Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa
File:                     34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa (raw, json)
Hash identifier:          VVzkeglmaarHDfjHZ6Dr1tLKrk+A7xm9JUFPxwenUyU=
Subject key identifier:   99:02:9E:A1:B8:F0:9D:93:5F:C3:6E:CF:F0:65:6B:DA:33:68:23:0C
Certificate issuer:       /CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
Certificate serial:       5FF8F6B3208317E2779E5F1825EDAEF57AF54E2B
Authority key identifier: DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa
Signing time:             Tue 05 Mar 2024 18:21:28 +0000
ROA not before:           Tue 05 Mar 2024 18:16:28 +0000
ROA not after:            Tue 04 Mar 2025 18:21:28 +0000
asID:                     263681
IP address blocks:        45.236.172.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f8:f6:b3:20:83:17:e2:77:9e:5f:18:25:ed:ae:f5:7a:f5:4e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6
        Validity
            Not Before: Mar  5 18:16:28 2024 GMT
            Not After : Mar  4 18:21:28 2025 GMT
        Subject: CN=99029EA1B8F09D935FC36ECFF0656BDA3368230C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:80:fa:68:41:d4:85:dc:c3:d1:a2:37:e6:
                    c9:e9:6c:9f:26:60:c4:cd:2f:4e:8d:c3:b1:46:9a:
                    14:5f:87:ba:38:87:51:09:c1:ef:e6:ec:d6:68:ec:
                    7c:55:81:8f:ab:3a:17:bd:ee:f3:b1:51:98:f3:5c:
                    af:37:25:d2:99:09:e9:d6:c7:3f:e7:87:1a:39:a1:
                    8d:48:bc:80:ff:17:aa:18:b0:ca:66:2a:62:b4:27:
                    47:79:d3:ff:2e:6c:62:a1:24:f9:d3:11:85:db:a5:
                    64:3a:09:6d:77:fc:19:e3:2d:39:a5:27:9f:89:d2:
                    c8:ed:3f:db:a7:c0:a6:e4:fb:a4:5a:4b:a5:eb:4f:
                    58:26:e0:0b:93:86:cc:bc:8b:95:dc:fc:5e:33:e9:
                    46:a8:bd:97:77:71:f0:b5:7e:a3:0f:69:74:94:a5:
                    ad:a7:ee:97:d9:7c:95:54:bf:12:37:06:36:d6:e2:
                    69:0d:e3:7c:0e:d2:d8:de:64:63:87:36:bd:b0:09:
                    54:97:73:22:34:6e:90:a6:21:d2:47:26:d5:bc:f5:
                    d6:1c:0a:3e:79:38:a8:d7:e4:91:a5:fb:f7:71:ea:
                    fa:90:f5:c7:fa:52:8d:95:d2:88:a1:26:ee:cd:7d:
                    83:3f:40:28:ac:cc:33:17:bd:dd:d8:a5:da:b6:53:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:02:9E:A1:B8:F0:9D:93:5F:C3:6E:CF:F0:65:6B:DA:33:68:23:0C
            X509v3 Authority Key Identifier:
                keyid:DC:D3:F0:E4:EE:04:3C:5B:A9:85:8A:89:B5:A6:0E:7F:F2:D3:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCD3F0E4EE043C5BA9858A89B5A60E7FF2D355C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E52FD6A6A46B7828B44D62F7E0AB52216C5E6EEAD8DE8F789F9A0C8D1195A94C/0/34352e3233362e3137322e302f32332d3234203d3e20323633363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:d6:82:f5:f7:cd:49:47:b5:27:0c:e8:fc:e3:e3:87:e4:
         d3:16:10:f6:ae:7e:1c:10:6d:78:85:72:84:ee:2b:19:1e:71:
         85:95:43:69:d8:c1:e4:4a:df:7c:8b:fb:6d:ad:9a:14:11:cf:
         b3:c2:d4:e9:3d:7b:9e:c7:d5:57:2b:e8:fc:e6:0e:dc:c5:42:
         22:4c:80:97:d8:b9:cf:39:09:1c:ff:22:8c:bf:b5:a9:a3:33:
         35:63:d4:ad:06:48:50:f0:00:8b:56:4d:2f:44:eb:f0:c6:12:
         7d:a4:1e:77:6c:66:31:38:dd:4e:3d:02:e3:1a:eb:3b:ce:df:
         d2:62:9e:67:35:67:d7:0a:c4:02:7e:8b:03:d3:6f:c0:e0:45:
         46:fd:40:02:95:92:3c:f6:ec:2c:bd:52:0d:18:dd:d6:99:6f:
         fb:9a:78:80:76:00:f0:97:21:40:27:c5:20:e4:ff:dd:0e:b6:
         c7:90:53:cd:f3:02:5d:8a:75:e0:48:fa:56:9a:a0:e9:8c:f4:
         77:c0:52:99:3e:88:a2:ab:6f:97:f0:e6:3b:0d:8a:1a:cf:8c:
         2b:67:1c:da:50:79:17:97:28:a0:2d:0c:17:32:f2:61:0e:07:
         fb:44:d2:8a:4b:38:f4:b7:20:1c:fb:21:17:42:59:73:4c:e8:
         ca:18:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org