Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa
File:                     34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa (raw, json)
Hash identifier:          i9i7hiqjZZEcKI5P5j26Ic516GyaSFMajIid51Jt+kY=
Subject key identifier:   F2:B4:DE:DC:06:D1:BA:F0:08:74:54:42:6B:0E:3E:2A:10:EF:39:69
Certificate issuer:       /CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
Certificate serial:       51EBB3DB580FE75478FBEADE4EB130BFE65E8D99
Authority key identifier: C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa
Signing time:             Tue 05 Mar 2024 18:18:55 +0000
ROA not before:           Tue 05 Mar 2024 18:13:55 +0000
ROA not after:            Tue 04 Mar 2025 18:18:55 +0000
asID:                     266772
IP address blocks:        45.234.116.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:eb:b3:db:58:0f:e7:54:78:fb:ea:de:4e:b1:30:bf:e6:5e:8d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C59D456B5A7958D801EFD7AD79135F812D7051FD
        Validity
            Not Before: Mar  5 18:13:55 2024 GMT
            Not After : Mar  4 18:18:55 2025 GMT
        Subject: CN=F2B4DEDC06D1BAF0087454426B0E3E2A10EF3969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a1:70:f4:14:a1:8c:2a:ef:a8:f4:40:0e:d2:
                    97:9f:35:30:d8:bf:09:09:ea:a7:ef:6f:10:9e:0d:
                    07:4b:d2:db:2d:83:5e:6e:93:70:b2:78:53:60:de:
                    d6:61:bd:56:d1:9e:7f:36:61:28:7e:c3:f6:59:e3:
                    c3:93:6d:b5:5d:7f:c0:a4:61:c2:13:c4:91:f2:d4:
                    cf:14:37:cd:7a:fc:7c:95:c2:d5:ac:8b:e6:1c:49:
                    25:bd:50:48:5b:a7:7e:da:62:8d:28:a7:dd:9f:f3:
                    43:99:f7:2e:95:1f:62:de:e8:3f:11:59:6b:47:13:
                    96:f0:99:a5:32:60:0a:b4:4e:b6:8f:e4:d6:a9:8a:
                    83:e6:7e:49:f3:07:42:2d:65:a4:aa:29:0c:16:b7:
                    62:f3:ef:55:01:60:cb:41:bf:d0:34:8e:64:af:fa:
                    01:91:27:0f:82:2b:87:be:3a:06:c4:4a:92:39:5d:
                    a8:c0:3b:0f:72:79:42:32:3a:6b:02:a4:de:07:d0:
                    0f:14:26:a4:cd:f5:96:11:3c:c9:4d:56:30:db:82:
                    6d:39:29:25:25:38:56:6d:63:e7:26:c2:3f:a2:55:
                    c0:95:89:5a:b5:07:cb:57:b2:f8:09:21:03:ec:a2:
                    5c:3b:5a:98:b3:77:5e:34:4b:5d:ab:73:27:e8:2f:
                    be:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B4:DE:DC:06:D1:BA:F0:08:74:54:42:6B:0E:3E:2A:10:EF:39:69
            X509v3 Authority Key Identifier:
                keyid:C5:9D:45:6B:5A:79:58:D8:01:EF:D7:AD:79:13:5F:81:2D:70:51:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C59D456B5A7958D801EFD7AD79135F812D7051FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41CFB095DDD0BDFA5013B95E4836DB0F8C161785486FBC8DA3C182E10A32964/0/34352e3233342e3131362e302f32322d3235203d3e20323636373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:70:e7:1d:6c:6d:6f:14:49:81:ab:0d:0a:62:51:6e:cc:
         c9:b0:1f:4b:2a:33:43:95:9b:d4:32:31:59:c9:61:fb:94:80:
         a6:c6:61:33:35:2a:85:3c:49:5a:58:2d:53:d2:39:75:5a:ef:
         45:49:26:5c:26:4c:96:42:87:44:61:88:b1:85:cf:a5:76:ff:
         b1:72:8d:ef:5c:20:8d:eb:ae:9b:6b:cc:77:96:ec:48:2b:aa:
         7e:a5:1a:d6:0c:9c:84:7d:e4:39:4c:53:38:71:cd:c6:d1:91:
         f3:17:01:ec:9b:79:6b:c5:fb:9b:63:36:08:02:5b:50:ad:79:
         cc:da:37:8b:11:53:df:d9:08:40:95:75:0c:ed:91:d9:06:6d:
         53:0d:6f:ea:e8:62:47:32:a0:6d:1e:29:03:ef:4d:ed:19:ca:
         76:5d:d6:b8:ec:58:0c:d1:02:97:cf:13:00:a4:1f:51:b8:c8:
         37:28:28:d2:45:12:67:cf:c8:28:7c:cb:3f:2a:8f:36:51:28:
         0e:14:bd:82:a4:68:99:e3:c5:b3:9a:c6:9e:bc:cb:34:0a:b5:
         f3:35:e1:5e:28:d2:f2:dc:7d:10:cc:d3:a0:38:ff:3e:bc:27:
         69:72:2f:6c:d8:84:e5:70:80:18:7c:28:b9:95:d4:15:62:25:
         e1:74:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:11:47 2024 by rpki-client on console-ams.rpki-client.org