Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135322e302f32322d3232203d3e20323639383138.roa
File:                     34352e3138342e3135322e302f32322d3232203d3e20323639383138.roa (raw, json)
Hash identifier:          +Pqxu2B9SLLTO962WPy+s4nLjnL5ldfE9DwmPXD5yGM=
Subject key identifier:   59:62:CA:81:DF:CA:41:1D:1F:E5:D3:C4:50:BB:98:AD:25:DC:59:53
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       6910BA7C84CF33B920E4D4B39565D056B86E3BDB
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135322e302f32322d3232203d3e20323639383138.roa
Signing time:             Tue 05 Mar 2024 17:54:25 +0000
ROA not before:           Tue 05 Mar 2024 17:49:25 +0000
ROA not after:            Tue 04 Mar 2025 17:54:25 +0000
asID:                     269818
IP address blocks:        45.184.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:10:ba:7c:84:cf:33:b9:20:e4:d4:b3:95:65:d0:56:b8:6e:3b:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Mar  5 17:49:25 2024 GMT
            Not After : Mar  4 17:54:25 2025 GMT
        Subject: CN=5962CA81DFCA411D1FE5D3C450BB98AD25DC5953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:e0:8e:e4:c6:0d:eb:8f:0e:62:1a:0a:83:
                    f1:fc:a3:ec:49:df:dc:3d:75:4b:0d:cb:e5:a6:9c:
                    46:bf:c4:39:f6:6e:9a:b9:da:a9:72:20:1c:c2:e7:
                    76:20:6a:b4:f7:79:da:22:bf:71:4f:8f:2d:b7:0e:
                    d7:da:66:90:6b:35:31:32:0a:7e:33:19:08:24:59:
                    f6:f2:2e:cf:10:eb:e0:2e:54:9e:ff:02:27:ed:a3:
                    45:4d:f1:48:e8:71:a4:6e:ee:38:90:d5:b7:1b:6a:
                    b3:9e:eb:04:4a:6f:c9:7e:59:9a:15:b6:46:38:44:
                    48:45:1c:45:28:52:1c:0b:0e:7b:2a:a8:e1:7d:83:
                    7c:a4:e9:43:74:ad:fe:e6:a9:4c:e0:40:93:eb:46:
                    6e:07:2a:25:fb:a5:f1:80:46:82:45:4f:30:5f:b9:
                    45:f6:4e:61:01:59:32:80:ba:90:2d:5f:5e:c1:54:
                    0f:49:8a:99:90:44:95:fc:98:ed:98:ab:d3:ee:94:
                    ee:95:77:7e:71:07:ea:11:4e:91:f7:04:b2:a6:ea:
                    6f:57:6e:fa:da:29:13:04:f9:73:6f:6a:a7:9f:e1:
                    17:98:6b:26:0d:38:67:29:70:de:c5:a4:11:aa:5e:
                    b7:15:3b:65:da:9b:bd:36:01:8d:6d:b6:ac:41:ef:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:62:CA:81:DF:CA:41:1D:1F:E5:D3:C4:50:BB:98:AD:25:DC:59:53
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135322e302f32322d3232203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:18:7e:d3:5a:2a:95:cb:21:85:b9:23:c5:b1:2c:94:da:8e:
         cc:d8:25:0e:ea:ce:cd:0b:39:98:71:74:36:55:a0:af:34:c5:
         22:2d:28:ce:25:5c:d5:0c:0f:81:a7:09:09:2c:68:9c:bc:2e:
         98:e2:59:15:14:3d:a9:9f:24:8b:7c:98:f7:1a:25:2c:d0:7c:
         0a:97:6e:3d:40:38:23:e7:47:01:e8:76:b6:cc:70:f1:65:b0:
         51:47:3c:80:83:b4:6a:03:1d:6f:8b:65:23:2e:51:91:5b:27:
         e6:27:a3:2b:3f:91:b6:72:b2:7f:18:6a:3d:ce:66:2a:6c:86:
         94:3b:52:4f:26:14:6a:57:03:e6:92:64:d2:70:78:9d:47:9e:
         a1:d8:b4:2f:ec:17:28:bb:d8:e8:c6:47:db:fe:ec:91:b1:8a:
         3f:05:a2:2c:37:58:2a:c5:14:2d:b3:2f:aa:2f:31:32:e8:48:
         a6:b2:7f:28:49:ff:83:58:37:45:bf:0b:b1:bc:6f:7a:d4:86:
         78:f0:35:92:44:df:d1:76:1d:2d:53:70:64:40:78:ad:59:16:
         bc:64:44:a4:ae:b5:fc:28:c9:1b:f5:79:c0:4a:4e:a1:3d:f3:
         f7:20:58:d7:64:d9:fa:8a:fc:de:19:c0:35:b9:7f:0f:7b:6a:
         89:d5:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org