Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323732383635.roa
File:                     34352e3233342e36332e302f32342d3234203d3e20323732383635.roa (raw, json)
Hash identifier:          uzbDHsUlb67ifslgmjznrxSKQIV5sA4tgulnSHGBPto=
Subject key identifier:   D6:C3:58:21:AB:49:93:70:0F:5D:D1:24:0F:C2:FC:3E:BB:24:16:72
Certificate issuer:       /CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
Certificate serial:       52B028D4203FB725BF628054CC75A136F2C4696B
Authority key identifier: DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323732383635.roa
Signing time:             Thu 05 Sep 2024 18:35:00 +0000
ROA not before:           Thu 05 Sep 2024 18:30:00 +0000
ROA not after:            Thu 04 Sep 2025 18:35:00 +0000
asID:                     272865
IP address blocks:        45.234.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b0:28:d4:20:3f:b7:25:bf:62:80:54:cc:75:a1:36:f2:c4:69:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D
        Validity
            Not Before: Sep  5 18:30:00 2024 GMT
            Not After : Sep  4 18:35:00 2025 GMT
        Subject: CN=D6C35821AB4993700F5DD1240FC2FC3EBB241672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:ce:e1:5a:cf:f8:e4:74:d1:94:f5:7b:6d:
                    0c:44:5d:c9:ab:5c:2a:91:8e:8b:b8:61:85:99:3a:
                    75:61:47:24:bb:0b:5f:47:e3:9d:05:56:7a:17:fd:
                    91:98:57:a8:ee:35:0c:7d:4d:99:66:98:e4:7e:0a:
                    b9:8b:c3:07:65:7e:41:72:a6:27:e9:dd:6d:97:5e:
                    8c:9f:27:27:b1:3e:88:21:f1:43:c8:96:ea:9e:15:
                    b1:56:09:ea:c7:3f:60:b8:be:a3:31:b7:8e:c9:43:
                    5f:66:c7:8e:7b:a9:e8:07:a8:67:0d:00:4d:43:d1:
                    a9:71:7e:00:71:07:62:5a:00:54:22:c1:29:06:d6:
                    87:72:05:e7:3c:5a:bb:37:a4:a5:98:4c:aa:0e:af:
                    52:fe:c6:32:52:8d:1a:15:8c:e6:aa:73:2b:4b:46:
                    c6:3b:22:b3:66:f1:8b:bf:8a:17:5b:ff:87:ad:8d:
                    3b:6d:4e:4f:e2:8e:5f:86:26:f3:b3:c8:2d:f6:ab:
                    f7:71:c1:c0:67:d5:c9:21:7b:70:a0:fd:63:19:95:
                    c5:a8:0f:d2:8a:74:e1:92:a0:19:9e:d8:21:02:2d:
                    8d:e1:0c:00:eb:61:cd:2a:43:2c:76:03:bb:2d:3a:
                    cc:88:25:9a:d7:b8:1b:50:b4:9c:7d:49:c2:fb:b9:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:58:21:AB:49:93:70:0F:5D:D1:24:0F:C2:FC:3E:BB:24:16:72
            X509v3 Authority Key Identifier:
                keyid:DD:28:6A:83:BE:77:C4:2B:A2:D2:BB:C8:E5:A4:CC:AF:19:60:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD286A83BE77C42BA2D2BBC8E5A4CCAF1960264D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE47DDEBD18C83493D1A11AEDB541A5E30E183DF24EACF7F254B2E61A36387A0/0/34352e3233342e36332e302f32342d3234203d3e20323732383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:28:02:b8:47:78:61:6c:13:66:41:ac:42:2f:bc:84:c1:
         e1:36:19:6c:30:bb:4d:c0:88:51:37:df:49:8e:d4:43:ab:ab:
         ed:ec:f2:bc:e2:70:86:ef:b0:2b:36:03:3b:2a:73:62:1f:ff:
         61:28:28:42:73:bf:c5:d9:ff:78:29:92:56:a6:1f:7b:58:51:
         6b:7a:90:5e:7e:c9:23:23:ac:10:77:76:a1:fa:69:d4:03:df:
         4a:88:0e:ae:6c:e9:1e:0b:ca:bb:c4:25:69:d9:cd:8b:c9:7e:
         f7:27:65:ee:d5:4f:d3:54:6c:94:e6:4d:41:b9:cc:35:9e:80:
         15:a7:41:90:78:17:65:fd:55:15:da:7f:b2:00:f5:ce:3e:7c:
         ad:16:b8:d9:de:a8:11:a5:39:e7:a9:b4:c1:19:80:90:3a:77:
         2b:34:d4:c9:54:f1:c4:42:ab:f1:af:6a:fb:e0:4a:4c:6e:ee:
         62:f2:74:e4:d1:da:d2:55:e2:34:9e:30:20:5d:89:9e:4c:5e:
         d9:44:8e:54:bc:10:df:8d:0f:c9:00:ce:9f:3e:e2:32:9e:85:
         dc:4b:56:8c:79:3b:85:3d:d4:2c:bf:f6:12:d9:51:74:1c:e1:
         e7:87:26:71:b4:da:82:f8:56:fd:81:ee:f6:d5:c8:cf:cf:17:
         ef:58:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org