Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa
File:                     34352e3137362e382e302f32322d3234203d3e20323637383536.roa (raw, json)
Hash identifier:          OgPMaWoL4VUqdLtdPhgdSbB/Tij44NnDvaC9y1XWbok=
Subject key identifier:   71:0C:2A:DD:A8:8D:C4:72:BC:66:78:B9:8E:81:6E:FD:44:3C:C2:69
Certificate issuer:       /CN=CE3BBF6B4D984809B9AFC5EDCC482CBD16497274
Certificate serial:       6F46BB586B4ADA686E0ACFFC0D66D9ED8C543C17
Authority key identifier: CE:3B:BF:6B:4D:98:48:09:B9:AF:C5:ED:CC:48:2C:BD:16:49:72:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa
Signing time:             Tue 05 Mar 2024 18:21:41 +0000
ROA not before:           Tue 05 Mar 2024 18:16:41 +0000
ROA not after:            Tue 04 Mar 2025 18:21:41 +0000
asID:                     267856
IP address blocks:        45.176.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.crl
                          rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:46:bb:58:6b:4a:da:68:6e:0a:cf:fc:0d:66:d9:ed:8c:54:3c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE3BBF6B4D984809B9AFC5EDCC482CBD16497274
        Validity
            Not Before: Mar  5 18:16:41 2024 GMT
            Not After : Mar  4 18:21:41 2025 GMT
        Subject: CN=710C2ADDA88DC472BC6678B98E816EFD443CC269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:48:1d:45:2a:ac:1d:e4:ad:83:56:c1:0b:
                    f8:db:14:79:6a:52:07:60:25:f0:82:95:bd:e0:2a:
                    b4:b5:82:23:4f:b0:ea:a0:35:88:9e:43:84:3c:97:
                    d2:f6:12:9a:be:5b:c3:5a:71:30:09:5a:41:d3:6c:
                    11:c6:37:7c:ed:fb:87:06:7b:fd:f8:d2:af:13:2b:
                    d3:8c:50:53:88:9d:b9:89:33:a2:90:9b:df:e7:0d:
                    ef:bc:95:a2:ab:30:a7:40:d9:94:dd:32:21:82:83:
                    f7:03:24:3e:fb:9e:de:69:5c:0c:90:dd:8e:27:4b:
                    5a:5d:a7:f4:50:c7:35:ec:da:9e:46:2f:8a:ea:7b:
                    84:46:cd:ec:c8:39:90:98:22:2a:13:aa:a0:dc:b7:
                    f5:1e:45:8a:ad:8a:af:ec:d6:21:4c:57:d5:75:10:
                    b8:40:9f:32:08:00:b9:3f:ad:ee:ef:5e:51:cd:4c:
                    12:95:ec:cd:32:3f:fd:5b:db:57:59:a6:46:c8:b0:
                    cc:b3:40:a8:d1:e4:20:1c:c4:f4:79:37:3c:9b:11:
                    dd:e3:8b:2d:90:91:80:30:89:36:44:81:c6:3c:47:
                    1d:b5:e7:23:39:29:9a:47:27:a3:75:3c:9b:ca:42:
                    89:74:5f:37:0d:e8:ae:4d:5c:ac:2f:10:5e:d0:05:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0C:2A:DD:A8:8D:C4:72:BC:66:78:B9:8E:81:6E:FD:44:3C:C2:69
            X509v3 Authority Key Identifier:
                keyid:CE:3B:BF:6B:4D:98:48:09:B9:AF:C5:ED:CC:48:2C:BD:16:49:72:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE3BBF6B4D984809B9AFC5EDCC482CBD16497274.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/19514CA84FFEC9DA13A8A037FEFC4859E1D036EAD3654DE3C51F47DEE1B900FE/0/34352e3137362e382e302f32322d3234203d3e20323637383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:05:9f:70:6e:b1:eb:8b:8b:59:72:53:43:ab:31:04:8a:0a:
         ad:02:82:42:90:1c:ed:79:79:fe:0f:90:d1:b5:96:9c:34:c4:
         b7:5c:8c:f6:2a:1b:1e:4b:f3:38:b1:b7:33:c4:9c:b7:3b:26:
         01:74:ba:8c:f3:71:bf:a6:40:95:1b:3a:62:87:23:51:a6:68:
         cc:41:75:fb:ec:25:c3:c4:a8:4d:57:dd:d1:28:02:b0:4b:7a:
         5f:61:bd:ad:bb:f8:cb:56:35:7d:20:6d:9c:7c:ed:50:84:5e:
         2c:33:ac:b0:70:2b:7e:ab:58:2c:1e:d6:cf:00:f3:b4:20:60:
         d8:2e:87:68:8a:f2:84:c3:05:6e:6e:a8:f4:c9:ea:81:37:7f:
         44:29:6b:c5:13:cc:cd:a7:20:57:ac:23:d1:8d:3a:c8:f0:a4:
         33:80:b4:c7:f2:25:e4:ac:17:57:f7:4c:9c:95:8a:7c:ef:f1:
         b6:7f:8b:37:7b:62:64:bc:51:37:57:ad:46:89:8f:9f:92:53:
         34:e0:0d:c1:be:ef:7d:2c:6e:42:41:55:eb:8c:0f:d3:35:b2:
         91:18:75:45:87:b3:74:38:0a:4a:5d:06:da:bf:5e:21:c5:ae:
         1d:03:5e:5f:f7:bc:a1:01:cb:3a:85:43:5f:4e:e2:2d:5c:e4:
         ae:77:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:23:25 2024 by rpki-client on console-ams.rpki-client.org