           Tue 05 Mar 2024 17:41:50 +0000
ROA not after:            Tue 04 Mar 2025 17:46:50 +0000
asID:                     202
IP address blocks:        45.65.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0a:c2:95:14:17:f1:67:97:00:0d:a5:5d:51:ff:84:89:d1:f1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Mar  5 17:41:50 2024 GMT
            Not After : Mar  4 17:46:50 2025 GMT
        Subject: CN=1101393E04357FD22E61B41C336B306EB57B6766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:73:ce:39:df:ce:66:9f:06:dc:08:10:e7:3c:
                    dc:27:4c:1c:0e:8b:08:1d:ea:a0:47:da:3d:e7:7d:
                    20:e2:48:9d:ce:a7:34:ac:0e:ea:16:33:4b:51:d1:
                    64:d2:65:e6:30:fb:33:6c:62:5f:94:80:de:39:4d:
                    a3:2d:29:0b:9c:81:22:34:2d:19:18:41:6f:27:17:
                    6a:04:17:40:69:42:d6:19:e7:ef:a1:af:a9:95:b9:
                    75:9e:b6:a0:ff:0c:4d:5c:f1:97:4f:6c:a4:db:7e:
                    60:c6:15:e7:f4:f1:ef:3b:4a:75:e1:22:ab:8c:bd:
                    87:52:24:3b:9a:77:2e:41:a7:43:27:4f:d2:2f:9a:
                    95:c2:b0:49:db:b6:98:bb:eb:f0:e4:9b:40:1f:5a:
                    b6:23:2c:38:62:ab:4e:f5:48:c8:96:a5:a7:d6:ee:
                    91:74:ca:0e:09:eb:2a:58:19:10:2b:c4:50:32:d0:
                    95:2e:ae:62:59:b3:96:eb:7e:bb:1f:8b:2e:0d:49:
                    59:6c:0d:70:67:17:72:ff:a0:3e:d7:b5:3d:bb:e0:
                    c8:89:47:d6:cf:f8:73:b1:f3:7a:2c:23:65:78:e0:
                    ca:25:62:f8:e8:6e:95:cb:78:bf:7d:36:6d:34:57:
                    13:fb:34:04:28:e8:b1:4d:91:4b:7e:71:ad:6a:45:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:39:3E:04:35:7F:D2:2E:61:B4:1C:33:6B:30:6E:B5:7B:67:66
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:90:7c:16:a9:f7:e2:a0:7f:3b:93:9d:f8:13:e9:e8:42:5d:
         5d:6d:c6:9d:ea:f9:36:05:60:a8:7a:2f:3c:85:73:f5:33:db:
         99:2c:e0:87:39:75:35:0a:92:40:cc:93:54:d6:b2:dd:a9:a2:
         77:e2:8c:6f:1d:17:31:10:81:cf:99:08:77:b0:8b:c2:dd:f0:
         fa:a4:8d:cb:73:3b:8c:84:b0:7b:52:85:b6:f3:90:a3:53:3b:
         bf:5b:f5:c9:5a:7d:60:1e:c7:ba:aa:f4:b9:04:67:4a:b3:34:
         6a:bc:35:1c:cf:43:d8:27:19:8a:8a:1e:9c:07:b0:e5:3b:95:
         8b:48:9f:37:d4:38:c9:e1:f5:26:d2:e4:e2:ea:bb:ce:a2:fd:
         c8:9e:6d:b0:96:1a:cd:13:46:10:06:d9:12:fb:83:6b:81:1f:
         b1:3b:1f:81:ce:3a:bc:01:81:a9:35:e9:c2:5f:d2:e2:4e:76:
         81:ea:1d:6d:69:09:b4:c7:f5:e4:e9:d8:58:f6:ec:ff:6b:7f:
         3b:91:43:9b:db:66:1b:86:f1:e2:37:2b:78:14:99:49:2b:60:
         9c:dd:24:4d:38:7c:8c:a9:6a:1d:c5:2d:a3:98:85:e7:bd:0d:
         2f:f0:cf:c8:05:cf:1c:d2:15:e9:54:61:55:aa:96:83:36:af:
         3e:51:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:47:36 2024 by rpki-client on console-ams.rpki-client.org