Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
File:                     34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa (raw, json)
Hash identifier:          tM9f0yWpYPOG7TlCbbAXrOukeOEqKyeo8ako8kP+xns=
Subject key identifier:   12:2E:74:97:9C:88:82:AD:64:C3:99:67:6E:D8:3C:4A:E7:3E:0F:AE
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       33C7ECE8108D5C9956E57CB1CAAC624538C28D85
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa
Signing time:             Thu 23 May 2024 23:20:00 +0000
ROA not before:           Thu 23 May 2024 23:15:00 +0000
ROA not after:            Thu 22 May 2025 23:20:00 +0000
asID:                     266764
IP address blocks:        45.234.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:ec:e8:10:8d:5c:99:56:e5:7c:b1:ca:ac:62:45:38:c2:8d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: May 23 23:15:00 2024 GMT
            Not After : May 22 23:20:00 2025 GMT
        Subject: CN=122E74979C8882AD64C399676ED83C4AE73E0FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:f1:13:33:c6:6a:59:a2:13:97:bf:cb:cb:
                    3b:32:f8:11:6f:7a:80:81:6f:14:1d:cd:1e:1c:70:
                    73:20:20:38:62:9e:ac:aa:9b:b5:fb:d1:3d:f3:43:
                    3f:20:7e:bd:9f:b3:a1:bd:02:87:2e:55:47:c6:46:
                    cd:f2:02:1a:c9:78:9d:cc:f5:51:80:3d:f4:f2:14:
                    45:fb:e3:73:e2:da:61:bd:71:7b:9d:2f:bf:5b:f4:
                    9b:29:c4:7f:d6:86:83:5f:99:d1:c1:d7:39:f9:be:
                    b3:05:96:7f:a0:eb:5e:9d:26:d7:30:16:7b:aa:4d:
                    c4:68:e3:a2:76:08:c2:f0:d7:fa:c4:fc:1f:42:fd:
                    1e:87:c5:bd:d4:76:99:25:9d:a4:55:fa:68:53:2b:
                    da:bc:c8:d4:c7:91:e4:2d:4d:cc:5d:04:c2:03:1f:
                    00:f0:44:93:4a:5f:f2:8b:52:38:e0:59:54:d0:c6:
                    08:3d:e8:83:05:ee:c7:b0:f0:69:49:69:78:c0:82:
                    bc:71:02:b3:03:9d:96:34:28:19:b1:6a:9e:f5:11:
                    45:ff:b1:b0:dd:83:13:59:61:9c:e1:e9:bd:49:ae:
                    6c:12:da:51:34:b3:09:97:7f:37:6b:62:bc:41:2c:
                    2b:07:73:1c:e3:05:71:c9:c5:16:b6:cf:ef:dd:38:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:74:97:9C:88:82:AD:64:C3:99:67:6E:D8:3C:4A:E7:3E:0F:AE
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138302e302f32322d3232203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:d8:f7:7d:19:88:58:af:84:8b:c6:48:13:6b:ab:5b:50:5c:
         8e:6a:5c:0d:3e:9a:52:e2:ec:93:87:b7:9a:71:9f:ee:ef:2f:
         dc:9f:2b:fe:d8:d7:5e:92:48:af:21:ab:07:37:f3:41:b4:06:
         f4:d4:70:37:9a:30:a9:18:3e:3a:a7:43:2f:e1:e3:aa:d7:c6:
         41:28:cb:a5:d8:1b:5e:c7:a0:f9:05:ae:14:f7:f6:a7:ef:b1:
         f0:78:31:ff:8c:47:83:88:6c:5e:b7:aa:d1:51:45:f3:2d:17:
         0a:61:8f:d2:d2:84:9d:17:98:f1:51:84:7f:6f:c3:70:f4:c7:
         62:19:60:88:4f:33:72:66:b2:f1:bb:24:ec:f7:6d:cd:d2:ce:
         c7:88:00:8b:55:ab:67:5a:8e:e9:e8:c7:b4:eb:cd:6c:32:6c:
         2c:ed:a9:7a:e1:dc:bb:22:98:51:e9:41:dd:4a:eb:1e:e5:61:
         62:4b:94:6c:74:61:fc:20:b9:e0:01:b4:12:b0:50:27:fd:cd:
         bc:3d:bf:d0:f2:f5:fc:a3:8d:57:01:03:98:cb:da:2a:e2:c0:
         74:de:b7:bd:cf:a1:d9:7e:0c:f7:9b:a9:6f:21:06:26:05:39:
         ec:4e:a8:de:86:54:0e:4e:61:dc:7e:41:e1:85:79:8f:04:d1:
         0f:e0:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:39 2024 by rpki-client on console-ams.rpki-client.org