Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34332e302f32342d3234203d3e20323733383637.roa
File:                     34352e36382e34332e302f32342d3234203d3e20323733383637.roa (raw, json)
Hash identifier:          hF8wYj2afZ9AK4ij5ZDBI0sU7t8vdipMoOIZ1ssZhvk=
Subject key identifier:   93:76:0F:4A:02:13:17:0E:95:CE:16:ED:E5:37:81:10:56:3B:0D:23
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       23BEB9D9A028550DC5B3A901CEF54DBE8F7721B7
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34332e302f32342d3234203d3e20323733383637.roa
Signing time:             Sat 13 Jul 2024 05:25:00 +0000
ROA not before:           Sat 13 Jul 2024 05:20:00 +0000
ROA not after:            Sat 12 Jul 2025 05:25:00 +0000
asID:                     273867
IP address blocks:        45.68.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:be:b9:d9:a0:28:55:0d:c5:b3:a9:01:ce:f5:4d:be:8f:77:21:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jul 13 05:20:00 2024 GMT
            Not After : Jul 12 05:25:00 2025 GMT
        Subject: CN=93760F4A0213170E95CE16EDE5378110563B0D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:b8:bf:99:40:be:ca:25:2e:fc:01:7b:32:
                    6b:cc:54:8a:59:92:00:0e:b9:da:02:0b:b2:74:fe:
                    d8:87:f9:5e:9b:4c:6c:a2:38:fb:40:18:66:4c:dc:
                    0e:67:b1:3c:47:df:78:f7:0f:53:56:4b:a9:b3:9c:
                    a6:01:77:b1:61:f2:20:6d:bf:11:e3:42:b3:b9:c4:
                    5f:ad:91:90:ec:40:67:13:09:11:dd:2d:25:5d:33:
                    24:0a:97:21:a4:42:91:8f:ea:02:e8:db:3d:82:86:
                    e6:0b:cc:df:bd:4f:87:4b:61:65:f2:74:be:22:88:
                    98:21:90:a7:2c:47:fb:85:2e:f6:2a:97:81:04:24:
                    49:08:c9:8d:ad:80:6b:68:97:44:18:10:2a:9a:99:
                    ea:73:41:08:21:d8:75:a1:0c:97:b9:8a:c5:c2:a0:
                    77:58:62:c1:48:44:b0:27:f6:fe:37:83:b7:c1:60:
                    08:61:c4:67:dc:5b:e9:f5:5f:6f:71:01:11:26:07:
                    cc:13:78:62:df:bc:5a:f4:4e:ad:08:32:ba:2c:ed:
                    1e:a1:db:ce:f1:03:a9:8f:76:ea:16:11:e1:7c:dd:
                    24:69:8e:6a:4d:6a:b9:be:6d:46:e1:fe:39:69:ba:
                    51:45:e1:09:2a:c8:15:27:fd:bc:ba:58:31:68:9d:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:76:0F:4A:02:13:17:0E:95:CE:16:ED:E5:37:81:10:56:3B:0D:23
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34332e302f32342d3234203d3e20323733383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:27:3c:77:f1:e8:5b:9f:3f:18:8f:79:0f:95:8f:48:f9:
         a9:eb:6a:98:23:5e:cf:aa:07:b2:2d:39:dc:c4:05:d8:a9:87:
         3f:04:e9:40:9b:3a:3a:dc:24:ba:12:46:c3:51:b5:48:51:af:
         85:06:71:e6:cf:85:34:92:b6:f0:f4:98:4a:83:ed:56:42:f1:
         ed:1a:61:d6:54:18:73:e8:c0:aa:6e:60:4d:91:9e:c4:f2:7e:
         e1:a5:35:af:28:b0:b6:a1:9c:e1:c4:8d:6a:8e:ac:20:7d:df:
         ab:a4:01:21:89:6f:5e:8f:1a:e7:2a:e7:a0:c8:72:5b:b6:fe:
         6e:e9:a5:1e:77:7f:11:b0:f3:22:a5:4f:4e:1c:2b:86:fb:c7:
         30:c1:53:23:cb:22:99:a1:d8:8f:c4:f2:30:ac:e6:22:cf:c3:
         36:09:e2:6f:60:14:f4:e3:c5:8a:a4:de:e5:e7:b3:e7:f7:2d:
         49:f8:d8:39:bf:b0:09:de:18:14:de:bf:9d:74:ac:18:c6:55:
         72:6e:f4:79:ec:8f:fe:0f:22:d0:49:55:4a:6d:79:f3:28:db:
         22:75:8f:e5:ef:36:f7:0f:23:d4:47:69:9d:e9:7b:29:4c:95:
         f6:d1:4b:94:07:7f:d3:71:e9:03:35:45:0b:40:67:8e:12:7a:
         da:61:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org