Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32322d3232203d3e20323636373235.roa
File:                     34352e36352e3232342e302f32322d3232203d3e20323636373235.roa (raw, json)
Hash identifier:          vkMgfNMmAGuY3j7GmdpDrY4kW48PkHZsc1Aob9yzS+o=
Subject key identifier:   EE:38:86:A9:05:02:65:41:B8:37:B1:9A:DC:2E:22:7E:83:57:24:33
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       538C204A5154E550FBEFC5947457B5F8EC414280
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32322d3232203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:00:42 +0000
ROA not before:           Tue 05 Mar 2024 17:55:42 +0000
ROA not after:            Tue 04 Mar 2025 18:00:42 +0000
asID:                     266725
IP address blocks:        45.65.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8c:20:4a:51:54:e5:50:fb:ef:c5:94:74:57:b5:f8:ec:41:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar  5 17:55:42 2024 GMT
            Not After : Mar  4 18:00:42 2025 GMT
        Subject: CN=EE3886A905026541B837B19ADC2E227E83572433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:69:ea:fb:2e:ac:ef:13:f5:d1:36:92:b1:
                    66:53:fe:8f:29:90:ab:f4:61:87:c9:bd:9e:bb:14:
                    8d:c2:42:9c:e6:3e:94:00:f5:ff:85:87:fd:d3:7a:
                    00:22:42:c3:e0:a2:83:41:08:79:cf:36:43:37:9e:
                    07:d0:c3:a6:38:f7:99:16:db:23:9e:da:14:09:ec:
                    51:05:6b:1d:c2:2e:24:fa:e9:34:f6:a3:f7:d4:e2:
                    d8:1a:c3:f5:ce:c0:9d:52:45:1d:d8:9f:bf:c0:bb:
                    b8:d4:38:9f:34:a3:d7:7c:32:aa:d0:c3:4a:73:b7:
                    ca:26:33:e8:71:59:c2:76:64:df:45:49:3e:f2:1e:
                    ce:62:a3:d0:66:c4:b1:b9:4e:eb:37:98:52:98:9d:
                    90:ab:13:39:d8:75:f7:76:36:61:ed:c6:7f:55:e1:
                    52:a9:c3:55:d5:6b:d3:fd:5d:34:32:ac:3e:4c:47:
                    f1:96:62:3e:88:7b:58:fc:e3:b2:fb:50:3b:cc:10:
                    a6:28:a9:39:1a:be:69:ae:08:09:41:25:99:c0:da:
                    ea:1e:73:e9:b7:e6:26:5e:dc:c4:8e:cc:dc:0a:f2:
                    ff:e1:4a:7e:20:af:6f:53:4c:e6:c9:1c:07:a2:1e:
                    8a:16:66:72:08:8f:a7:ed:b2:b5:ed:8b:9c:b0:2b:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:38:86:A9:05:02:65:41:B8:37:B1:9A:DC:2E:22:7E:83:57:24:33
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32322d3232203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:bf:4a:25:ae:7d:81:0d:51:a8:74:a7:8d:b8:9c:3b:81:a4:
         cc:98:36:17:1e:49:2e:03:44:20:0b:71:ea:88:59:f9:59:dd:
         e9:1d:f0:6f:fb:52:98:c9:21:53:6d:61:5f:37:f3:03:57:f9:
         d8:06:1a:99:50:dd:ae:3e:16:55:e0:31:98:6b:98:a1:c9:c0:
         11:18:79:50:de:33:15:70:07:dc:9f:3b:1b:39:cd:aa:37:e1:
         a6:9a:ab:36:10:ef:c1:58:77:05:a8:1f:96:ea:fb:b5:cd:0c:
         fe:77:d1:9b:e7:74:8c:51:e4:45:e4:f5:5b:4f:7e:7a:98:e2:
         f3:88:83:ba:fa:4f:99:c7:f3:f1:dc:72:86:d3:93:07:a9:a6:
         4e:9b:cb:60:30:de:74:bf:f4:36:46:59:42:0d:c1:83:7c:a2:
         db:58:46:5c:cd:ba:f9:5c:41:f4:0f:c8:a3:f3:4d:e9:e3:47:
         73:54:9e:d1:9f:32:35:5f:a0:86:98:f9:c0:26:a5:7e:15:f7:
         4d:1f:d3:59:2b:cc:78:1c:f9:9e:6e:9b:b9:f6:f1:49:3d:0a:
         de:58:c0:e7:eb:a8:b8:39:ed:0a:69:13:15:7e:bc:13:5b:14:
         ab:6c:28:11:4a:53:ca:d7:62:24:9a:f7:46:0f:68:8d:1d:98:
         d5:b1:11:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org