Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa
File:                     34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa (raw, json)
Hash identifier:          aztaKMF8HhRZh5b3crcCe9Afm33b2/LutweWxUxyzRU=
Subject key identifier:   1C:2E:83:B9:4E:76:33:4E:0A:3F:D8:6A:5C:FB:F9:BA:FB:FD:45:2D
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       27A93BABA4B3E54EB349F16ED7EC256405ADCC6C
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa
Signing time:             Tue 05 Mar 2024 17:48:51 +0000
ROA not before:           Tue 05 Mar 2024 17:43:51 +0000
ROA not after:            Tue 04 Mar 2025 17:48:51 +0000
asID:                     266790
IP address blocks:        45.233.102.0/24 maxlen: 27

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a9:3b:ab:a4:b3:e5:4e:b3:49:f1:6e:d7:ec:25:64:05:ad:cc:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Mar  5 17:43:51 2024 GMT
            Not After : Mar  4 17:48:51 2025 GMT
        Subject: CN=1C2E83B94E76334E0A3FD86A5CFBF9BAFBFD452D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:60:4f:67:4e:98:46:c4:f5:74:3c:9e:0b:
                    61:5e:ee:6c:3f:c4:59:58:80:2d:ed:0b:99:dc:02:
                    4b:9d:da:cc:c7:bd:2d:4d:be:38:e7:56:c2:b3:58:
                    ab:b7:d8:a0:ad:cf:de:af:db:35:e4:d2:0f:21:17:
                    e4:1f:0d:e2:43:e1:a4:99:cc:8b:96:1c:76:78:57:
                    45:b9:3f:8a:3a:bf:b7:02:77:47:8a:67:da:50:84:
                    87:05:0c:7d:22:54:5d:bd:8c:6f:7f:69:dd:c6:c2:
                    ea:9b:e3:ed:c4:89:bf:f9:70:ff:64:e7:91:5f:b0:
                    75:e5:ed:84:76:10:9c:ed:4e:dd:0b:fd:34:fc:1b:
                    f0:71:c9:81:34:fa:d6:c5:f8:58:d9:13:a5:e0:5c:
                    85:d3:9f:3a:1a:c3:77:86:f2:4f:d5:22:d5:27:c0:
                    92:07:ac:5d:76:38:09:70:28:c3:b3:3c:94:d8:b6:
                    e6:af:14:2c:80:a3:f9:39:d2:a1:91:22:54:9b:25:
                    83:68:07:2b:1d:76:9b:dc:2a:59:d5:9c:eb:e2:dd:
                    7f:07:ad:6b:53:01:92:a2:65:94:1c:80:2b:12:65:
                    35:2a:29:1d:db:63:37:b1:12:ac:99:bc:8c:4c:04:
                    30:31:17:f1:06:b2:44:71:c5:e7:93:b8:5e:4c:9c:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2E:83:B9:4E:76:33:4E:0A:3F:D8:6A:5C:FB:F9:BA:FB:FD:45:2D
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130322e302f32342d3237203d3e20323636373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:34:a6:e2:15:2c:89:dc:ab:e6:8f:55:d2:42:6c:08:72:
         88:58:f6:2d:89:fc:a7:98:7b:e4:f9:32:55:fe:bb:ee:52:88:
         1b:47:1e:17:4a:f3:d0:1c:fa:75:96:d4:05:57:4b:18:31:6c:
         10:78:0e:e7:55:ea:87:1c:be:1d:25:24:18:a3:42:f7:fb:5f:
         2b:24:03:8b:36:be:90:47:fd:af:6f:08:36:12:e0:c3:4a:74:
         8b:27:23:0f:38:1b:f9:28:52:05:40:75:84:24:3b:b9:13:20:
         14:d1:b1:9a:9e:b6:b4:4a:88:c5:63:6e:64:1a:bd:b9:3a:a9:
         a8:0e:59:12:c4:4d:1c:fa:dc:8b:9d:89:9d:d7:ac:8d:84:0d:
         2b:60:44:a3:79:83:c8:26:a9:2d:08:97:9a:d3:cc:aa:05:7a:
         6c:4f:3f:3d:fa:f4:8a:20:0c:dd:33:38:b5:78:09:4a:f1:41:
         14:3d:d0:d6:19:87:96:5e:fe:40:20:38:02:7d:02:c7:4d:1c:
         be:70:f7:47:f7:c4:32:d8:3b:e2:e6:49:35:04:cc:37:10:f0:
         ff:6f:9c:24:6c:db:00:b3:b0:49:d1:06:ff:10:64:39:2f:e9:
         33:25:9d:ea:0b:2f:66:64:58:b6:21:b8:aa:29:c0:62:77:bc:
         be:01:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org