Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20323633383132.roa
File:                     34352e3232382e36372e302f32342d3234203d3e20323633383132.roa (raw, json)
Hash identifier:          fRJl7zs6xoSZePPD3Wh+ftNKz7CCYbfJaUM7r0nrSKU=
Subject key identifier:   DF:60:F6:BF:F5:0E:7B:98:FE:65:7C:24:E9:8B:4C:EA:53:AD:A3:70
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       4AFA8D9952D2D3CA87D6EB0C940ABD2500A794A3
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20323633383132.roa
Signing time:             Tue 05 Mar 2024 18:02:23 +0000
ROA not before:           Tue 05 Mar 2024 17:57:23 +0000
ROA not after:            Tue 04 Mar 2025 18:02:23 +0000
asID:                     263812
IP address blocks:        45.228.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:8d:99:52:d2:d3:ca:87:d6:eb:0c:94:0a:bd:25:00:a7:94:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:23 2024 GMT
            Not After : Mar  4 18:02:23 2025 GMT
        Subject: CN=DF60F6BFF50E7B98FE657C24E98B4CEA53ADA370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:9f:94:9d:51:0a:d7:e3:08:de:a0:1c:c8:
                    d0:b0:23:a5:bb:44:76:d6:05:d5:b6:d1:f1:9e:f4:
                    46:55:d6:43:15:fd:58:39:54:aa:18:d5:5b:bd:2a:
                    f7:73:f2:f2:9c:e8:fe:72:6a:8c:ac:3f:36:14:91:
                    74:9e:37:b1:51:b4:12:f9:df:5b:76:a3:8b:93:2b:
                    81:6b:6a:25:67:4d:4d:4a:81:00:e4:73:5e:24:59:
                    cb:39:6d:23:fc:1c:3f:28:2e:1f:0f:cd:8c:32:90:
                    5d:c6:39:2e:f1:f5:a7:fb:31:74:3c:32:21:f8:71:
                    9e:a3:ca:63:13:54:0b:47:48:69:23:43:59:a6:a4:
                    f7:03:c9:4c:cb:e8:fd:87:36:19:0a:13:d5:d5:d5:
                    96:71:b5:71:87:76:08:c4:61:c5:b3:0c:59:1a:48:
                    89:e5:98:6a:69:ed:f8:e3:0c:13:ea:5f:b3:51:b5:
                    a6:3d:4e:5d:ad:12:86:86:4d:04:f8:2e:7e:7a:dc:
                    52:2b:61:19:27:5c:c6:24:39:8d:ce:0e:31:d5:87:
                    a6:6b:1b:a9:f2:7e:3f:24:b1:b4:b1:99:6b:ab:cd:
                    05:1a:a8:d1:5a:7e:1f:08:03:06:3f:df:eb:6e:0e:
                    7b:fb:f2:dd:c4:1f:1b:27:66:74:7f:9a:1b:3e:a2:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:60:F6:BF:F5:0E:7B:98:FE:65:7C:24:E9:8B:4C:EA:53:AD:A3:70
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:28:53:c2:c9:d9:2c:c0:25:a1:63:a4:39:bf:77:de:32:03:
         43:12:28:0d:4f:b4:3f:c5:c6:75:ae:f3:d0:3e:25:f2:a8:6a:
         fa:67:f8:aa:cf:a1:51:88:a1:19:3c:c5:a3:47:72:56:64:56:
         0c:5b:cd:f8:16:88:1f:2b:54:e0:4f:ba:54:1f:b0:3d:3d:76:
         64:d3:20:24:c2:d6:aa:2b:da:fa:48:94:73:e0:ab:45:96:b3:
         08:c5:14:22:e3:76:44:81:43:db:18:7c:6c:1b:e9:93:5f:84:
         d8:40:9c:3b:97:8b:b4:c2:cb:cb:c8:02:2d:6d:0b:62:06:5e:
         30:ce:3b:30:e4:89:56:83:49:4a:a2:7d:de:64:79:6b:1c:01:
         3b:44:f0:32:d1:cb:ce:33:6b:9a:b8:89:37:15:9f:b1:db:00:
         25:b8:1a:47:ab:10:d6:82:37:b6:15:1f:5b:86:fb:84:5d:4a:
         4e:35:15:31:cc:64:5a:9e:9d:21:0b:ec:61:0e:87:7f:b4:bc:
         cd:82:7c:58:ef:34:cb:7c:86:fd:a1:d2:42:9b:6f:5d:3c:ca:
         98:d0:0a:e0:7e:73:53:c7:6e:43:bd:0b:f1:8b:59:82:48:a3:
         84:56:ea:8e:33:f9:19:2b:91:57:bf:5f:52:66:66:e5:6a:ab:
         74:8f:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org