Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34322e302f32342d3234203d3e20323733383637.roa
File:                     34352e36382e34322e302f32342d3234203d3e20323733383637.roa (raw, json)
Hash identifier:          H/D/On/jJphC13oQox/LonRPEpb+nrppummdBcYOAhg=
Subject key identifier:   CD:A4:02:E3:CF:4E:E5:23:58:B4:CD:83:14:50:AC:B3:3B:13:9C:80
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       3C2AEC22B87F0B671C5B7ECE095AD5E79D72F2DD
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34322e302f32342d3234203d3e20323733383637.roa
Signing time:             Sat 13 Jul 2024 05:25:00 +0000
ROA not before:           Sat 13 Jul 2024 05:20:00 +0000
ROA not after:            Sat 12 Jul 2025 05:25:00 +0000
asID:                     273867
IP address blocks:        45.68.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2a:ec:22:b8:7f:0b:67:1c:5b:7e:ce:09:5a:d5:e7:9d:72:f2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jul 13 05:20:00 2024 GMT
            Not After : Jul 12 05:25:00 2025 GMT
        Subject: CN=CDA402E3CF4EE52358B4CD831450ACB33B139C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:4a:db:83:72:06:b1:91:ca:23:7f:a1:f6:
                    2c:9d:ae:62:65:e9:bc:99:10:9d:f9:81:32:76:4a:
                    e6:d3:17:ac:7e:29:c1:d4:66:64:da:d5:26:df:2c:
                    a7:19:ce:b6:ff:ce:16:d4:67:61:71:cc:46:4c:6a:
                    a6:21:8e:ea:be:47:78:50:0f:44:41:fd:03:b0:e9:
                    9f:81:8c:e1:e3:da:2d:d5:9a:6d:05:97:a5:29:3b:
                    5b:50:85:3b:da:e9:47:3e:52:0a:e3:3f:f9:d0:ab:
                    1d:ef:55:ff:4f:99:bd:d4:41:9d:aa:24:a8:87:44:
                    a1:da:5d:f9:16:57:57:f3:92:ba:e2:40:fa:18:45:
                    f8:86:72:cb:5e:21:e6:fd:ce:08:ea:b9:bd:21:c9:
                    a5:cc:8d:ae:51:8c:fd:d9:e4:60:03:d3:32:24:ce:
                    ee:ed:19:07:c2:1e:23:c1:a6:46:4d:00:04:0b:0b:
                    d0:e5:64:c8:37:91:0c:0d:1c:9f:4b:9c:70:3f:17:
                    2d:1d:de:09:09:a2:25:b9:38:40:2d:5b:f1:a2:b5:
                    fa:c0:ad:48:dd:9d:66:76:2a:fc:ca:a3:5b:a4:0b:
                    5d:7f:ad:e4:8e:7f:58:f6:3e:e4:00:78:2b:04:c4:
                    aa:a5:1e:f8:77:b6:36:19:df:2c:85:a4:87:c1:cc:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A4:02:E3:CF:4E:E5:23:58:B4:CD:83:14:50:AC:B3:3B:13:9C:80
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34322e302f32342d3234203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:09:d3:0f:b2:ed:b0:6c:37:cf:a8:fa:6a:c4:d2:c7:41:5a:
         64:c1:01:a1:ae:dd:9f:fe:35:e6:e6:73:54:ae:43:47:cb:64:
         04:fd:12:e3:04:49:e2:26:04:e0:9c:83:d2:e3:a8:e3:89:c1:
         14:cf:99:54:cd:51:ef:ad:61:45:7b:4f:5b:59:78:1d:b6:2e:
         15:02:7e:c5:5f:34:c1:ed:2d:50:8e:20:e9:45:ef:20:60:4a:
         a8:eb:48:5c:ce:15:77:c2:5c:5a:eb:74:fe:99:f9:53:0a:ef:
         47:08:e8:e6:57:93:3f:77:9a:bb:01:19:a2:5f:9a:9b:cf:d6:
         f5:cd:ec:c5:77:64:e0:83:db:8f:b5:fb:01:c3:fa:6f:ae:df:
         2b:ba:b2:26:63:3c:43:80:c8:45:5e:99:73:e3:31:e3:cf:69:
         a9:36:17:d8:12:e2:c0:b7:f8:11:ad:f3:e9:7c:e5:24:41:4c:
         a3:02:4e:e6:18:4a:ab:f4:26:03:59:39:47:c1:ea:89:e7:22:
         2b:77:bd:1f:9b:76:67:cb:30:1a:c7:d7:42:b2:e8:97:5c:84:
         f1:a4:40:da:d1:70:d9:41:62:02:44:f6:36:09:7f:58:42:c6:
         02:9e:7b:42:5b:c7:c2:da:48:ef:70:9c:18:8a:78:c2:1f:98:
         a4:4e:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org