Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/201ECE62574759D0961E4EECB7EEC8C82BAD7221847C1551D7A24F1EBC16A812/0/34352e3137362e38382e302f32322d3234203d3e20323637383634.roa
File:                     34352e3137362e38382e302f32322d3234203d3e20323637383634.roa (raw, json)
Hash identifier:          xlf5CiOz2pFa0Dg0AeT9edchQ9YDQKgdakCu2q4jkU8=
Subject key identifier:   87:EE:8A:E0:0F:02:53:4B:4E:32:7E:1C:A3:4B:E1:F6:D2:99:79:C1
Certificate issuer:       /CN=A81AF282C100A0D47FECB9B9CC0C2A45B87087B3
Certificate serial:       5DA01C0D300DC022B08AEDA8C716877DAE0DF99F
Authority key identifier: A8:1A:F2:82:C1:00:A0:D4:7F:EC:B9:B9:CC:0C:2A:45:B8:70:87:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A81AF282C100A0D47FECB9B9CC0C2A45B87087B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/201ECE62574759D0961E4EECB7EEC8C82BAD7221847C1551D7A24F1EBC16A812/0/34352e3137362e38382e302f32322d3234203d3e20323637383634.roa
Signing time:             Tue 05 Mar 2024 17:46:34 +0000
ROA not before:           Tue 05 Mar 2024 17:41:34 +0000
ROA not after:            Tue 04 Mar 2025 17:46:34 +0000
asID:                     267864
IP address blocks:        45.176.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/201ECE62574759D0961E4EECB7EEC8C82BAD7221847C1551D7A24F1EBC16A812/0/A81AF282C100A0D47FECB9B9CC0C2A45B87087B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/201ECE62574759D0961E4EECB7EEC8C82BAD7221847C1551D7A24F1EBC16A812/0/A81AF282C100A0D47FECB9B9CC0C2A45B87087B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A81AF282C100A0D47FECB9B9CC0C2A45B87087B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a0:1c:0d:30:0d:c0:22:b0:8a:ed:a8:c7:16:87:7d:ae:0d:f9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A81AF282C100A0D47FECB9B9CC0C2A45B87087B3
        Validity
            Not Before: Mar  5 17:41:34 2024 GMT
            Not After : Mar  4 17:46:34 2025 GMT
        Subject: CN=87EE8AE00F02534B4E327E1CA34BE1F6D29979C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:c2:cb:25:27:e7:ac:2d:4f:6e:55:e1:95:
                    9e:3b:00:21:7d:ed:2c:82:a8:f0:68:6f:a8:c0:11:
                    ee:b5:57:bb:d9:57:8a:a0:38:66:4f:72:39:b6:c6:
                    22:84:ae:7f:28:f8:84:2c:c0:63:47:a8:ae:29:84:
                    80:0e:89:03:69:a5:04:66:18:90:1d:d6:0c:42:a8:
                    a6:e6:12:c7:8f:5d:5b:b8:b6:39:3d:2c:a9:2b:b7:
                    10:c8:7d:b0:03:42:50:b3:45:8b:e1:3b:82:4b:06:
                    bb:38:1d:a8:28:2e:03:4b:da:ea:b0:e0:2d:3e:d7:
                    4f:fd:fb:05:c0:7b:02:02:7a:5f:c6:06:f1:bd:5a:
                    17:d0:95:9f:4d:ff:58:53:46:f1:ce:2a:21:13:8d:
                    2e:e3:c8:c9:db:fb:fa:c7:cc:7b:f6:a9:34:b9:47:
                    2d:59:f7:c3:57:ec:2e:f9:14:e0:7e:28:9d:e2:f4:
                    7c:cc:2b:2d:20:fa:d0:49:a7:a6:c0:4c:37:57:f0:
                    01:72:de:ff:40:8f:a4:48:ad:9c:cd:6f:8f:08:63:
                    52:66:b4:74:29:9d:78:6f:ac:f7:4d:a1:14:12:09:
                    bd:27:b3:34:d4:09:0c:41:f4:7b:38:89:e0:d5:86:
                    f3:14:91:d3:c7:bb:57:6d:17:5e:e3:a6:8b:b5:cf:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EE:8A:E0:0F:02:53:4B:4E:32:7E:1C:A3:4B:E1:F6:D2:99:79:C1
            X509v3 Authority Key Identifier:
                keyid:A8:1A:F2:82:C1:00:A0:D4:7F:EC:B9:B9:CC:0C:2A:45:B8:70:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/201ECE62574759D0961E4EECB7EEC8C82BAD7221847C1551D7A24F1EBC16A812/0/A81AF282C100A0D47FECB9B9CC0C2A45B87087B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A81AF282C100A0D47FECB9B9CC0C2A45B87087B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/201ECE62574759D0961E4EECB7EEC8C82BAD7221847C1551D7A24F1EBC16A812/0/34352e3137362e38382e302f32322d3234203d3e20323637383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:71:61:89:d2:6f:f4:9a:41:33:82:33:10:b9:d6:7f:fe:
         58:5d:54:0a:c7:89:1e:37:46:04:d7:c4:16:f4:3b:60:96:45:
         d4:d5:1f:4f:09:60:9a:a1:32:c1:2b:f9:2d:ef:95:0e:fb:0f:
         c3:bd:d1:cb:02:3c:69:27:d0:9b:7c:f3:58:4c:79:13:1b:b5:
         dd:e7:79:88:97:23:59:c3:0f:54:7e:d1:ce:9c:97:78:3a:ae:
         db:17:2c:80:fc:e7:0a:9b:32:6d:ba:9b:6f:64:a3:3b:fd:b7:
         43:d1:52:f3:62:a4:23:1d:af:45:dc:31:c7:22:be:75:e3:63:
         88:23:1d:d8:18:1d:2b:9a:bb:3c:a4:7c:57:88:06:58:a1:ee:
         3b:55:a9:c3:1b:10:ff:14:ed:ae:3d:20:df:e1:cb:35:cb:dd:
         75:29:8d:c5:29:4d:f8:a1:70:e9:96:ae:02:9d:9a:e0:74:da:
         bd:d2:3d:f7:f6:94:16:d1:c4:30:da:05:10:35:a8:49:2e:a9:
         4b:13:8d:6f:71:e9:0c:a8:c6:25:21:8b:9b:5a:92:df:51:e4:
         8f:c9:6d:6b:d2:ac:7f:59:bb:c3:cb:93:09:02:45:28:21:7e:
         05:9c:1d:c1:6f:60:fb:52:43:6e:30:b5:3f:bf:a3:ea:92:f5:
         54:fa:ad:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:25:22 2024 by rpki-client on console-ams.rpki-client.org