Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235322e302f32342d3234203d3e20323732313231.roa
File:                     34352e37312e3235322e302f32342d3234203d3e20323732313231.roa (raw, json)
Hash identifier:          AWFBC4dUWDt/Y5QxpWot6PfCSojIZkzkMMGxK1gQxZs=
Subject key identifier:   AD:97:EF:27:45:66:EA:D1:1B:54:D9:C1:DF:87:A0:9D:29:75:E6:D0
Certificate issuer:       /CN=896E033E875BDBE6F2217610A8C83D959EB2168F
Certificate serial:       2012D6470664378093044CBD37CDD592EC9C1CE6
Authority key identifier: 89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235322e302f32342d3234203d3e20323732313231.roa
Signing time:             Tue 05 Mar 2024 18:00:25 +0000
ROA not before:           Tue 05 Mar 2024 17:55:25 +0000
ROA not after:            Tue 04 Mar 2025 18:00:25 +0000
asID:                     272121
IP address blocks:        45.71.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:12:d6:47:06:64:37:80:93:04:4c:bd:37:cd:d5:92:ec:9c:1c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896E033E875BDBE6F2217610A8C83D959EB2168F
        Validity
            Not Before: Mar  5 17:55:25 2024 GMT
            Not After : Mar  4 18:00:25 2025 GMT
        Subject: CN=AD97EF274566EAD11B54D9C1DF87A09D2975E6D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a0:cb:5b:34:35:49:33:3c:ef:31:48:68:47:
                    2c:cb:eb:93:81:44:9b:8f:aa:6a:89:92:b9:81:5e:
                    73:f5:59:dd:d2:a5:c0:45:34:e8:c9:be:9f:c7:db:
                    34:a0:31:97:c1:07:b2:2b:58:95:c8:8e:2b:fb:71:
                    7f:c1:30:16:7f:d0:da:03:ec:e8:e2:bb:32:af:85:
                    6c:ed:19:d8:a2:6d:08:07:8c:1b:a8:04:28:be:e8:
                    34:b8:3b:f0:67:b9:fd:c9:88:9b:73:99:fc:ad:ff:
                    0e:f9:47:30:38:46:29:b4:40:4f:63:2f:42:53:39:
                    54:8b:3f:75:88:0f:2e:29:ec:0a:b8:01:cd:71:07:
                    ee:aa:15:27:e7:5e:98:c8:78:12:c8:31:88:10:d8:
                    72:82:ab:90:37:dc:10:1b:6b:62:d9:e0:02:dc:1c:
                    2b:29:2a:24:ff:74:5c:0b:92:fb:f3:24:05:ac:35:
                    c9:73:7d:71:ee:29:87:71:aa:48:be:18:2b:af:49:
                    57:c5:4c:12:12:25:4f:44:5b:8f:1c:c1:b5:49:0d:
                    f2:ff:ed:92:9f:9f:85:b1:d8:2a:f1:1d:81:e9:f7:
                    78:da:f9:44:8c:c9:0f:89:1c:18:db:a2:73:83:f9:
                    f0:10:92:4f:38:32:b0:9d:5b:ed:3c:3c:06:0d:17:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:97:EF:27:45:66:EA:D1:1B:54:D9:C1:DF:87:A0:9D:29:75:E6:D0
            X509v3 Authority Key Identifier:
                keyid:89:6E:03:3E:87:5B:DB:E6:F2:21:76:10:A8:C8:3D:95:9E:B2:16:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/896E033E875BDBE6F2217610A8C83D959EB2168F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/896E033E875BDBE6F2217610A8C83D959EB2168F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC831F138F3C11AAF23CAC0CFC5BBA832ABCC3274EB44C043D1A2640B513DEC6/0/34352e37312e3235322e302f32342d3234203d3e20323732313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:07:dd:b6:d6:cd:97:27:c3:ed:e5:99:62:f5:4e:50:ba:23:
         2e:f5:c2:0e:45:d2:bc:3b:9f:d8:c1:7c:76:02:8b:1a:e0:f2:
         72:1c:b9:94:d4:1e:5c:35:1c:54:16:07:de:4e:71:45:0b:15:
         bb:f9:09:43:79:e1:76:cd:3b:ae:bc:b3:f7:a5:3c:df:63:19:
         9d:d0:ee:56:83:e9:27:ae:8f:d0:16:5e:2f:32:c0:04:a4:c3:
         2c:0e:11:c4:43:5e:55:da:90:69:1f:0d:e3:70:3f:fe:39:0f:
         3d:99:96:cc:69:ce:57:4d:28:68:65:a8:e1:ba:54:c8:b8:cb:
         8f:f8:37:b1:04:7a:7a:3b:36:02:bc:4f:cd:17:ec:af:51:59:
         50:e8:53:ac:28:6f:6b:58:c7:2c:38:5e:f9:60:ba:79:87:82:
         84:a0:fc:6a:5f:21:e1:92:80:10:30:58:e9:ed:67:e4:36:82:
         5e:c4:98:c9:f0:2d:82:f9:ac:49:54:72:8b:25:81:d3:45:82:
         92:ce:b3:fa:54:3b:f7:42:3a:88:93:d3:a9:e0:7b:db:18:3f:
         ba:be:cf:87:95:67:e3:52:80:30:85:28:38:69:ed:e0:cb:0e:
         e7:b7:00:cf:79:ed:5b:ca:4e:b6:c4:84:3d:28:b0:a3:38:8f:
         5a:9d:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:21:58 2024 by rpki-client on console-fra.rpki-client.org