Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3234203d3e20323632323334.roa
File:                     34352e342e38342e302f32322d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          XMm31oTBrhtI1XUvot6AvczT4uX9N3qagY62y4I7LvQ=
Subject key identifier:   A8:49:46:70:68:E0:AD:44:F2:63:01:40:F6:B1:63:68:A0:C0:61:1B
Certificate issuer:       /CN=4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658
Certificate serial:       23BF61D084F0D8101F2D187FDF62FCB2BFDB306C
Authority key identifier: 4E:56:D1:3A:FF:B6:D3:35:35:BA:82:AE:BB:1E:C9:AB:F8:95:56:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3234203d3e20323632323334.roa
Signing time:             Tue 05 Mar 2024 18:12:29 +0000
ROA not before:           Tue 05 Mar 2024 18:07:29 +0000
ROA not after:            Tue 04 Mar 2025 18:12:29 +0000
asID:                     262234
IP address blocks:        45.4.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bf:61:d0:84:f0:d8:10:1f:2d:18:7f:df:62:fc:b2:bf:db:30:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658
        Validity
            Not Before: Mar  5 18:07:29 2024 GMT
            Not After : Mar  4 18:12:29 2025 GMT
        Subject: CN=A849467068E0AD44F2630140F6B16368A0C0611B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:a8:12:74:fe:db:1e:89:06:8f:d3:a7:54:
                    9a:76:6e:7e:7e:87:6b:fe:18:f0:09:ae:b1:ed:a5:
                    df:35:6b:6e:9b:eb:16:fd:f0:8f:87:6c:40:2b:dd:
                    8b:06:c6:a6:c0:bb:9d:7c:10:f9:7e:e5:df:ab:21:
                    4d:25:03:13:f8:2e:dd:c6:43:8b:73:61:68:91:ac:
                    4f:06:8a:2b:64:99:ac:65:50:39:b5:7c:24:78:8a:
                    a8:41:63:53:bd:d6:7a:a6:bb:16:9d:00:16:cb:c6:
                    ae:2e:c5:76:09:2a:5b:9e:f5:ab:ac:8d:cd:27:ce:
                    50:ed:92:72:63:a2:bb:26:b6:66:df:3d:7b:6b:49:
                    80:18:dd:6b:f9:b5:0f:fa:f3:4e:f5:3b:af:73:70:
                    bb:e8:d9:bb:4c:8e:67:59:27:49:f9:36:b7:e6:86:
                    0e:f2:02:21:f1:11:0d:f9:7e:aa:e0:55:fe:e7:85:
                    9f:44:09:15:e8:32:a3:f8:74:26:cd:c4:aa:2d:42:
                    4d:cf:f8:0f:e1:7a:26:93:37:96:03:f3:e1:b6:7d:
                    3c:44:d1:ed:59:2e:13:74:82:ff:bf:f8:9c:05:76:
                    d8:d0:89:39:2c:c6:0d:2d:57:7c:0d:71:dc:f5:82:
                    ba:1b:83:1f:10:06:2d:d6:37:38:f0:c9:df:f7:1e:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:49:46:70:68:E0:AD:44:F2:63:01:40:F6:B1:63:68:A0:C0:61:1B
            X509v3 Authority Key Identifier:
                keyid:4E:56:D1:3A:FF:B6:D3:35:35:BA:82:AE:BB:1E:C9:AB:F8:95:56:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:87:9e:3f:34:82:d9:73:e6:25:84:60:f5:93:8f:5e:aa:15:
         a6:0d:e7:2c:dd:58:20:65:2e:73:ab:ae:5d:47:aa:25:a0:93:
         a8:dd:fb:6a:d7:0a:e6:75:7f:71:ea:b2:8c:d9:a1:f1:c5:f0:
         13:7c:7f:80:eb:57:aa:75:46:02:31:29:98:1e:74:fd:8a:1d:
         9a:21:26:ef:c3:36:f0:7c:8f:d8:98:65:f7:da:28:b9:2c:63:
         0a:a2:b6:cd:ed:93:84:47:15:0a:f7:22:90:ae:3f:73:3f:23:
         6c:50:f8:5c:54:dd:2d:5e:17:5e:68:b0:4b:c7:87:8b:64:53:
         08:a2:a4:a2:9d:2a:94:d6:47:2e:db:e1:5a:e7:9c:7d:2a:a2:
         df:de:6e:26:ef:3a:22:35:71:1f:b2:42:a6:b1:e3:74:a5:c7:
         4d:17:62:42:97:19:2f:ac:56:e7:d6:00:af:3a:c1:77:d0:a9:
         1c:97:eb:36:1d:b1:24:28:9b:3b:b5:c7:1e:a7:06:fd:a1:e7:
         33:8f:8e:3f:f1:90:42:91:26:cc:1d:15:6a:f0:0a:ba:ba:d1:
         a2:39:bd:4f:8c:45:d1:2e:39:40:16:a1:8e:43:30:70:a3:95:
         47:ae:48:35:46:8e:1c:8b:44:88:c8:71:dd:72:4b:12:be:4c:
         57:e0:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org