Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e2033333536.roa
File:                     34352e36352e3230332e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          wGZkksVm8KlPy+4erCuBP8gV3VaVu6BVbJLIA+KsPgU=
Subject key identifier:   3B:09:FA:14:01:34:B3:63:4B:1F:26:C8:B2:11:2D:56:29:05:EC:B9
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       1756D760AB7C27D0EDCA557DE9C3EED9BA82DA2F
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 17:46:51 +0000
ROA not before:           Tue 05 Mar 2024 17:41:51 +0000
ROA not after:            Tue 04 Mar 2025 17:46:51 +0000
asID:                     3356
IP address blocks:        45.65.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:56:d7:60:ab:7c:27:d0:ed:ca:55:7d:e9:c3:ee:d9:ba:82:da:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Mar  5 17:41:51 2024 GMT
            Not After : Mar  4 17:46:51 2025 GMT
        Subject: CN=3B09FA140134B3634B1F26C8B2112D562905ECB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:e4:da:57:12:b2:66:74:e1:98:e7:c7:8c:
                    80:38:18:35:bd:2c:19:61:c4:e3:51:30:6a:d5:97:
                    68:78:5b:11:37:00:6b:1f:4a:25:4a:f4:ea:66:0c:
                    fa:08:ce:20:69:e4:eb:38:58:f9:99:d3:09:4a:33:
                    44:fb:9c:c7:6d:c1:c2:c6:74:2a:ee:f7:9e:b7:5d:
                    d2:53:3c:22:a4:76:43:a7:81:4b:7d:fc:24:3e:7f:
                    e0:0c:46:ea:c6:de:8d:e5:7f:10:44:84:0e:e6:5c:
                    29:c8:bc:3a:4d:99:db:31:69:9b:0c:e8:6e:bd:87:
                    3a:10:a4:ca:b9:9c:80:d5:26:96:cf:ce:c3:c5:e7:
                    8e:46:71:f4:71:91:94:ba:2c:bd:14:c1:c0:4e:2e:
                    b5:de:2e:90:1c:e5:f0:ac:fd:fd:6c:b3:1a:87:56:
                    cd:25:ca:aa:b1:c2:19:1c:98:55:bc:86:41:2a:8b:
                    5c:6b:fc:05:eb:89:39:fb:d1:50:46:38:58:ec:c7:
                    8e:d6:90:f8:33:b6:51:b0:ed:ac:2b:fc:d0:b5:0f:
                    ca:3b:71:72:31:dd:1d:4a:80:2b:0a:33:92:b7:09:
                    6f:55:e7:e6:af:24:38:87:a1:3f:6f:61:95:8c:b9:
                    68:29:40:6f:93:ed:2a:7a:2d:1c:05:ae:d2:a5:7c:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:09:FA:14:01:34:B3:63:4B:1F:26:C8:B2:11:2D:56:29:05:EC:B9
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/34352e36352e3230332e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:95:66:a1:30:11:b1:c4:b9:dc:8a:29:70:40:fa:eb:bb:d1:
         a0:13:8f:f9:94:13:07:7b:22:25:1b:e1:7a:d2:f6:a5:f3:fb:
         06:1d:22:f7:50:3f:23:a0:68:69:f6:4c:62:2d:77:ea:50:a4:
         3b:65:50:37:55:e8:fb:57:f1:56:02:66:2b:db:2c:5e:f3:12:
         f0:84:fa:4d:a5:5a:79:90:41:00:1a:fe:1f:81:a6:f2:75:bd:
         dd:b4:f7:58:36:e1:58:f3:40:a3:c0:a9:25:f7:84:42:a0:36:
         a1:66:1a:e6:64:0c:89:6d:5a:24:d5:35:fb:d3:06:b2:cc:7a:
         30:36:49:12:cc:31:c6:71:49:85:7b:0e:31:85:47:c3:e2:fd:
         6f:fa:3d:60:2e:09:6c:dc:b4:0b:27:69:27:ea:21:5a:b8:5f:
         3b:e3:df:d0:00:76:80:8a:81:2a:f1:b9:af:e1:0f:ab:46:21:
         fc:be:45:df:11:66:08:69:e1:e8:f5:24:9e:e9:86:a7:aa:e0:
         43:4a:12:61:04:83:0e:bb:e8:5b:56:d5:e7:45:fa:0c:88:6a:
         ae:92:83:18:4d:72:7a:02:80:23:4e:22:a9:0d:8a:ca:75:8c:
         4b:b8:66:60:b7:da:b3:7c:af:a2:2c:bd:78:f3:25:54:8e:a3:
         e5:64:77:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:27:32 2024 by rpki-client on console-ams.rpki-client.org