Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/34352e36352e3234342e302f32322d3234203d3e20323635373231.roa
File:                     34352e36352e3234342e302f32322d3234203d3e20323635373231.roa (raw, json)
Hash identifier:          Z6ZA1OhKZh5CCWNOKEmhMj7xJo7RZPO+1yppi0zzNZw=
Subject key identifier:   84:5A:2F:12:F7:AD:71:F1:9C:E6:23:44:BA:B9:02:A0:6B:F5:2F:9F
Certificate issuer:       /CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
Certificate serial:       4B59D70ED33E9906A6530EBC0EB5856627E6451B
Authority key identifier: 2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/34352e36352e3234342e302f32322d3234203d3e20323635373231.roa
Signing time:             Tue 05 Mar 2024 18:08:56 +0000
ROA not before:           Tue 05 Mar 2024 18:03:56 +0000
ROA not after:            Tue 04 Mar 2025 18:08:56 +0000
asID:                     265721
IP address blocks:        45.65.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:d7:0e:d3:3e:99:06:a6:53:0e:bc:0e:b5:85:66:27:e6:45:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9
        Validity
            Not Before: Mar  5 18:03:56 2024 GMT
            Not After : Mar  4 18:08:56 2025 GMT
        Subject: CN=845A2F12F7AD71F19CE62344BAB902A06BF52F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:6c:fd:a5:e7:29:84:48:e2:ff:0c:8d:5f:
                    58:dc:49:db:d6:8b:2d:de:a4:37:10:03:43:3a:36:
                    b5:25:a0:02:33:a2:28:70:4c:04:22:f2:c0:0e:46:
                    c4:56:f5:fa:0f:99:26:1a:52:30:a9:60:24:a3:81:
                    ae:2d:35:c3:ef:f6:80:25:82:50:ca:2e:ad:85:48:
                    5a:9d:ec:ef:fe:90:f3:85:71:e8:56:1e:16:e9:3b:
                    20:4b:94:2f:28:9b:3b:91:e7:4f:21:85:af:65:97:
                    68:2d:19:b1:7c:f8:e9:d9:0f:8d:6d:8d:40:7a:06:
                    cd:9e:b5:56:4b:49:b1:8e:0d:5e:95:6b:0c:cb:68:
                    8d:8b:81:94:9a:11:c1:41:e1:d1:87:b1:8c:1e:1b:
                    12:2b:a2:b0:7d:42:26:b1:d6:c8:b3:40:5e:73:57:
                    6a:6c:82:8a:cc:2c:e4:b0:7f:7a:3b:c6:20:fd:fc:
                    b7:09:bb:5a:de:1a:38:f7:78:89:df:f2:6f:7c:b6:
                    b0:fb:d5:e1:e0:f8:0e:ff:64:bd:58:77:ca:78:1c:
                    91:dc:f2:d0:98:19:9e:9c:11:b5:33:0d:ec:e7:d6:
                    58:87:b5:f9:71:9e:5e:f9:43:23:a8:95:87:30:10:
                    13:e6:93:f7:c7:72:cd:e9:74:61:00:60:6d:08:e9:
                    f1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5A:2F:12:F7:AD:71:F1:9C:E6:23:44:BA:B9:02:A0:6B:F5:2F:9F
            X509v3 Authority Key Identifier:
                keyid:2F:8C:36:80:D6:F8:8B:72:EC:06:F1:32:6C:AA:0A:34:8A:E4:FA:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F8C3680D6F88B72EC06F1326CAA0A348AE4FAA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D90725055620C1A52F09E9DBBABEB3B012803B7C253881FC4A6C3942F15EC407/0/34352e36352e3234342e302f32322d3234203d3e20323635373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:17:3c:43:af:47:ea:06:70:d3:24:c9:9f:58:54:2a:af:
         2d:f4:b1:7f:ca:69:32:f6:2a:6b:49:2b:08:e0:a4:ef:13:f0:
         da:1c:40:43:40:79:d8:9d:4b:56:2b:b7:bc:da:e1:51:78:b4:
         05:36:99:f0:b6:04:44:d7:70:85:04:c0:ac:d2:71:d0:34:45:
         24:1a:31:86:22:f0:c0:b6:e2:4b:c3:ff:af:47:a8:44:2b:1f:
         de:b1:b8:73:42:c6:19:3f:90:c0:6a:a8:07:68:a7:54:2c:f6:
         31:2f:af:44:d5:7d:64:56:bd:52:c6:f7:57:72:33:4f:f2:2a:
         5c:14:25:52:83:1a:8f:c1:d8:26:c7:f4:ab:01:bb:28:19:26:
         93:1a:49:ea:63:19:21:b5:ba:13:e5:c8:37:32:b1:91:1d:1f:
         5c:a4:c3:20:59:bf:2d:33:43:ce:a2:6b:e9:2b:36:bb:51:5d:
         23:60:5f:7f:97:db:e9:fa:5b:33:57:6b:a7:34:9f:1b:16:8d:
         b6:11:cd:0f:b4:4a:cc:1a:2b:27:cc:1d:11:89:c3:df:64:83:
         b3:28:ca:f7:66:5f:79:da:44:89:ad:75:12:8d:23:e2:53:92:
         2e:62:b2:f4:b6:df:d1:f8:02:ed:1c:73:4a:52:0d:df:ea:49:
         93:43:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org