Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/34352e3233392e3231362e302f32322d3234203d3e20323731383339.roa
File:                     34352e3233392e3231362e302f32322d3234203d3e20323731383339.roa (raw, json)
Hash identifier:          r7bSfS3BLotzOgjGmpJix7Y1RsmI/h7JfsLd/p1salM=
Subject key identifier:   F8:98:97:91:94:77:BF:A0:66:E9:F8:1E:69:9C:B5:17:E5:7D:C8:34
Certificate issuer:       /CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
Certificate serial:       0FED2FEC7F688C6FE9C7F25C0581BBD2892C9CA9
Authority key identifier: 2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/34352e3233392e3231362e302f32322d3234203d3e20323731383339.roa
Signing time:             Tue 05 Mar 2024 18:16:20 +0000
ROA not before:           Tue 05 Mar 2024 18:11:20 +0000
ROA not after:            Tue 04 Mar 2025 18:16:20 +0000
asID:                     271839
IP address blocks:        45.239.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ed:2f:ec:7f:68:8c:6f:e9:c7:f2:5c:05:81:bb:d2:89:2c:9c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
        Validity
            Not Before: Mar  5 18:11:20 2024 GMT
            Not After : Mar  4 18:16:20 2025 GMT
        Subject: CN=F89897919477BFA066E9F81E699CB517E57DC834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:5e:e4:06:40:c0:31:ba:ad:cd:ee:de:9c:
                    11:04:32:28:78:e4:04:a8:01:e3:cc:5a:fd:9b:a2:
                    c9:18:5a:55:f4:cf:32:06:85:2d:2b:00:31:16:57:
                    54:6f:26:e2:c2:7c:7b:be:1c:aa:a4:2d:54:02:97:
                    3b:a2:6e:70:04:8c:c0:f7:35:f6:5f:9b:72:fa:fc:
                    6a:76:64:08:f1:96:7a:79:81:b8:f5:b7:aa:2f:3a:
                    a8:fa:cb:e9:dc:92:f4:2e:2c:c8:55:60:b1:6c:b5:
                    c8:a0:4d:7e:88:7a:2a:c1:7f:00:cd:9a:2b:94:7a:
                    af:df:9d:c8:d5:a2:17:fb:19:63:7c:f6:ff:05:9b:
                    da:8b:04:31:52:b6:92:f0:ad:1d:0b:8f:5e:30:ee:
                    c7:c8:1b:93:fb:d7:87:4c:a0:30:3b:14:e5:3b:e0:
                    48:85:a8:ac:83:eb:92:ce:8c:5a:5a:3c:96:69:61:
                    8c:7a:1a:44:b8:32:9e:12:68:01:41:96:6c:2c:86:
                    3d:2a:94:97:34:8a:ef:3e:23:14:b1:0e:87:95:2b:
                    81:5a:55:ca:fa:94:3c:c6:03:9d:6f:07:ee:4b:3e:
                    f4:78:0d:29:3a:6a:33:7b:34:ff:0a:85:0a:de:4c:
                    f4:c1:f1:75:9f:3d:9e:78:fc:dd:03:d8:38:e7:32:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:97:91:94:77:BF:A0:66:E9:F8:1E:69:9C:B5:17:E5:7D:C8:34
            X509v3 Authority Key Identifier:
                keyid:2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/34352e3233392e3231362e302f32322d3234203d3e20323731383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:9c:09:ca:49:71:ac:66:39:e9:f3:20:fc:a9:c5:a7:b1:
         54:c0:7c:8d:9b:ae:86:79:f8:67:df:9e:68:ad:0d:c5:74:4f:
         fa:c1:79:5b:7e:aa:f7:a2:c8:4a:cd:04:03:84:61:aa:ee:e8:
         b7:71:50:5b:b7:4b:6e:86:4e:35:ac:1e:f8:31:46:64:0c:92:
         26:65:33:d0:6a:e7:b8:5d:79:dc:41:af:0c:6c:b7:b0:2f:6d:
         63:80:e2:68:7d:a1:1c:c5:a4:bc:1b:c7:39:f5:80:13:26:68:
         25:ec:1b:5f:f9:e5:22:bd:2e:59:e7:15:2f:06:c8:bb:ab:63:
         68:ab:84:12:db:9b:75:03:ff:49:94:97:cd:e0:3f:da:44:b6:
         30:45:49:58:50:7f:08:f7:5c:9f:e5:0c:b0:b4:7f:ac:74:88:
         70:1d:86:ee:e2:f2:c6:34:98:63:c6:1e:3d:ea:a6:79:4a:e6:
         19:76:0e:e1:8c:56:61:42:11:c5:e1:d2:e4:19:84:1f:12:b2:
         9b:ef:2f:d8:0f:a7:d9:21:74:3f:e8:0b:bb:2c:18:df:f3:c6:
         8c:77:3d:fe:83:c7:f5:35:c9:04:87:62:04:56:31:b9:01:aa:
         4a:01:f9:84:e3:b7:90:75:bc:c4:98:20:cc:ce:3c:4c:54:92:
         d5:ce:89:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org