Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa
File:                     34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa (raw, json)
Hash identifier:          DwCFQk8b7m4F/Qn0KDa7zkJY/iDijTNzvNjhe5D8dy0=
Subject key identifier:   3E:93:17:68:A0:7A:FB:05:85:49:46:ED:29:15:A2:EB:59:AF:73:53
Certificate issuer:       /CN=9644ECC99A7803741A541FDFD8422B9726740EA2
Certificate serial:       5ED5F0195D570B7C2468DC33F51BAA1D2CD8DD7C
Authority key identifier: 96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa
Signing time:             Tue 05 Mar 2024 18:19:25 +0000
ROA not before:           Tue 05 Mar 2024 18:14:25 +0000
ROA not after:            Tue 04 Mar 2025 18:19:25 +0000
asID:                     267801
IP address blocks:        45.172.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d5:f0:19:5d:57:0b:7c:24:68:dc:33:f5:1b:aa:1d:2c:d8:dd:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9644ECC99A7803741A541FDFD8422B9726740EA2
        Validity
            Not Before: Mar  5 18:14:25 2024 GMT
            Not After : Mar  4 18:19:25 2025 GMT
        Subject: CN=3E931768A07AFB05854946ED2915A2EB59AF7353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:85:49:04:78:2e:a2:c3:73:8e:d7:03:4e:
                    a2:56:4d:32:cb:2b:67:bd:06:93:29:68:e0:c0:2e:
                    d2:73:7a:17:45:4d:ca:21:31:ec:d8:88:be:30:06:
                    d9:81:b3:0f:e8:02:9b:0f:d8:b9:1c:0e:36:f3:be:
                    7c:f3:c0:3b:61:f9:d7:5c:5d:05:44:83:3f:c0:13:
                    ce:f6:87:a1:e5:18:49:1f:60:95:55:a2:bb:f1:05:
                    04:bc:f4:90:76:0c:4c:a0:9a:ba:b3:8c:90:64:04:
                    a7:9b:05:36:90:d5:8d:a1:d8:4c:c6:ce:c1:92:db:
                    b5:f8:fa:19:e3:0a:0d:9c:77:96:8e:c1:e1:70:32:
                    53:aa:c1:ff:26:20:f4:60:19:b7:5d:49:0c:2f:6b:
                    62:10:89:73:78:a9:69:22:e1:61:00:1c:dc:ae:52:
                    08:61:ff:e4:6c:a5:25:c1:c3:ad:75:d4:06:f4:0d:
                    cb:43:31:b2:aa:ac:b8:c5:ec:81:bc:8d:d5:99:7b:
                    35:22:05:be:4e:3b:96:7e:87:8d:66:2d:89:f1:fa:
                    32:97:91:a6:18:43:ef:0f:62:9e:e6:2d:0f:c3:ab:
                    46:ee:75:13:ed:f4:d0:77:be:c4:8f:6d:97:21:2e:
                    2c:85:95:56:5f:c2:48:11:b2:a2:bf:63:6c:ec:d2:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:93:17:68:A0:7A:FB:05:85:49:46:ED:29:15:A2:EB:59:AF:73:53
            X509v3 Authority Key Identifier:
                keyid:96:44:EC:C9:9A:78:03:74:1A:54:1F:DF:D8:42:2B:97:26:74:0E:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/9644ECC99A7803741A541FDFD8422B9726740EA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9644ECC99A7803741A541FDFD8422B9726740EA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B72C2E2734C3B7F8166431C77CF306339BF9C2875CE02AE51EF815FA4E61339/0/34352e3137322e3234382e302f32322d3232203d3e20323637383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:d1:e2:ce:85:50:73:45:a3:08:39:fd:4c:11:46:0e:d0:b4:
         b8:65:f0:80:43:92:65:b2:96:c1:37:83:fe:4e:fc:2c:ef:a2:
         61:78:99:3b:53:81:fc:ce:bf:6d:c7:c9:76:d3:92:70:fa:04:
         0a:a8:c9:39:2b:e0:3c:ad:e3:02:73:b8:e7:0f:b3:c5:90:58:
         07:78:fe:42:c0:e1:93:e8:a9:7d:1c:00:35:ae:76:98:c1:e3:
         10:e9:e1:27:71:17:ac:8e:40:91:6e:67:87:3f:e7:87:f3:d6:
         62:3b:bd:b4:83:42:f1:92:9b:1e:46:2e:d8:0a:30:59:65:a1:
         b5:9d:79:2d:71:95:f8:cc:0c:2a:57:c6:fa:fe:5b:bf:5e:c8:
         fd:de:24:35:e2:3c:ec:67:df:d5:06:c8:a4:92:95:6d:73:27:
         2d:32:14:cb:ea:bf:4b:26:6d:32:0c:11:3d:99:81:1c:47:b4:
         dd:40:b5:8f:4e:fd:40:86:cf:e0:32:87:62:27:6e:d1:07:ca:
         3d:1c:7b:aa:81:1c:5d:68:0f:d5:16:21:7e:74:3f:40:c6:22:
         44:89:b5:a6:30:39:d4:24:81:46:1a:9f:95:2c:e8:f6:0d:02:
         88:43:b9:11:93:ee:a4:74:ee:d1:e3:25:23:4b:65:73:76:06:
         a9:66:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org