Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa
File:                     34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa (raw, json)
Hash identifier:          PlU9khA5Ns/XK2V/MSRNuK0q2xVMjZ4tyhxer2jShu4=
Subject key identifier:   DE:64:BD:0D:F9:E5:C6:DF:3D:69:32:E7:85:7C:4C:37:B5:A6:CF:68
Certificate issuer:       /CN=17635987A6691105242D437D62AE03F09EC477A5
Certificate serial:       1125BB8289B30E1D0D218D078D6C5EF4F7648077
Authority key identifier: 17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa
Signing time:             Tue 05 Mar 2024 18:14:33 +0000
ROA not before:           Tue 05 Mar 2024 18:09:33 +0000
ROA not after:            Tue 04 Mar 2025 18:14:33 +0000
asID:                     266734
IP address blocks:        45.230.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:25:bb:82:89:b3:0e:1d:0d:21:8d:07:8d:6c:5e:f4:f7:64:80:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17635987A6691105242D437D62AE03F09EC477A5
        Validity
            Not Before: Mar  5 18:09:33 2024 GMT
            Not After : Mar  4 18:14:33 2025 GMT
        Subject: CN=DE64BD0DF9E5C6DF3D6932E7857C4C37B5A6CF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:75:e4:7a:4e:85:f8:23:e0:90:79:29:6a:
                    7f:68:01:5d:95:8b:e3:39:05:f9:70:d1:03:91:b8:
                    50:f7:e8:6b:ca:31:95:de:a6:1f:02:f1:9e:76:05:
                    0f:11:e5:0c:7c:fa:56:59:3e:3d:5d:b5:ba:6d:82:
                    79:e1:7a:e3:b1:17:9e:33:22:b9:1d:79:62:64:fa:
                    98:83:a3:82:e9:51:4c:f8:8d:7b:f2:83:9a:ac:43:
                    55:4e:5c:c7:35:9f:fa:c8:e0:ed:62:53:01:dd:a1:
                    a3:bb:8e:b1:c2:ea:f2:9d:21:83:01:dc:b1:04:5f:
                    be:81:1d:2e:42:66:6b:22:79:98:1a:6e:1d:f6:2d:
                    e2:d8:80:99:6b:16:84:0d:0d:6f:00:6e:4b:ad:21:
                    9f:c1:64:3f:22:8d:6d:4c:6d:f7:0f:65:c1:6b:19:
                    03:3b:12:b9:54:bd:ef:8c:35:63:77:26:ec:17:34:
                    aa:a3:d4:f6:b4:4d:be:3b:df:a5:13:81:41:e2:a3:
                    70:7f:d6:80:ca:87:25:09:5f:c3:55:a7:32:75:ba:
                    13:b1:66:29:26:5c:0d:e6:55:ad:65:42:25:38:a7:
                    13:66:73:37:de:f1:84:78:10:91:fd:f8:03:61:66:
                    8e:9e:91:ea:c4:12:ee:60:9a:27:e7:f4:9c:6d:bb:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:64:BD:0D:F9:E5:C6:DF:3D:69:32:E7:85:7C:4C:37:B5:A6:CF:68
            X509v3 Authority Key Identifier:
                keyid:17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:1a:92:56:01:01:f3:77:35:ff:39:c6:df:0b:7e:e7:dd:
         be:ad:5c:79:0b:9d:91:7e:96:40:b1:41:93:7b:0e:73:73:85:
         03:77:ac:a9:57:7e:29:97:91:7f:d7:c0:44:c8:66:bc:87:d3:
         2f:ae:c4:09:54:ff:31:d5:91:98:47:c4:ed:09:04:10:b5:ce:
         41:34:31:29:73:cf:95:96:f0:d6:9c:c3:79:e3:7f:53:ea:5d:
         c9:a5:c8:fa:88:5a:c7:87:df:72:21:86:8a:6e:ed:52:17:7f:
         74:b6:6b:13:58:66:ef:f6:20:49:e0:0d:12:75:29:fb:a0:d4:
         66:59:22:60:88:17:8e:6c:43:b7:4c:4f:0c:23:e5:2c:00:9f:
         be:61:c4:34:4e:45:0f:a9:d8:7d:88:34:53:78:0e:f1:4b:22:
         48:26:ed:91:15:bf:74:a1:43:2c:59:12:9d:a7:20:e9:7b:a2:
         10:a6:6e:b2:ac:cf:b0:c4:19:2c:cb:a1:8a:59:cf:ba:2e:7d:
         df:31:cf:17:31:79:00:bd:de:8e:62:a7:54:76:a5:2b:ce:3f:
         c8:5f:03:d9:3f:95:e0:50:1b:12:3e:a9:3e:62:12:d9:35:28:
         eb:63:89:d2:a2:7f:60:a0:10:17:04:7d:43:36:c1:12:3d:d9:
         df:1d:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:25:48 2024 by rpki-client on console-fra.rpki-client.org