Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/34352e3136372e32302e302f32322d3234203d3e20323637373231.roa
File:                     34352e3136372e32302e302f32322d3234203d3e20323637373231.roa (raw, json)
Hash identifier:          +JCNSFz8ElqZ45+LdU0rreAEUBIckUT2MG450dcDLCw=
Subject key identifier:   83:61:99:86:66:07:0B:BD:31:6D:31:75:86:72:5F:07:23:BB:26:C1
Certificate issuer:       /CN=DEBD254C261020FC83563BF97624C24F76BB66F8
Certificate serial:       04E4BE77A62434AC860FCEB66F3BEA6A8E892BCF
Authority key identifier: DE:BD:25:4C:26:10:20:FC:83:56:3B:F9:76:24:C2:4F:76:BB:66:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEBD254C261020FC83563BF97624C24F76BB66F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/34352e3136372e32302e302f32322d3234203d3e20323637373231.roa
Signing time:             Tue 05 Mar 2024 17:59:35 +0000
ROA not before:           Tue 05 Mar 2024 17:54:35 +0000
ROA not after:            Tue 04 Mar 2025 17:59:35 +0000
asID:                     267721
IP address blocks:        45.167.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/DEBD254C261020FC83563BF97624C24F76BB66F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/DEBD254C261020FC83563BF97624C24F76BB66F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEBD254C261020FC83563BF97624C24F76BB66F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e4:be:77:a6:24:34:ac:86:0f:ce:b6:6f:3b:ea:6a:8e:89:2b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEBD254C261020FC83563BF97624C24F76BB66F8
        Validity
            Not Before: Mar  5 17:54:35 2024 GMT
            Not After : Mar  4 17:59:35 2025 GMT
        Subject: CN=8361998666070BBD316D317586725F0723BB26C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:77:86:b9:58:7e:5b:bb:30:0b:37:eb:62:
                    2a:71:30:b9:3f:7c:ad:bd:c1:2a:90:f2:40:68:66:
                    32:c1:e5:c7:fc:5f:07:c2:93:8f:87:28:89:6f:0b:
                    35:18:94:f6:17:ac:66:5d:18:18:58:1d:b3:aa:28:
                    bb:25:30:84:ea:08:3e:c0:8a:c4:c2:31:9c:8a:3e:
                    6a:86:8a:94:a0:da:76:7e:b2:dc:4d:56:32:11:ab:
                    c0:00:97:4f:bb:6a:15:e7:1c:b2:f5:2b:b2:80:32:
                    3f:b8:a4:f7:54:e4:db:f9:19:75:37:d3:5f:9a:0b:
                    d3:db:d3:a1:82:6c:c7:06:d8:d2:09:35:5f:1f:07:
                    ea:63:bf:31:81:0a:37:2f:cb:cb:61:cb:54:ac:be:
                    6e:c0:be:c9:15:c9:ce:74:00:13:47:6a:c5:8e:dd:
                    1a:5b:23:c5:14:6a:06:25:55:f4:9a:08:ce:2f:32:
                    b7:eb:3b:af:b3:09:0c:ad:37:5d:f7:01:72:cd:5b:
                    2a:96:47:0d:ad:6c:ce:6e:d0:b0:9e:74:10:a7:f2:
                    5d:42:d2:ea:c3:e4:e5:60:93:67:79:8a:34:a4:b7:
                    48:ba:cf:89:25:82:9c:f6:d6:a5:d6:68:10:89:58:
                    fa:d9:43:62:bb:e8:aa:16:82:a2:82:75:9b:92:2f:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:61:99:86:66:07:0B:BD:31:6D:31:75:86:72:5F:07:23:BB:26:C1
            X509v3 Authority Key Identifier:
                keyid:DE:BD:25:4C:26:10:20:FC:83:56:3B:F9:76:24:C2:4F:76:BB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/DEBD254C261020FC83563BF97624C24F76BB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DEBD254C261020FC83563BF97624C24F76BB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/078F81EB74FF716957A1F76367235C748196A93ECDB8BC2D9B3F71B443DF617D/0/34352e3136372e32302e302f32322d3234203d3e20323637373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:19:c5:78:02:8f:2e:2e:8c:14:c9:87:67:09:f2:5e:ea:b0:
         c3:1b:d8:15:4e:24:7e:a2:4a:74:3b:d3:87:3c:5f:b2:12:b1:
         2d:83:87:4f:1c:e7:68:ce:82:b4:80:a0:ac:5a:06:f8:3a:e7:
         a7:93:d6:b5:8c:96:47:18:0a:f7:45:da:30:e9:c2:f1:34:d1:
         a1:4c:3f:44:fe:72:c5:eb:13:ea:d9:c9:eb:bb:89:65:00:f3:
         81:82:97:b2:1a:15:68:d9:3f:35:e7:3b:fe:7a:79:21:7f:58:
         13:6c:41:33:b5:61:f1:bb:83:f4:1a:7e:21:cb:8a:d8:11:af:
         9c:9f:0e:8f:f0:df:29:f0:24:9a:c7:4c:b1:3c:ce:5c:de:61:
         67:56:48:7e:c1:e0:5f:12:59:30:75:8b:64:67:fc:22:aa:7c:
         39:8b:7d:86:1f:47:e1:dd:14:c3:9f:3b:ec:91:55:f6:45:b7:
         3b:0d:af:2b:6c:16:44:1c:92:bb:34:5d:30:98:47:da:90:e3:
         1c:cb:6d:6b:63:6c:67:1f:a9:f1:43:b0:23:6c:79:12:63:3a:
         eb:79:d1:ef:19:9d:91:76:dc:e5:86:03:77:9e:b2:51:8d:f6:
         67:6a:42:a9:4f:ad:b6:45:6e:ee:2a:63:7d:6c:15:75:da:6c:
         38:5a:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org