Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e203532333633.roa
File:                     34352e3233322e3230342e302f32322d3234203d3e203532333633.roa (raw, json)
Hash identifier:          kILWat+DUBvl/ApQCu6rxyCWWufkg5FbW5ISzLh9KO4=
Subject key identifier:   2F:EA:B5:48:02:BC:0C:6C:AE:D0:85:5A:7B:0D:F2:AA:F7:E5:4C:00
Certificate issuer:       /CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
Certificate serial:       26E44291C6900BFD0FF1F89CE275674687CFFA67
Authority key identifier: 84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e203532333633.roa
Signing time:             Tue 05 Mar 2024 18:15:28 +0000
ROA not before:           Tue 05 Mar 2024 18:10:28 +0000
ROA not after:            Tue 04 Mar 2025 18:15:28 +0000
asID:                     52363
IP address blocks:        45.232.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:42:91:c6:90:0b:fd:0f:f1:f8:9c:e2:75:67:46:87:cf:fa:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C
        Validity
            Not Before: Mar  5 18:10:28 2024 GMT
            Not After : Mar  4 18:15:28 2025 GMT
        Subject: CN=2FEAB54802BC0C6CAED0855A7B0DF2AAF7E54C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a7:d0:cb:fe:26:f1:b6:e8:98:8f:31:ae:b0:
                    9f:c8:fa:02:03:01:e6:dc:4d:a5:6e:26:38:93:f1:
                    b0:de:31:e8:98:fa:22:4d:bd:cd:d5:2e:c7:32:0e:
                    21:5c:b8:38:04:cd:16:c3:78:da:44:c3:f3:54:0f:
                    d6:da:4c:ad:b0:1b:f2:85:d4:3b:ba:61:33:6e:d8:
                    26:50:6d:35:ec:80:29:4a:87:90:95:54:44:28:7f:
                    e9:72:8b:31:07:dc:67:20:40:0c:11:b4:19:98:84:
                    c6:e5:67:37:14:ec:26:c7:39:93:2b:4c:51:3f:33:
                    5d:56:ff:7f:0f:4c:28:23:3c:e9:ce:9c:34:98:3a:
                    b9:40:73:e3:f7:59:50:fa:25:37:ab:54:ea:48:d1:
                    04:e1:81:2e:64:ed:7a:e7:d5:ea:79:47:5c:f8:68:
                    f5:64:d0:36:3f:91:3a:de:e5:79:0c:e8:81:f4:ad:
                    55:59:96:18:99:bc:29:75:3b:1b:77:75:59:59:f7:
                    18:56:af:f6:f4:79:d0:fb:33:70:d7:de:53:8f:25:
                    bc:f7:00:b0:d7:2c:85:49:6e:68:a1:61:56:09:c4:
                    1c:a9:13:4f:54:7a:00:30:79:9b:40:25:14:f2:47:
                    d2:11:2f:7a:4a:b1:19:f1:02:b8:53:71:f9:45:13:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:B5:48:02:BC:0C:6C:AE:D0:85:5A:7B:0D:F2:AA:F7:E5:4C:00
            X509v3 Authority Key Identifier:
                keyid:84:C3:A6:50:73:B9:C2:94:BE:FB:A2:99:A5:A4:D6:F6:2C:FF:FD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84C3A65073B9C294BEFBA299A5A4D6F62CFFFD7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EC640656D88292C3E60BFD28BC03CBE0AC25932F7586B32691134A8E3BCA86C6/0/34352e3233322e3230342e302f32322d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:57:75:45:41:2a:93:96:d0:58:25:1e:80:9c:81:93:c3:73:
         4c:b3:b2:da:17:c7:40:f5:3d:0e:e5:8f:79:57:e5:be:6b:ca:
         63:58:70:47:65:9f:95:09:48:c1:80:11:a1:7a:dc:a3:4c:28:
         58:b8:95:d5:ec:68:1b:18:f6:60:0e:d8:f2:e3:7b:c5:9a:86:
         d2:2e:26:94:4b:50:86:dd:5e:d5:c3:45:f0:13:72:8e:4c:d9:
         0b:34:c5:2b:d1:80:18:a6:db:58:54:c3:f2:7d:a5:c4:da:f1:
         b5:dd:63:11:3e:0a:1b:bc:1e:cf:61:a6:ed:5b:a6:dd:ab:5f:
         4c:50:35:64:04:3e:71:3f:b6:35:7b:bd:da:2b:06:a1:e7:dd:
         48:92:40:67:5b:98:6a:c2:08:2c:a1:fc:36:c1:78:92:fb:9c:
         92:b2:e2:52:5d:c3:a0:b7:86:77:99:6b:40:86:24:da:85:f2:
         42:c5:0b:8d:f5:6a:00:ca:b9:4c:f3:cb:e8:9c:81:99:c9:ec:
         c4:fc:eb:e0:20:8e:94:e9:13:87:0e:0f:42:8d:51:d2:04:a0:
         83:45:38:60:2c:d5:68:b9:bb:a7:7e:60:d0:ea:86:22:dc:15:
         16:84:95:cc:1c:c1:ea:25:83:7a:d6:f9:5b:e9:9b:9f:14:84:
         bb:5c:3d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:50 2024 by rpki-client on console-ams.rpki-client.org