Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa
File:                     34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa (raw, json)
Hash identifier:          UeTGU6qIl0BpH7rmWVYl/7LPWXSUqrFWPxRVWYkmLk0=
Subject key identifier:   4E:41:7C:B8:72:6E:AA:98:D0:27:B5:23:44:A6:DD:4E:64:E6:50:5B
Certificate issuer:       /CN=69B942F2442A4B878DCF7E43089B60B94955608D
Certificate serial:       03E1019B285DEFF811B7E604EF826E56DB2F424D
Authority key identifier: 69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa
Signing time:             Tue 05 Mar 2024 17:48:49 +0000
ROA not before:           Tue 05 Mar 2024 17:43:49 +0000
ROA not after:            Tue 04 Mar 2025 17:48:49 +0000
asID:                     269799
IP address blocks:        45.233.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e1:01:9b:28:5d:ef:f8:11:b7:e6:04:ef:82:6e:56:db:2f:42:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B942F2442A4B878DCF7E43089B60B94955608D
        Validity
            Not Before: Mar  5 17:43:49 2024 GMT
            Not After : Mar  4 17:48:49 2025 GMT
        Subject: CN=4E417CB8726EAA98D027B52344A6DD4E64E6505B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:47:ac:0a:c0:6e:e1:5c:7f:b8:1b:92:a3:
                    0e:1e:50:cc:e2:78:61:d5:b8:85:79:a1:53:f6:e0:
                    6a:da:23:7a:7b:00:69:a2:ad:a7:c9:c2:3f:0d:6d:
                    5f:ff:cc:da:80:1f:d3:48:72:8e:7b:99:f2:7c:61:
                    04:9e:a8:44:3c:9e:18:98:10:9c:c0:94:2c:23:07:
                    c0:20:a0:f9:87:f3:77:34:e0:5d:9b:47:dc:d5:ca:
                    90:86:75:6d:ab:0e:77:8c:6a:d2:c1:57:72:65:dc:
                    a2:7d:ae:cb:33:61:51:d2:01:c8:d2:87:84:2f:0b:
                    21:73:7a:77:b8:df:f1:e9:24:e2:d6:c3:ed:cb:3e:
                    83:dc:c0:90:02:d8:17:59:87:be:ca:a2:2d:7d:ff:
                    63:77:36:14:1d:0e:31:de:a1:a6:97:36:36:64:50:
                    9a:4e:ac:e6:bb:8c:15:51:57:15:e3:c1:b9:73:5b:
                    b4:20:17:38:db:53:3e:7c:ab:05:62:80:84:db:11:
                    4e:0b:ff:f7:22:7e:bb:c0:c4:88:d1:e1:b8:19:b6:
                    51:80:ca:4c:1d:3e:77:86:43:b2:bc:8a:83:45:fe:
                    f0:db:31:a2:c6:e5:28:31:6f:20:f9:58:71:e2:eb:
                    b0:11:7b:ee:c0:c0:91:62:e5:b8:c3:83:08:83:a5:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:41:7C:B8:72:6E:AA:98:D0:27:B5:23:44:A6:DD:4E:64:E6:50:5B
            X509v3 Authority Key Identifier:
                keyid:69:B9:42:F2:44:2A:4B:87:8D:CF:7E:43:08:9B:60:B9:49:55:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/69B942F2442A4B878DCF7E43089B60B94955608D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69B942F2442A4B878DCF7E43089B60B94955608D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5C1A3C2200CA4A5B2DCC6EFF63FFA77F83B254BE22B07526DE39ACFE3DE8C5D/0/34352e3233332e3130332e302f32342d3234203d3e20323639373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:87:38:64:e5:9e:bf:ae:20:e2:9d:48:4e:73:e5:10:62:cc:
         f0:bb:b9:9c:be:87:c0:68:49:ee:f2:86:29:b3:cf:30:e7:8e:
         e8:cc:39:a0:64:fa:8b:01:e3:b1:5f:cd:78:50:c7:b4:84:a4:
         9a:5a:c9:5f:96:c2:f4:0f:58:d0:e2:ec:31:4f:24:b8:25:d3:
         d7:af:5d:32:6a:55:53:3d:ed:10:47:50:65:e8:c4:bf:cc:50:
         cc:f3:13:6d:fa:e2:5f:82:6f:49:97:09:91:e7:f6:0c:59:bb:
         e1:bf:62:b5:a6:fa:9b:85:3d:10:88:6e:16:ab:4c:40:57:c5:
         a0:55:93:33:e2:8f:90:4f:09:72:b3:fb:92:be:c8:de:93:7f:
         b2:97:26:2e:28:f8:c4:d4:72:27:b0:97:7b:ac:aa:3c:b4:05:
         b5:b7:3f:c5:6d:a7:e5:58:04:2c:9d:5f:4c:e8:e1:98:52:02:
         cb:3c:ae:71:5a:a0:6d:94:97:1e:60:0d:70:be:d0:01:75:03:
         b9:5d:78:ff:ef:b4:50:e8:a3:f7:cc:7c:e4:ac:47:aa:6c:76:
         19:a2:bd:5e:65:61:0b:df:af:d4:db:38:4f:7f:db:39:5a:c1:
         45:8d:83:66:ca:08:60:fc:96:df:dc:9f:77:c8:29:7e:69:81:
         a0:4f:ae:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org