Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/34352e3137352e3135362e302f32322d3234203d3e20323637383337.roa
File:                     34352e3137352e3135362e302f32322d3234203d3e20323637383337.roa (raw, json)
Hash identifier:          Pf5SFfwBdsW/qYHbxD5TVMThuYhr6hfeBO+DPKKi/w8=
Subject key identifier:   6A:2C:AC:1F:11:D4:35:26:4E:1A:06:22:E9:2A:9F:C4:27:35:44:2E
Certificate issuer:       /CN=7E83B112B0609F1936D5490AFA6E5A7BCF126856
Certificate serial:       6736A4255DF715AC5261A4B5952F10301E970A24
Authority key identifier: 7E:83:B1:12:B0:60:9F:19:36:D5:49:0A:FA:6E:5A:7B:CF:12:68:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/34352e3137352e3135362e302f32322d3234203d3e20323637383337.roa
Signing time:             Tue 05 Mar 2024 17:42:30 +0000
ROA not before:           Tue 05 Mar 2024 17:37:30 +0000
ROA not after:            Tue 04 Mar 2025 17:42:30 +0000
asID:                     267837
IP address blocks:        45.175.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.crl
                          rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:36:a4:25:5d:f7:15:ac:52:61:a4:b5:95:2f:10:30:1e:97:0a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E83B112B0609F1936D5490AFA6E5A7BCF126856
        Validity
            Not Before: Mar  5 17:37:30 2024 GMT
            Not After : Mar  4 17:42:30 2025 GMT
        Subject: CN=6A2CAC1F11D435264E1A0622E92A9FC42735442E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9c:91:3a:fa:87:c1:23:90:76:01:c7:54:48:
                    c8:4e:da:e6:57:55:70:25:79:05:5c:8a:4b:be:f8:
                    28:f0:1f:2d:ca:b0:56:d7:f3:cd:37:f2:d5:72:9d:
                    ae:e8:c1:92:9b:ff:f4:2a:c8:45:5e:1c:92:da:51:
                    a4:91:f7:07:91:de:2c:64:d4:a4:f6:37:de:c0:a6:
                    10:fb:8e:88:1a:a3:18:36:cb:31:75:e9:2d:ba:e1:
                    92:a4:ff:b6:18:7a:f0:35:07:1c:1a:67:0d:f1:51:
                    40:9f:51:9f:82:5b:32:6f:65:e3:d7:64:a7:4e:53:
                    13:c9:ad:99:6b:f2:5a:24:89:39:72:15:57:15:03:
                    6e:ae:a6:83:6d:67:00:66:9a:66:6b:2f:fa:28:ec:
                    ed:f8:b6:01:cf:67:3f:4b:b0:d3:4d:17:64:3c:07:
                    fc:29:10:06:19:8e:f2:ae:23:79:66:14:66:4c:99:
                    c2:b9:be:53:d7:56:30:13:48:8d:9b:da:4c:bd:04:
                    c6:7f:9d:52:a0:73:87:35:24:83:12:5c:2f:95:d8:
                    4e:75:4d:f1:5a:6f:ac:89:3b:cc:11:3f:27:81:6e:
                    13:46:b2:9f:5d:71:84:53:a9:1c:75:bc:bd:53:d6:
                    63:03:f2:73:47:10:25:ba:b6:6e:32:26:fb:b4:54:
                    38:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:AC:1F:11:D4:35:26:4E:1A:06:22:E9:2A:9F:C4:27:35:44:2E
            X509v3 Authority Key Identifier:
                keyid:7E:83:B1:12:B0:60:9F:19:36:D5:49:0A:FA:6E:5A:7B:CF:12:68:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E83B112B0609F1936D5490AFA6E5A7BCF126856.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/01644DA79E5E92432C127E50604207B6676C0899F9BA42CE6033412803F56CCB/0/34352e3137352e3135362e302f32322d3234203d3e20323637383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:2f:ff:cf:b9:eb:9c:e4:64:77:cc:d2:8f:e4:57:69:95:
         6d:5f:59:77:ea:30:f1:34:cc:12:26:41:10:1b:6d:fb:fc:9d:
         47:13:3b:7b:3f:94:f4:1b:a5:ff:49:16:bc:3c:fa:38:28:41:
         71:1a:e0:19:de:90:be:ab:bf:a8:6e:11:a8:5b:6f:55:28:42:
         d5:88:88:02:11:5e:05:e1:fc:b8:2c:fa:8f:23:c9:61:28:27:
         97:c1:95:b5:af:5c:9b:49:df:7f:9d:88:3f:a8:75:f1:d0:bc:
         aa:6d:96:c1:81:06:f2:42:d4:70:26:e8:b7:0b:5a:52:8c:2a:
         4c:b0:c7:42:16:aa:48:99:36:33:35:a0:59:b8:59:3a:15:ef:
         04:0b:b2:16:c9:9c:9d:15:94:de:80:10:66:7c:10:1e:87:ad:
         0e:e2:b6:5d:76:68:e1:c0:33:94:4e:6c:28:3a:36:fb:2f:77:
         fd:d8:2c:fe:22:c2:67:ad:cc:8b:a3:ac:97:00:47:52:bc:ab:
         60:c0:09:bf:12:aa:f9:a7:7c:50:2e:e2:d1:c1:f7:67:73:ea:
         e2:6c:14:de:fa:1c:55:04:c0:96:ee:81:ba:5d:f7:a3:5c:9d:
         f5:59:bc:23:04:74:c4:70:48:80:cc:4e:d1:53:ea:18:74:92:
         52:f0:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 00:14:31 2024 by rpki-client on console-ams.rpki-client.org