Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
File:                     34352e3233362e33322e302f32322d3232203d3e20323636373931.roa (raw, json)
Hash identifier:          JCxAgV6pVMZ8KcsAuBVaD2kIM6LRWBOrfA8aK7tng4g=
Subject key identifier:   95:A0:0F:D0:46:35:5E:92:7C:EE:35:9E:FD:F9:71:99:8A:C1:47:AD
Certificate issuer:       /CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
Certificate serial:       310D291BD3CF9FB6ED8AD5D821F4A25BCFAD9E83
Authority key identifier: F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa
Signing time:             Tue 05 Mar 2024 17:49:15 +0000
ROA not before:           Tue 05 Mar 2024 17:44:15 +0000
ROA not after:            Tue 04 Mar 2025 17:49:15 +0000
asID:                     266791
IP address blocks:        45.236.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0d:29:1b:d3:cf:9f:b6:ed:8a:d5:d8:21:f4:a2:5b:cf:ad:9e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F381BE6CF64000AB9FF5B43AFF78F2623199F153
        Validity
            Not Before: Mar  5 17:44:15 2024 GMT
            Not After : Mar  4 17:49:15 2025 GMT
        Subject: CN=95A00FD046355E927CEE359EFDF971998AC147AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:7f:fa:a3:af:fc:8e:a0:48:43:50:50:fb:
                    8c:2e:c6:da:72:e5:11:3f:61:e4:89:d1:9b:3d:bf:
                    8e:b0:5d:6f:de:4a:ea:15:42:c8:ae:b8:83:55:64:
                    8e:62:97:21:98:11:4d:fe:77:c5:a8:b2:65:c6:c4:
                    91:b6:fc:f2:2d:0d:5c:f5:d7:00:71:8e:51:76:c0:
                    7b:d0:4f:96:46:17:b6:51:e7:4a:ef:2e:fc:75:51:
                    48:e4:13:c4:51:e5:7d:dd:fb:a9:8b:5e:83:f7:c8:
                    4c:6e:4b:0f:8c:fb:02:c6:88:77:2d:a2:bd:42:17:
                    68:0d:2e:7e:2a:0b:ef:15:11:27:1d:f6:fb:0a:12:
                    ba:3b:21:5e:c0:24:48:4c:ce:25:98:67:3f:78:7f:
                    66:d1:7c:ff:9f:44:c4:ad:4f:e5:fd:85:1e:9f:7a:
                    69:43:c2:f8:6c:a8:5f:af:e7:31:5c:71:0f:48:df:
                    df:56:76:2c:58:62:bb:24:c1:12:c3:7b:0d:ba:2e:
                    c1:14:4e:c2:2a:1d:9b:6a:18:93:fc:3e:03:52:d9:
                    83:b7:f0:c5:48:03:d4:c3:21:30:a9:05:17:87:a3:
                    0f:95:a9:42:d7:79:e1:e6:0b:47:45:01:bd:36:49:
                    59:71:ab:c5:65:2a:79:66:be:ca:a0:01:72:6b:49:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:0F:D0:46:35:5E:92:7C:EE:35:9E:FD:F9:71:99:8A:C1:47:AD
            X509v3 Authority Key Identifier:
                keyid:F3:81:BE:6C:F6:40:00:AB:9F:F5:B4:3A:FF:78:F2:62:31:99:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F381BE6CF64000AB9FF5B43AFF78F2623199F153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC6AE4F20474937934AF5EF48EF8B2C64555FFEE9848645B1B86B757928F738/0/34352e3233362e33322e302f32322d3232203d3e20323636373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:84:8a:63:8c:ca:a1:65:8e:c4:6e:6e:6d:81:db:38:35:61:
         d9:78:d7:20:7d:0b:7d:13:3d:a6:e7:e9:4d:8b:15:1e:eb:47:
         11:07:23:9d:2c:62:bc:c7:4d:bf:a0:23:36:90:d7:c7:e4:77:
         6a:05:8b:42:90:b4:6b:ce:a4:ac:cd:f0:61:c9:3c:85:81:f8:
         74:e3:9d:ba:81:2d:95:50:28:15:ab:20:32:7d:6a:3a:bd:dc:
         2c:b7:92:c0:d6:74:76:73:b1:fd:fe:0f:45:5c:43:ed:4e:c8:
         9c:4d:dd:a4:e6:d1:df:12:ff:de:52:cf:66:d9:14:31:4c:44:
         ee:80:d7:a3:89:af:19:a6:83:60:e3:56:62:59:2b:9e:89:90:
         61:ed:1a:18:a6:b0:f4:7a:b9:46:ab:18:c8:38:91:42:22:41:
         67:9e:58:56:08:be:ab:47:d8:3d:b5:d7:de:3c:01:e5:9e:10:
         f3:88:d2:0f:30:b9:fa:ba:71:cf:95:8a:13:26:43:04:91:0b:
         30:a4:4c:77:46:f5:f2:f1:02:9a:dd:56:01:58:64:87:57:03:
         dc:17:d5:75:81:f0:8d:f4:0d:33:35:1c:73:6c:d6:b5:82:58:
         31:0e:a9:d8:9d:07:34:6b:1e:f3:70:8d:dc:98:fa:3c:0d:40:
         8d:91:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 22:05:57 2024 by rpki-client on console-ams.rpki-client.org