Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203237363837.roa
File:                     34352e36352e3235342e302f32332d3234203d3e203237363837.roa (raw, json)
Hash identifier:          MCJQyUXbIsYXkORgq9QVwBYvg+hB1EVmYekUNMpzKqs=
Subject key identifier:   1B:BA:6E:33:3D:48:6F:B7:DB:6B:C3:A2:8E:08:38:30:3E:9A:F7:58
Certificate issuer:       /CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE
Certificate serial:       2FFFBBF03ACEEA3EFEF4FC94AE55C4765CB70F87
Authority key identifier: 79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203237363837.roa
Signing time:             Tue 05 Mar 2024 17:53:49 +0000
ROA not before:           Tue 05 Mar 2024 17:48:49 +0000
ROA not after:            Tue 04 Mar 2025 17:53:49 +0000
asID:                     27687
IP address blocks:        45.65.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 01:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ff:bb:f0:3a:ce:ea:3e:fe:f4:fc:94:ae:55:c4:76:5c:b7:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE
        Validity
            Not Before: Mar  5 17:48:49 2024 GMT
            Not After : Mar  4 17:53:49 2025 GMT
        Subject: CN=1BBA6E333D486FB7DB6BC3A28E0838303E9AF758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:11:bf:28:1c:f1:0e:17:2c:19:30:14:b3:
                    76:05:f3:98:6b:47:71:cc:71:7d:b9:0c:5d:78:26:
                    7b:22:f1:e4:16:29:b7:a9:1b:3f:0e:88:c3:4b:e3:
                    9f:bd:40:9f:d1:ff:40:ab:14:1a:6d:d6:76:b8:03:
                    96:5a:cc:be:5d:b4:81:ba:72:c5:46:48:70:1e:53:
                    73:a3:8a:76:53:d5:2f:18:4a:ad:10:b7:83:c1:16:
                    33:df:6e:a4:8a:aa:0a:ac:26:8a:01:f0:ef:06:71:
                    bb:e9:34:6f:60:28:6c:27:6b:44:b3:30:5a:8a:46:
                    a5:09:b0:a2:9d:b4:1a:05:36:d2:85:b9:9e:ac:43:
                    a1:23:76:00:3e:a5:29:b9:60:f7:aa:54:6d:11:39:
                    fb:a4:e5:f3:5e:a5:2d:1c:2e:af:a3:a1:ac:11:56:
                    2a:79:65:cc:3b:c5:e1:98:a7:74:6a:b1:35:22:c9:
                    84:42:9d:12:d7:7f:72:73:06:9f:e4:b7:35:bc:08:
                    1e:19:6d:20:6e:b4:fa:a9:a0:a9:eb:52:c3:f2:2c:
                    2a:e6:eb:46:9e:21:cc:26:4a:ad:fe:22:21:88:cb:
                    11:a9:c3:95:66:a2:40:ca:6a:88:76:8d:90:22:84:
                    96:c2:8c:b9:15:1f:6e:17:f4:b8:61:17:7e:62:8e:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:6E:33:3D:48:6F:B7:DB:6B:C3:A2:8E:08:38:30:3E:9A:F7:58
            X509v3 Authority Key Identifier:
                keyid:79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203237363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:c8:99:86:93:89:07:7b:9c:16:18:aa:c2:a8:ae:02:64:8e:
         b9:99:4d:41:47:d9:b6:e1:9a:a1:fc:a9:b1:50:04:04:10:94:
         23:0d:00:9d:04:e7:09:01:48:7a:a9:33:86:38:a5:ab:0d:c7:
         de:87:5f:c2:a5:78:94:94:84:ef:8b:27:32:e0:e7:88:c8:51:
         f2:72:a4:32:ec:0f:0c:df:4b:42:49:10:b0:c0:7a:54:91:23:
         17:45:c8:38:df:91:06:7e:8f:c9:7b:3c:f6:a5:b9:89:d9:3e:
         47:11:92:2a:ac:af:af:08:fc:56:9f:eb:16:83:d5:31:6e:a1:
         2a:5a:ae:ab:d3:49:f3:af:23:68:c9:19:f8:de:68:2b:77:0a:
         99:11:f2:2e:ab:c5:cd:b6:8b:89:d6:6f:fe:95:c5:42:84:c7:
         4f:40:10:df:f4:28:b6:16:6c:05:39:25:55:78:74:19:80:fe:
         ed:a2:2f:04:54:50:2d:4b:90:4a:bb:f0:c2:97:ad:b9:ad:6f:
         4d:ad:b6:d7:3f:14:ac:f3:4c:fd:d9:1b:de:34:35:45:3e:02:
         fd:02:e6:18:5a:24:45:dd:e8:70:45:bf:c2:9c:3e:c0:00:97:
         c2:9c:48:4a:22:a5:82:05:34:07:01:a6:73:54:73:5a:b5:2f:
         f8:01:d4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:46 2024 by rpki-client on console-fra.rpki-client.org