Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34362e302f32342d3234203d3e20323633383037.roa
File:                     34352e36382e34362e302f32342d3234203d3e20323633383037.roa (raw, json)
Hash identifier:          Q9dF9Q7+dB02s6soTlpSJVRS18q8XOWDzWjk3JdaVl4=
Subject key identifier:   FB:CF:63:41:42:18:19:59:5C:F6:62:FC:AA:EC:8E:C0:C2:27:85:B3
Certificate issuer:       /CN=B156B92173159B61E3CBF80FA51A1B58E6218261
Certificate serial:       6CE2C2424B14362DFA48D984D991414EB8497252
Authority key identifier: B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34362e302f32342d3234203d3e20323633383037.roa
Signing time:             Tue 09 Apr 2024 19:55:00 +0000
ROA not before:           Tue 09 Apr 2024 19:50:00 +0000
ROA not after:            Tue 08 Apr 2025 19:55:00 +0000
asID:                     263807
IP address blocks:        45.68.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Jun 2024 18:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e2:c2:42:4b:14:36:2d:fa:48:d9:84:d9:91:41:4e:b8:49:72:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B156B92173159B61E3CBF80FA51A1B58E6218261
        Validity
            Not Before: Apr  9 19:50:00 2024 GMT
            Not After : Apr  8 19:55:00 2025 GMT
        Subject: CN=FBCF6341421819595CF662FCAAEC8EC0C22785B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:84:2d:2f:98:a8:fc:89:80:7d:81:2a:7f:
                    0f:af:55:bc:da:a4:e1:dc:92:f4:a3:a2:49:ff:4b:
                    9d:7e:41:e9:e2:a5:76:fe:59:1c:19:68:5e:ae:cc:
                    ba:2b:00:91:32:bf:4a:69:be:43:f8:3e:49:f8:f5:
                    ff:fd:d5:a1:16:46:16:fd:fa:48:64:0d:bb:ab:bb:
                    43:bc:4a:28:f4:88:25:0e:5a:62:89:50:e1:29:32:
                    1c:89:d1:f4:71:32:b5:57:b6:2a:e3:75:8a:fc:83:
                    07:62:42:e9:af:f1:a8:97:d2:c1:21:4a:27:38:c5:
                    b7:2f:88:94:7b:b4:56:21:c9:b8:17:36:96:de:54:
                    29:73:96:db:8e:4e:41:8e:d0:a8:ab:c7:8e:3b:05:
                    61:19:32:f5:6b:a8:80:a8:55:f1:fd:33:07:26:04:
                    3c:bb:1a:fe:6e:87:be:bd:68:99:c6:de:83:d0:a1:
                    ff:79:23:6b:b3:b4:f5:a6:ef:c0:02:2c:48:ba:9d:
                    06:b6:41:cb:41:8a:8b:a0:9b:28:ca:ae:bc:d4:b8:
                    30:80:8e:3a:83:46:8a:8b:7f:0d:2f:b6:e7:3b:5a:
                    a6:b6:46:8e:8b:e2:e0:c1:3d:3c:f8:7d:01:8d:8e:
                    2a:9a:40:ea:9b:ca:82:69:62:e2:f2:99:d1:56:cd:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CF:63:41:42:18:19:59:5C:F6:62:FC:AA:EC:8E:C0:C2:27:85:B3
            X509v3 Authority Key Identifier:
                keyid:B1:56:B9:21:73:15:9B:61:E3:CB:F8:0F:A5:1A:1B:58:E6:21:82:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/B156B92173159B61E3CBF80FA51A1B58E6218261.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B156B92173159B61E3CBF80FA51A1B58E6218261.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E32DACE42C0A3DCC3AF17C95C3CA4030D52CA6E7F0A83E8652E987E209FD526A/0/34352e36382e34362e302f32342d3234203d3e20323633383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:fb:02:9a:33:01:f7:c6:64:c4:78:ad:ed:d5:04:64:7a:bb:
         92:6f:ec:85:8e:d2:a2:56:25:e2:17:8f:65:5f:23:d0:8e:be:
         83:2d:96:b0:df:a0:1b:20:c3:bc:21:34:aa:a5:7d:63:1d:90:
         75:0a:09:f5:fb:5d:6e:4a:e2:fa:0e:2c:2e:51:e6:2f:36:6a:
         88:84:ee:a1:b6:bd:f0:16:9f:8d:e9:6c:4e:1a:97:b0:da:8d:
         27:f4:f7:ca:49:c5:04:72:d1:bf:82:26:c4:d6:12:6a:db:0d:
         f1:0e:f1:30:ea:29:2b:a5:e1:64:8a:d9:3d:1e:c2:df:02:56:
         f7:af:66:81:5e:b4:d6:2d:4a:2d:e9:f6:5f:1c:87:9e:fa:ad:
         e3:c3:e6:c9:39:a4:9d:4c:c4:2c:b8:38:3d:5d:4d:8d:ce:ae:
         b2:75:31:de:f2:17:eb:9d:c7:3c:6e:59:ab:c9:4e:8b:38:5c:
         c6:0b:99:bc:f7:57:6e:ae:da:ab:ad:38:42:e8:11:2b:77:1e:
         43:bf:78:07:0c:d1:94:d4:10:e3:f5:09:55:9a:d1:ec:bc:dd:
         a5:10:b0:d2:60:8f:0f:65:f1:2d:d7:6b:6f:f7:02:41:d5:19:
         8e:14:8c:84:1a:05:cd:d6:df:97:d4:1b:7d:67:bb:e7:f6:db:
         19:50:9d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:04:12 2024 by rpki-client on console-ams.rpki-client.org