Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138332e302f32342d3234203d3e20323636373634.roa
File:                     34352e3233342e3138332e302f32342d3234203d3e20323636373634.roa (raw, json)
Hash identifier:          z2VzPl0oE7DE5WcNxVBj6vatmkLEPItD4p7xKBCV3Qk=
Subject key identifier:   09:EB:C8:B0:72:43:8C:68:63:7D:85:06:26:90:17:13:7C:78:F2:3E
Certificate issuer:       /CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
Certificate serial:       32E211679D0484AF17AA66938827C9DC2C36E3C5
Authority key identifier: CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138332e302f32342d3234203d3e20323636373634.roa
Signing time:             Tue 05 Nov 2024 14:50:00 +0000
ROA not before:           Tue 05 Nov 2024 14:45:00 +0000
ROA not after:            Tue 04 Nov 2025 14:50:00 +0000
asID:                     266764
IP address blocks:        45.234.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e2:11:67:9d:04:84:af:17:aa:66:93:88:27:c9:dc:2c:36:e3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C
        Validity
            Not Before: Nov  5 14:45:00 2024 GMT
            Not After : Nov  4 14:50:00 2025 GMT
        Subject: CN=09EBC8B072438C68637D8506269017137C78F23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:4d:9d:a2:88:af:b4:2d:6f:c6:df:75:68:
                    e8:e2:7b:f6:78:ec:64:d2:92:48:15:9c:b2:d7:1b:
                    c1:fc:9e:a4:8b:6f:b5:a0:92:13:5e:b6:d8:38:bc:
                    46:3b:dc:b0:73:ef:0d:cc:26:c0:97:df:ac:68:b4:
                    9a:f9:34:64:f6:3f:42:0a:1e:65:86:7e:bc:bc:61:
                    c7:29:b7:0b:87:0c:d9:42:60:9d:af:64:42:bf:95:
                    d2:a3:96:8c:22:b3:cf:3e:f7:31:55:9d:20:08:98:
                    68:c2:79:a6:18:9c:22:42:0e:36:a0:9a:e8:0e:9e:
                    3c:aa:d5:1e:6e:04:6b:41:2c:9d:ec:44:95:34:ea:
                    fc:7e:02:e9:d7:7f:1b:49:24:23:82:04:29:37:ec:
                    32:6e:b4:fb:6e:b5:19:6f:d0:f1:26:db:05:af:4f:
                    29:ce:3c:33:24:38:e7:ca:15:49:e6:c8:dd:3e:71:
                    f7:b3:c7:e3:e8:a4:1d:c5:1c:db:82:c0:36:2a:f8:
                    80:f7:c6:46:1f:3a:b0:c8:db:18:ac:97:43:f1:fa:
                    46:db:81:22:f1:31:8c:71:d0:7d:42:33:f1:ec:d1:
                    bb:8e:a8:9c:4f:9f:50:52:8e:0a:72:c4:e2:27:d1:
                    18:4d:12:8a:ab:8f:7a:ba:28:d7:6f:28:09:43:8c:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EB:C8:B0:72:43:8C:68:63:7D:85:06:26:90:17:13:7C:78:F2:3E
            X509v3 Authority Key Identifier:
                keyid:CA:6F:A8:76:EC:3F:BB:7B:04:31:0A:BC:4B:31:23:AF:BE:88:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA6FA876EC3FBB7B04310ABC4B3123AFBE88A20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DCFF27769A439605DA27D7295B2A86504B5B6F6AB4AB8C4DD44052DE07801371/0/34352e3233342e3138332e302f32342d3234203d3e20323636373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:cf:34:c2:77:64:97:5a:46:a0:99:a7:2c:b9:1a:c4:6d:
         a3:fd:dd:8d:7c:74:09:b8:95:85:5f:13:f4:d4:0a:fa:d7:2d:
         a6:58:bc:17:ff:59:fe:c5:81:e7:e3:62:31:c3:df:7d:ce:5b:
         49:74:a2:ce:6d:cc:08:4f:c5:a8:e1:f0:c0:f6:84:88:3f:e6:
         15:fa:b6:99:6d:82:90:1c:48:d4:29:ca:c3:d7:e8:4c:24:ed:
         b3:dd:70:5b:53:b5:9c:4c:ad:eb:d5:c0:01:e6:f5:d7:13:ec:
         44:dc:79:fa:47:13:d5:95:e5:12:90:b7:3b:83:c1:df:fc:ed:
         47:74:2e:1b:e4:88:a9:72:db:12:f6:69:b4:f7:b6:51:c0:14:
         ae:f1:3c:d3:91:b3:c0:04:d8:f8:e8:2a:6e:45:d9:fa:7f:4a:
         1e:55:39:97:f7:2e:6c:16:bc:db:94:b4:9a:a7:22:34:82:85:
         3b:7b:90:f5:2a:f8:21:da:1a:17:4c:58:f1:4e:dc:44:c4:fc:
         2b:20:d6:d4:f7:2a:3d:6a:ed:d6:2f:e7:1d:0c:c0:0e:7d:25:
         14:ca:ca:9c:93:b8:5f:f5:13:ba:83:4e:2b:c5:eb:e4:40:b7:
         51:12:e8:2a:6e:ff:ba:2e:3d:23:ff:46:e0:8b:3f:6a:a9:ec:
         92:c5:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:23 2024 by rpki-client on console-fra.rpki-client.org