Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39352e302f32342d3234203d3e20323633373235.roa
File:                     34352e3136362e39352e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          UxfLiPtYT23g9/ERzrpyXRXujEYDcUjFS3Nf0bHNKtA=
Subject key identifier:   CD:39:56:9F:F0:33:1B:76:2F:BD:14:CE:DF:F0:75:13:1A:96:3A:A5
Certificate issuer:       /CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
Certificate serial:       08F5C224A05B6E6A0FABFEB68F9EF56B7888F3E1
Authority key identifier: 30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39352e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:02:13 +0000
ROA not before:           Tue 05 Mar 2024 17:57:13 +0000
ROA not after:            Tue 04 Mar 2025 18:02:13 +0000
asID:                     263725
IP address blocks:        45.166.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f5:c2:24:a0:5b:6e:6a:0f:ab:fe:b6:8f:9e:f5:6b:78:88:f3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB
        Validity
            Not Before: Mar  5 17:57:13 2024 GMT
            Not After : Mar  4 18:02:13 2025 GMT
        Subject: CN=CD39569FF0331B762FBD14CEDFF075131A963AA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:10:ea:2d:4a:cd:35:64:f3:9a:58:16:34:
                    75:7c:ef:81:22:d7:3a:16:0b:70:94:65:1b:74:17:
                    2c:bd:0b:3d:3d:60:56:56:38:c1:12:85:9f:7f:1b:
                    19:ed:35:fc:cc:d6:52:fc:b3:19:64:05:d2:cf:fc:
                    a2:5d:c1:54:02:c1:44:60:b9:da:08:db:df:c9:e3:
                    7a:df:3a:c1:cd:92:a9:cc:6c:86:c5:de:24:d5:62:
                    ef:ee:35:7b:25:91:d5:31:49:6f:06:fa:03:aa:41:
                    ae:f8:9f:fb:62:fc:15:47:05:22:0c:58:21:e8:5d:
                    61:76:4d:c9:a3:f3:e4:63:b5:26:dd:12:9f:c2:6f:
                    06:0c:9b:1b:9e:e6:7f:b1:5f:78:9e:5d:6d:e8:52:
                    5a:f5:fc:ca:5b:11:19:41:1d:47:3c:e5:77:11:69:
                    63:0b:07:4f:ae:3a:e4:2c:3f:ec:e1:75:62:9e:dc:
                    b8:52:53:47:62:3c:77:b1:9d:83:56:ef:46:bc:f5:
                    2d:68:ac:af:91:03:d5:fd:69:67:54:10:87:9e:67:
                    63:7b:a4:75:0d:02:de:46:92:fe:60:cb:81:07:91:
                    c4:84:b0:b6:d6:b0:a8:18:8a:a4:eb:9a:42:e6:cd:
                    2f:bf:80:aa:a1:c0:42:aa:8a:de:8d:43:dc:46:6e:
                    cd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:39:56:9F:F0:33:1B:76:2F:BD:14:CE:DF:F0:75:13:1A:96:3A:A5
            X509v3 Authority Key Identifier:
                keyid:30:3D:DB:5D:60:F7:11:45:08:9E:EA:3B:03:DB:CD:CF:BC:0D:E3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/303DDB5D60F71145089EEA3B03DBCDCFBC0DE3EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1097454BD59B5BB561666FC1173269D64019898C9FDC5515D1E6321152959B6/0/34352e3136362e39352e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:91:eb:5c:87:7d:39:29:99:81:9b:f5:1c:91:58:77:ff:ca:
         6b:4c:f3:87:79:6f:96:09:61:a8:65:98:46:a7:47:b3:3f:b3:
         5e:b5:1e:9b:bd:0b:a8:b2:9a:88:bc:4c:96:bd:8d:6d:72:05:
         28:ff:ec:c4:fb:36:e1:f8:c9:1f:43:d6:0a:1a:9f:c0:00:cd:
         df:f4:ab:ea:6f:5e:96:e6:a9:b2:a7:37:99:a6:7b:f5:5f:f3:
         41:36:af:e0:5b:e3:af:4b:1b:c4:7e:96:a4:af:96:8e:50:fe:
         13:55:77:8d:89:3a:bf:8a:ff:3b:9a:9d:b7:bf:75:db:28:81:
         ce:ec:76:a2:45:4c:46:fa:bb:2f:eb:9e:f5:50:ac:c9:28:ac:
         49:e9:88:89:9d:e9:b0:68:8d:54:19:56:73:f5:5f:9f:73:df:
         61:cb:15:44:b5:4c:7e:cc:8c:fa:5c:76:00:73:6e:e4:c7:60:
         5c:72:71:c4:cd:8d:5f:df:e1:92:53:33:4d:93:c4:85:b3:08:
         b6:d7:eb:1f:41:0f:ed:14:36:d2:44:29:0a:a7:dc:64:a6:2d:
         a3:93:fe:5b:e4:b9:93:66:bb:93:e8:6c:9e:a1:5c:39:7d:6a:
         a2:15:8d:b7:95:2b:79:94:b4:1d:6b:d1:33:ee:43:00:13:56:
         e2:df:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:32 2024 by rpki-client on console-ams.rpki-client.org