Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32332d3233203d3e20323636373235.roa
File:                     34352e36352e3232342e302f32332d3233203d3e20323636373235.roa (raw, json)
Hash identifier:          HJcv8sgALiqvX5HVpBZvPLt6K4lb9aEfZfvhPj41U1E=
Subject key identifier:   AC:D8:83:E7:B2:BB:CB:05:12:37:97:7B:F5:D6:72:50:FA:B5:ED:A8
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       659729DD14DAAED12871B41294331BE956FC7AC7
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32332d3233203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:00:44 +0000
ROA not before:           Tue 05 Mar 2024 17:55:44 +0000
ROA not after:            Tue 04 Mar 2025 18:00:44 +0000
asID:                     266725
IP address blocks:        45.65.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:97:29:dd:14:da:ae:d1:28:71:b4:12:94:33:1b:e9:56:fc:7a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar  5 17:55:44 2024 GMT
            Not After : Mar  4 18:00:44 2025 GMT
        Subject: CN=ACD883E7B2BBCB051237977BF5D67250FAB5EDA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:d8:0f:c9:eb:7b:44:4f:97:a2:a8:2a:b7:
                    18:c4:11:cd:8e:b5:96:57:4f:8b:61:2c:b2:06:74:
                    ce:6a:5f:23:a2:08:cd:0f:f2:98:e9:31:65:0f:3b:
                    c4:c4:ae:9f:63:83:ce:f8:a7:fc:e0:fa:14:4b:d2:
                    fe:34:30:57:c1:b0:9b:44:44:62:f1:20:a9:2c:36:
                    d7:ec:e8:bd:d3:10:2c:36:97:ec:6a:b6:db:71:79:
                    e1:d5:14:30:0e:be:cf:4d:86:5b:cf:49:ce:c4:6e:
                    af:7c:af:75:98:a5:76:8f:8b:fb:b3:83:f5:80:f0:
                    e3:b3:f6:4f:e9:d8:99:23:75:6e:bc:5e:c3:ca:8e:
                    f8:53:7e:0e:84:96:ed:c0:9e:e4:00:eb:a6:5d:92:
                    71:d4:5f:1f:ae:4e:53:3a:ff:48:db:56:23:83:92:
                    99:c0:72:0e:f6:c6:aa:55:63:65:12:c7:de:72:6d:
                    24:3c:14:94:79:9f:1a:4a:3d:5b:2a:3e:dc:76:98:
                    a0:88:06:1f:4a:be:16:c4:4f:82:63:10:82:f5:4e:
                    11:7b:3f:00:e6:ce:d0:ad:67:09:ea:d4:4e:dc:f2:
                    8d:0f:0b:3f:d2:82:a8:53:16:e7:59:6f:1b:1b:da:
                    26:a5:be:4a:43:c6:fa:8a:5f:69:bf:29:57:4b:7c:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:83:E7:B2:BB:CB:05:12:37:97:7B:F5:D6:72:50:FA:B5:ED:A8
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232342e302f32332d3233203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:f7:da:80:4b:75:c9:11:35:45:f3:a6:ae:13:38:99:dd:1f:
         89:86:7e:13:df:ef:7f:4c:73:75:ef:98:08:da:42:59:a1:fc:
         0f:a4:a1:d2:7c:4a:00:7c:41:42:7c:9a:98:4d:01:41:37:5d:
         1b:1e:26:92:95:38:bb:de:98:8b:e5:b0:6b:b7:37:0a:17:eb:
         e4:12:e4:ba:55:20:3a:23:a3:77:f2:32:0b:c0:c2:3a:72:29:
         59:4d:f2:93:d1:d2:bd:f7:77:b6:06:e9:4f:46:80:5d:75:54:
         e2:04:bd:32:bb:d4:35:f1:e8:eb:14:49:50:c7:ba:1a:9d:1e:
         30:85:83:21:8f:1f:b4:eb:8f:ad:78:cf:5f:d7:89:18:25:8e:
         af:07:89:f2:f0:86:5a:3b:f9:4f:2a:19:51:f8:d1:ac:b2:c5:
         6b:b9:80:94:ce:bf:82:d7:25:88:3a:38:90:8b:7a:d6:cd:4e:
         5b:91:27:47:d7:df:c9:8f:7a:7a:dc:8d:f9:d0:cf:c3:fe:a1:
         1e:81:24:50:80:4d:fd:ae:ee:7e:2d:4c:e2:72:95:8f:20:3a:
         47:13:de:77:5a:11:10:87:db:79:6b:3b:a1:a7:c4:6f:1f:4d:
         cc:ae:e9:8e:d6:e9:40:37:bc:8c:ca:49:1d:94:f6:81:ca:0b:
         64:43:1f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:38:07 2024 by rpki-client on console-fra.rpki-client.org