Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/34352e3232342e35322e302f32322d3234203d3e203532333237.roa
File:                     34352e3232342e35322e302f32322d3234203d3e203532333237.roa (raw, json)
Hash identifier:          JrAWtNR6ULRmHpxaBdAcnKJp+7FIKeHme0VhaLm8mcI=
Subject key identifier:   04:C1:9C:F9:E3:DC:CE:3D:2D:89:A7:D3:B3:89:DF:03:28:1D:5F:59
Certificate issuer:       /CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
Certificate serial:       768E10D454CE7EA99577A323FD30C4394226A1E0
Authority key identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/34352e3232342e35322e302f32322d3234203d3e203532333237.roa
Signing time:             Tue 05 Mar 2024 17:53:18 +0000
ROA not before:           Tue 05 Mar 2024 17:48:18 +0000
ROA not after:            Tue 04 Mar 2025 17:53:18 +0000
asID:                     52327
IP address blocks:        45.224.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8e:10:d4:54:ce:7e:a9:95:77:a3:23:fd:30:c4:39:42:26:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
        Validity
            Not Before: Mar  5 17:48:18 2024 GMT
            Not After : Mar  4 17:53:18 2025 GMT
        Subject: CN=04C19CF9E3DCCE3D2D89A7D3B389DF03281D5F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:19:89:04:69:f6:5c:dd:6e:f3:b2:89:01:
                    0f:a6:79:5e:59:a1:f7:b0:e3:48:78:a9:2f:29:94:
                    03:70:38:dd:fb:41:19:d7:0b:47:27:cb:62:96:54:
                    be:d0:00:d0:04:74:e4:f1:76:6a:37:23:65:ef:5d:
                    34:e0:bb:6c:45:b8:cc:7d:57:4c:4c:85:0c:c3:44:
                    a6:b7:26:b3:a6:37:e5:9a:60:76:85:e4:71:51:4b:
                    6d:06:6d:05:c1:3c:9c:72:62:9f:e2:54:2e:84:1d:
                    4b:5f:0e:f2:7f:17:ef:b0:7a:28:ef:fe:25:5a:e9:
                    8e:f3:6d:37:8d:b0:28:c0:6b:ba:62:21:0c:dd:dd:
                    dd:bc:87:47:4f:ff:e8:93:d7:79:f5:cc:0f:71:a3:
                    05:19:2e:4d:41:cc:b6:dd:14:7f:e3:33:cf:7e:a3:
                    c5:f2:1a:86:fd:9e:c1:f9:6d:00:b8:30:58:ec:73:
                    de:9c:7d:69:0f:f3:9a:c1:f3:8b:f8:1b:38:c8:97:
                    c4:ef:0e:19:c5:6a:d3:9e:3a:19:6b:b4:ce:70:b0:
                    3a:d3:66:98:71:db:e0:a2:f6:13:46:05:a9:11:5e:
                    cc:d6:aa:1b:49:cf:16:20:8d:38:b3:82:ab:b5:c0:
                    f5:18:40:44:6c:f8:ed:37:67:96:b0:f3:79:e4:53:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C1:9C:F9:E3:DC:CE:3D:2D:89:A7:D3:B3:89:DF:03:28:1D:5F:59
            X509v3 Authority Key Identifier:
                keyid:1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/34352e3232342e35322e302f32322d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:68:e5:29:1e:9e:43:45:2b:9c:1d:fa:c9:42:8f:e3:ad:
         f4:be:9c:59:16:6a:a5:8c:bc:b3:cc:fd:85:d6:63:94:96:08:
         4a:71:21:3c:48:5f:0d:30:98:a7:73:fd:f3:ed:1f:df:72:f8:
         e3:7e:01:6c:6e:7e:d8:fb:c1:14:bd:d8:8b:6a:2f:2f:10:60:
         b2:8b:ab:8c:8d:70:a5:dc:87:a3:37:7d:39:1a:d4:5f:c7:07:
         d8:a0:e5:c5:81:a3:f9:21:ef:09:ba:61:83:0b:cb:f9:e0:98:
         a1:14:97:92:56:b3:61:ba:c0:09:1b:6f:6b:09:f4:77:47:7e:
         3b:60:02:3b:01:64:a5:24:36:25:e9:67:95:5d:df:d6:d8:2f:
         a7:0a:37:cd:91:ba:37:15:70:25:0d:7f:ce:40:3e:d8:de:4a:
         01:d5:63:64:5b:c1:72:53:28:33:ea:e4:8e:79:0b:3f:4e:9e:
         3c:ab:d9:38:83:7a:51:78:44:7b:78:f1:22:aa:54:0e:1a:07:
         27:62:3d:82:92:d7:a7:43:aa:17:b1:6f:ba:a3:d0:52:58:7a:
         f6:c6:29:42:bb:97:94:6d:67:2e:62:e3:f7:09:1b:01:38:ea:
         d9:62:dd:f6:c7:ea:31:27:bc:92:b3:ee:99:1e:13:5f:8e:07:
         f3:6b:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:53 2024 by rpki-client on console-ams.rpki-client.org