Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232372e302f32342d3234203d3e20323636373235.roa
File:                     34352e36352e3232372e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          zpuTR2xdsfuRr7eMT64TatozC4m89tIPeTb7aJ8t+W0=
Subject key identifier:   6B:01:79:98:55:CA:85:B3:B5:52:7E:1D:E0:58:4C:F6:7A:1A:D2:96
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       42EB82CAC2AA6DCFE47013833FE0EE4CB3A01FF2
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232372e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     266725
IP address blocks:        45.65.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:eb:82:ca:c2:aa:6d:cf:e4:70:13:83:3f:e0:ee:4c:b3:a0:1f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=6B01799855CA85B3B5527E1DE0584CF67A1AD296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:99:e5:6e:22:d3:a2:03:33:c6:27:31:90:
                    3e:33:06:91:fc:40:c3:b3:4f:ad:77:93:98:f2:67:
                    d4:36:94:c0:d5:d3:49:35:e2:12:b3:e3:62:5e:bb:
                    d8:85:6f:02:a2:59:88:3c:ab:83:87:21:bc:ab:85:
                    ae:87:5c:3b:27:94:72:a0:ff:c2:31:f9:12:4c:3a:
                    fd:bd:4f:12:3f:09:f9:58:03:b7:1f:f2:d2:f7:b6:
                    aa:22:7e:51:22:3b:0d:5e:06:a3:22:16:f9:a8:f4:
                    73:b2:a8:4b:1d:f1:53:ee:b9:5a:a5:7c:59:9e:79:
                    ac:e9:1e:02:a2:93:3c:9f:fc:13:48:61:e8:4b:30:
                    12:f6:6c:91:52:db:8c:c9:9a:8b:66:1e:e4:f8:de:
                    27:01:e2:58:67:13:ce:3f:fe:c0:aa:e4:23:94:a9:
                    f8:f9:b1:56:e2:6a:b2:d8:c2:3e:4a:f6:1f:66:50:
                    c6:90:bc:31:49:b3:70:7d:21:7f:43:b7:5a:89:76:
                    b7:ed:8f:62:fe:b3:b0:5c:5e:32:03:98:ff:b8:b5:
                    a5:23:b0:dc:76:3b:96:fd:90:67:dd:92:9b:94:04:
                    a4:25:cd:a6:79:29:8d:95:be:e4:e3:cd:20:d1:aa:
                    ae:b7:cf:01:d3:89:46:17:3c:57:18:ac:89:5d:0d:
                    10:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:01:79:98:55:CA:85:B3:B5:52:7E:1D:E0:58:4C:F6:7A:1A:D2:96
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e36352e3232372e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:8d:59:20:cf:18:9f:f0:d1:80:63:b7:b4:cb:58:f5:76:
         9e:90:57:73:28:60:5c:f3:65:67:8d:f1:09:2a:f7:90:3c:f1:
         e4:95:57:5e:a8:86:27:c6:a7:0f:be:8b:2b:ed:78:67:d1:94:
         af:2d:31:d3:0d:74:9e:f9:30:b2:29:79:8e:4a:a4:99:6f:72:
         f4:59:21:ff:8b:42:b4:89:3e:7a:24:78:17:3b:6f:d1:f6:f2:
         cd:3d:bf:39:95:5e:4b:9d:1f:cb:34:15:f2:64:03:9e:2f:fd:
         85:3f:b9:a0:1b:04:8f:2d:fa:04:c4:0d:c4:8d:8e:18:58:0e:
         18:da:9b:b7:93:21:95:49:50:c4:7b:8d:d3:cf:5c:b2:f5:a6:
         d7:0a:e7:92:d4:b5:60:4c:f0:de:a0:93:42:29:d9:c1:db:2a:
         f7:41:21:70:13:b0:ed:79:57:fd:e3:ec:4e:77:78:d3:1a:ca:
         39:31:ff:f7:c9:ee:df:11:6a:51:55:08:73:ca:09:98:22:9d:
         d5:a4:de:d9:11:7b:58:3e:dc:ef:53:43:4e:44:fe:23:bd:00:
         9a:22:20:a4:33:84:25:c8:ec:2b:5b:17:69:31:17:7d:40:60:
         a7:92:7d:22:6e:ad:32:c1:ba:e5:95:b5:c6:b4:10:18:d5:c8:
         73:01:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org