Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/34352e3232352e3130342e302f32322d3234203d3e20323634363638.roa
File:                     34352e3232352e3130342e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          TZtBvGeUS00Fa4Zdv3/uDoJh1ZR4RwvlwBinZEsbkYM=
Subject key identifier:   6E:3A:D1:95:92:38:4B:24:50:3C:1A:E0:6A:E0:F9:9F:36:D6:71:15
Certificate issuer:       /CN=179432928797F12F1478B33FBCA3D63294DDAFC3
Certificate serial:       099799AC9156717849F540E8A8305AA8AFE76C4B
Authority key identifier: 17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/34352e3232352e3130342e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 18:03:20 +0000
ROA not before:           Tue 05 Mar 2024 17:58:20 +0000
ROA not after:            Tue 04 Mar 2025 18:03:20 +0000
asID:                     264668
IP address blocks:        45.225.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:97:99:ac:91:56:71:78:49:f5:40:e8:a8:30:5a:a8:af:e7:6c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179432928797F12F1478B33FBCA3D63294DDAFC3
        Validity
            Not Before: Mar  5 17:58:20 2024 GMT
            Not After : Mar  4 18:03:20 2025 GMT
        Subject: CN=6E3AD19592384B24503C1AE06AE0F99F36D67115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:8d:b2:b4:04:68:df:1c:32:30:f5:c6:89:
                    92:df:37:30:a6:dd:32:c1:7f:66:51:69:2e:10:6d:
                    3c:37:4a:c4:35:dd:bb:ee:17:ee:f6:dd:b1:28:b3:
                    2f:ca:79:d6:1c:e1:eb:79:87:b0:20:ea:63:a3:3f:
                    56:92:8b:a9:20:d9:0d:65:29:42:33:e8:8a:da:7a:
                    c6:cd:97:4b:c6:3f:a4:b2:f7:a9:94:39:27:80:e5:
                    a6:b8:a7:6b:7f:c6:74:7b:1d:02:02:82:93:a4:9e:
                    3d:c0:85:8d:b0:98:59:95:3d:53:8d:13:bf:89:7e:
                    39:dc:35:c0:bc:09:0a:22:44:f6:b6:75:81:82:fc:
                    be:fa:50:32:15:2b:f1:70:f8:8e:cd:b8:d7:ea:32:
                    c0:98:e6:6b:44:ce:13:3d:76:92:5b:84:da:58:c3:
                    a4:c7:05:0d:5b:4c:57:71:dd:37:40:89:dd:ef:71:
                    02:cf:11:67:d5:00:29:9b:cb:b1:3a:6d:d4:42:e6:
                    a3:d1:37:64:94:65:b3:c0:83:d8:42:5e:f3:8c:3a:
                    3c:a0:f8:f8:6c:59:db:ad:a1:a5:b2:f2:f6:98:52:
                    4e:4b:9b:97:f2:2d:c9:98:9e:22:ed:a9:49:2c:c9:
                    b5:63:d2:77:85:a4:33:3c:76:a7:9b:3d:e6:4e:fa:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3A:D1:95:92:38:4B:24:50:3C:1A:E0:6A:E0:F9:9F:36:D6:71:15
            X509v3 Authority Key Identifier:
                keyid:17:94:32:92:87:97:F1:2F:14:78:B3:3F:BC:A3:D6:32:94:DD:AF:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/179432928797F12F1478B33FBCA3D63294DDAFC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/179432928797F12F1478B33FBCA3D63294DDAFC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F08DB84004E91DEB6AABF052A6B511426B71AC9D4BCE440E855E68B15F43CC57/0/34352e3232352e3130342e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:18:d7:93:50:f7:a4:d6:6b:d8:67:be:cb:99:cb:e5:94:
         59:41:d0:b7:64:cd:82:19:b7:89:6a:cb:06:f8:ea:1e:f8:b3:
         1b:d5:a9:b9:d7:d2:aa:1c:8b:ff:04:46:bd:08:ab:52:c5:58:
         b5:1b:d2:62:50:6f:77:ff:4b:81:bc:8e:0c:8d:40:ad:a1:22:
         01:6a:70:0b:5f:e2:46:7c:4a:77:d7:c8:2b:53:bb:5b:77:9b:
         c5:21:ca:84:5f:a1:6c:2c:15:73:0b:5a:0a:72:e3:82:2a:83:
         d3:53:31:5e:83:86:54:bf:bd:9b:ca:42:f5:41:3a:de:7e:06:
         4d:f1:4a:6d:a5:12:16:00:44:4d:43:c3:6b:e1:63:35:31:57:
         18:90:0a:00:49:79:61:27:f2:ff:57:36:42:f3:71:e6:1c:89:
         4d:fb:ae:d3:59:ad:ea:2c:1b:df:3e:ab:4d:22:08:a8:81:79:
         8f:f2:0a:97:89:4c:5b:d8:e2:dc:69:d2:66:25:36:40:3e:a9:
         4f:a9:52:32:36:13:fd:86:03:fb:3e:bc:22:c4:5a:0a:37:50:
         45:57:93:81:ea:bc:a1:ab:c3:d5:1d:22:1d:9e:74:cf:91:7a:
         d0:58:51:54:34:a2:47:93:35:42:cb:4b:ba:d5:60:2d:f5:44:
         dc:ad:e4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:13 2024 by rpki-client on console-fra.rpki-client.org