Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/34352e3137332e36382e302f32322d3234203d3e20323637383037.roa
File:                     34352e3137332e36382e302f32322d3234203d3e20323637383037.roa (raw, json)
Hash identifier:          AEvsyGVxhKX75MzFDcYrF6KFq1kBHv6JaW0q5CKehHw=
Subject key identifier:   E8:23:8C:2C:49:A0:9D:87:9A:D4:60:DD:EC:65:43:5E:6E:DC:4A:FD
Certificate issuer:       /CN=A2B7697124E3E04C84077E519A3633A382D4378C
Certificate serial:       7DFF7F9586368F611E43426C5BA0FD7AB75D87F1
Authority key identifier: A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/34352e3137332e36382e302f32322d3234203d3e20323637383037.roa
Signing time:             Thu 19 Sep 2024 00:45:00 +0000
ROA not before:           Thu 19 Sep 2024 00:40:00 +0000
ROA not after:            Thu 18 Sep 2025 00:45:00 +0000
asID:                     267807
IP address blocks:        45.173.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ff:7f:95:86:36:8f:61:1e:43:42:6c:5b:a0:fd:7a:b7:5d:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2B7697124E3E04C84077E519A3633A382D4378C
        Validity
            Not Before: Sep 19 00:40:00 2024 GMT
            Not After : Sep 18 00:45:00 2025 GMT
        Subject: CN=E8238C2C49A09D879AD460DDEC65435E6EDC4AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:fc:fa:c2:47:db:bd:97:45:ad:ab:0b:a6:
                    a3:5b:24:9d:96:51:37:7c:c6:88:96:2b:50:6f:2f:
                    65:2f:00:bf:c3:47:34:b8:fc:37:03:ae:49:85:cc:
                    31:d1:b0:57:93:f5:a0:0e:86:53:bb:e0:37:b1:01:
                    08:f2:9d:54:c6:f8:65:c0:a8:a4:4b:8d:cb:cf:cf:
                    c9:e2:00:cb:92:b5:42:4e:9d:65:c3:2e:36:aa:0f:
                    3a:dc:19:a9:60:b7:29:ca:99:75:b7:03:e2:8d:10:
                    c5:2a:31:61:88:14:0a:d9:2e:6b:74:b0:2c:a0:be:
                    f1:5f:23:48:a4:88:9a:e7:9f:88:82:11:33:69:30:
                    a1:7d:a1:fc:e5:06:c0:19:da:f2:41:2f:13:63:47:
                    36:46:90:45:ba:96:78:c8:3c:9c:54:ea:1e:f9:64:
                    f2:58:cc:11:60:a8:2d:c4:e5:47:cd:4e:9d:43:18:
                    be:c9:f6:9d:87:ca:de:fa:6b:22:7a:0d:33:84:85:
                    9f:b7:09:78:01:2f:ff:dc:15:75:5b:96:e9:c9:ee:
                    cd:73:79:63:ec:89:95:84:26:42:7f:b1:76:34:d3:
                    48:b2:eb:00:47:6f:30:57:55:88:aa:85:f4:73:a0:
                    2a:2b:04:4a:3f:a9:7f:c0:6a:e1:e9:f7:53:69:f1:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:23:8C:2C:49:A0:9D:87:9A:D4:60:DD:EC:65:43:5E:6E:DC:4A:FD
            X509v3 Authority Key Identifier:
                keyid:A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/34352e3137332e36382e302f32322d3234203d3e20323637383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:eb:cd:4e:49:f8:b7:5d:33:fb:4d:11:99:40:23:b9:a1:
         9f:cc:51:fb:f9:18:ca:5f:18:d0:e8:6c:80:3a:48:0e:82:a9:
         17:d7:39:27:fe:08:e8:73:d8:0e:65:6b:73:67:ff:7c:46:b4:
         c1:2a:16:07:35:75:2b:bb:1b:d3:af:ce:10:06:90:fa:55:dd:
         d3:1b:b8:d2:b5:2f:87:ff:aa:72:55:c7:a0:d9:08:1d:5f:2c:
         5f:df:24:19:a0:d6:a6:c4:9a:17:f6:ba:12:5a:07:2e:d9:b4:
         38:d1:9b:14:68:5f:0b:40:9b:f5:53:7b:68:03:d2:04:38:bc:
         e1:65:3b:2a:ea:5c:eb:14:8e:2e:3e:95:0c:d1:10:30:d7:a8:
         90:70:98:05:da:e1:83:17:98:ee:48:b7:c1:d3:31:87:27:56:
         c8:f7:36:34:27:c8:7d:75:1c:34:e7:dc:c6:10:4e:97:8b:45:
         90:40:5f:04:60:34:62:f9:39:da:e0:ca:5d:c7:84:39:d6:e2:
         9b:9b:c8:fc:46:18:fd:13:c9:41:e6:47:6f:74:69:b6:35:7a:
         48:ca:26:e2:56:23:5b:59:73:3d:8d:c3:e9:7b:20:cd:a0:23:
         d4:09:5f:1c:15:c0:42:64:05:80:91:87:4e:0c:8f:29:7d:ed:
         df:98:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org