Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130302e302f32332d3234203d3e20323636383531.roa
File:                     34352e3137302e3130302e302f32332d3234203d3e20323636383531.roa (raw, json)
Hash identifier:          pxB2vge3pYVH4Hei/eNqApXZSgCWMpInqNg2HwpHHrk=
Subject key identifier:   B9:74:17:A7:AE:9C:6C:4C:7E:8E:0B:65:EE:CC:FE:FE:11:D6:47:74
Certificate issuer:       /CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
Certificate serial:       3CBE821C2FAF5E91F3612E70AEBDAD138B8F0942
Authority key identifier: 84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130302e302f32332d3234203d3e20323636383531.roa
Signing time:             Sun 25 Aug 2024 18:20:00 +0000
ROA not before:           Sun 25 Aug 2024 18:15:00 +0000
ROA not after:            Sun 24 Aug 2025 18:20:00 +0000
asID:                     266851
IP address blocks:        45.170.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:be:82:1c:2f:af:5e:91:f3:61:2e:70:ae:bd:ad:13:8b:8f:09:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84B320834CA10CE018169848F7AE0810EB3E7C5D
        Validity
            Not Before: Aug 25 18:15:00 2024 GMT
            Not After : Aug 24 18:20:00 2025 GMT
        Subject: CN=B97417A7AE9C6C4C7E8E0B65EECCFEFE11D64774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:39:cb:f5:57:30:b9:36:b1:9e:bc:7a:73:
                    d8:69:89:fa:c3:0d:be:ea:32:fa:03:6f:58:bd:b6:
                    e5:4d:1c:2b:4d:33:41:05:f9:1b:3f:02:0e:a0:19:
                    19:61:7d:56:d7:ef:72:b6:f1:10:d5:74:2d:ba:68:
                    56:a6:db:1f:46:6a:bf:fb:d5:0d:e6:05:8a:4a:66:
                    db:9c:30:9e:c5:ce:1f:60:03:dc:e9:4d:bf:68:1f:
                    73:bb:0f:29:92:f7:ca:12:4a:84:55:04:6f:67:5c:
                    fc:5f:f8:a1:04:de:48:7f:2d:da:f2:a8:3e:9c:12:
                    86:22:01:6f:4b:06:d5:3c:a8:5c:40:76:64:3e:1f:
                    e6:02:93:30:85:2e:a6:4e:da:4f:1a:68:8e:d2:5f:
                    ce:29:d9:13:dd:ec:8f:27:a7:05:76:e6:65:e2:21:
                    17:fa:00:c5:c8:50:6c:90:50:97:ea:43:31:56:e7:
                    f9:a2:32:06:76:13:3a:57:fc:d9:d5:f8:7b:b3:86:
                    59:b4:6a:08:e2:b5:41:e9:de:91:c9:09:44:df:8b:
                    e2:f8:48:06:4b:c0:76:ee:47:64:be:d3:08:10:a1:
                    07:21:82:26:69:d5:f3:e3:a2:cc:bc:38:10:c1:61:
                    57:b4:44:fd:e1:3d:b8:b9:30:85:96:81:f6:9e:da:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:17:A7:AE:9C:6C:4C:7E:8E:0B:65:EE:CC:FE:FE:11:D6:47:74
            X509v3 Authority Key Identifier:
                keyid:84:B3:20:83:4C:A1:0C:E0:18:16:98:48:F7:AE:08:10:EB:3E:7C:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84B320834CA10CE018169848F7AE0810EB3E7C5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6F9D14BE9A2843E565E9AD1DEB4EA82763CE085815633D8F8CF60693B85B714/0/34352e3137302e3130302e302f32332d3234203d3e20323636383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:50:1b:f6:02:cb:db:7d:22:ca:08:80:33:58:da:4a:89:
         c4:a2:48:5f:43:a9:a3:01:74:25:ca:10:6a:30:7e:58:bf:94:
         00:d6:16:23:65:ca:c9:59:54:61:fa:42:f2:28:7a:4c:54:09:
         36:66:58:d2:32:6c:1d:09:13:c5:c3:0a:3c:e3:eb:59:14:4b:
         4d:2f:a1:a5:94:1e:f7:12:e7:47:2c:91:74:23:59:99:a5:8d:
         92:41:6b:1e:70:94:49:8d:79:91:56:56:7b:4e:d7:28:05:30:
         35:1e:b6:96:fa:64:80:39:14:2f:31:d7:07:85:4b:f5:43:09:
         d6:23:72:23:bc:c5:b0:a3:78:e1:3f:f1:17:27:52:8d:a2:98:
         cf:3e:ea:37:eb:28:9e:34:a1:89:21:43:bd:cd:d9:a5:03:13:
         e5:0b:c2:e8:88:63:b9:c7:f9:9f:06:37:e4:eb:60:c0:7c:83:
         03:90:c0:a0:bf:03:2a:3c:af:39:34:d6:97:f2:de:27:ff:a4:
         10:79:5f:27:6d:71:5f:7c:8f:50:d7:14:dc:0f:ba:ee:ea:bc:
         3c:87:1b:2a:43:dc:46:8f:e6:05:17:13:2b:fb:43:c6:df:b8:
         8c:3e:68:b9:d7:05:e9:ae:18:34:6c:ba:e9:3c:9d:90:02:af:
         65:dd:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:41 2024 by rpki-client on console-fra.rpki-client.org