Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa
File:                     34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa (raw, json)
Hash identifier:          vsELVPnDEsal1AC2paZHQ2meHBHHjHlPN20PHZE+7jk=
Subject key identifier:   93:DF:33:10:52:AD:13:5B:3F:43:0A:AB:A7:CE:A6:25:DB:7A:27:A7
Certificate issuer:       /CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Certificate serial:       6F94FC6E89F5F6DEF9BB3D79681D351E712CA1C9
Authority key identifier: DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa
Signing time:             Tue 05 Mar 2024 17:44:15 +0000
ROA not before:           Tue 05 Mar 2024 17:39:15 +0000
ROA not after:            Tue 04 Mar 2025 17:44:15 +0000
asID:                     266901
IP address blocks:        45.161.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:94:fc:6e:89:f5:f6:de:f9:bb:3d:79:68:1d:35:1e:71:2c:a1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
        Validity
            Not Before: Mar  5 17:39:15 2024 GMT
            Not After : Mar  4 17:44:15 2025 GMT
        Subject: CN=93DF331052AD135B3F430AABA7CEA625DB7A27A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:a3:e2:ea:3b:a9:55:b0:aa:0c:a9:a9:f6:
                    18:d4:b1:a8:b8:dc:db:9e:49:c9:15:3f:42:33:97:
                    fc:f8:46:72:45:2b:56:30:2b:50:84:10:ce:03:35:
                    28:88:35:12:28:1d:3c:4a:f3:28:2c:72:39:a8:b0:
                    9f:32:42:6c:1f:d5:39:d8:43:0d:8c:b1:7e:d8:cd:
                    1f:ff:0c:43:28:7d:44:c4:3d:5d:68:24:ff:a2:7e:
                    d9:53:cb:58:cd:35:74:71:92:7e:ed:ad:29:05:e6:
                    41:04:57:e6:46:4a:d1:2a:59:7d:3d:aa:9c:cb:98:
                    26:9a:fc:e4:91:e4:e7:8d:8e:d2:c7:3a:e6:3e:21:
                    c1:d1:d1:0a:37:da:3e:d6:42:f5:37:e8:bb:cc:52:
                    5b:ec:99:6d:c9:2e:5f:ab:00:ad:e2:97:1a:cb:02:
                    85:35:72:e7:d2:7d:4d:8b:35:b1:ae:c0:99:39:4e:
                    b6:46:9d:da:2f:d7:5f:4f:48:e9:56:0a:00:14:4d:
                    a8:f6:63:6f:4d:94:7b:cb:12:f2:53:93:30:d0:41:
                    00:6a:94:62:ac:37:24:2b:d7:de:d5:e5:1f:9d:68:
                    4f:cd:90:c7:d4:cd:f4:5e:71:38:39:e6:1b:31:3d:
                    d8:40:f0:7d:da:9d:41:c3:8c:55:0b:0d:78:0a:b1:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DF:33:10:52:AD:13:5B:3F:43:0A:AB:A7:CE:A6:25:DB:7A:27:A7
            X509v3 Authority Key Identifier:
                keyid:DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32342d3234203d3e20323636393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:c4:82:81:8e:35:f0:d9:dd:a3:95:ef:a1:8a:4f:df:61:
         e4:4e:e4:9e:d3:8a:4d:77:ee:80:e7:16:2a:bd:1c:45:32:f0:
         c6:6c:39:14:b2:19:e1:fc:a5:d0:ae:9c:53:68:2a:37:79:d1:
         8d:e0:e4:c3:eb:8f:46:d1:f0:6b:2a:5f:e3:71:1c:15:a4:34:
         86:31:be:55:55:08:b6:1d:ec:c8:7e:49:d4:1e:a2:b9:50:3b:
         9e:44:e2:b2:26:be:70:14:83:20:ac:a8:40:7a:32:a1:8c:8d:
         3e:5c:e7:b3:5c:70:c7:0a:1c:d0:02:2f:03:45:a1:b3:e2:a3:
         47:b6:ef:7a:d9:af:78:90:09:b6:44:40:4c:c8:ee:cc:be:f7:
         d6:5a:c2:4f:a7:44:fc:09:64:30:75:87:56:8d:34:99:a0:1c:
         80:ec:68:bd:5a:77:b5:1e:00:18:c0:e0:d6:fe:25:e9:1a:53:
         f8:15:b9:5b:9b:9a:a6:f2:09:7a:ad:42:32:cd:83:8d:cf:8c:
         c6:1d:66:dc:ae:fb:fc:1e:a5:2f:d4:00:94:be:fe:eb:d1:6d:
         0a:8f:f2:42:ef:ce:ad:8a:90:95:3c:9e:73:c3:d3:cd:0d:42:
         9e:d4:67:4f:d6:11:1f:34:f5:74:39:b3:71:f8:7c:d3:ba:85:
         74:c7:f6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:38 2024 by rpki-client on console-ams.rpki-client.org