Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/34352e3138382e3231362e302f32332d3233203d3e20323639383834.roa
File:                     34352e3138382e3231362e302f32332d3233203d3e20323639383834.roa (raw, json)
Hash identifier:          4tqgU2jgDRJPmgRB4fn/l89ObqzEDNb47uzdjlI5LuU=
Subject key identifier:   27:AA:80:B0:5A:89:F1:D3:27:48:14:23:7A:52:D4:1C:A0:82:C8:E2
Certificate issuer:       /CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F
Certificate serial:       6EF1310C4A5D34F096C063D3CF708AB18347ECA4
Authority key identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/34352e3138382e3231362e302f32332d3233203d3e20323639383834.roa
Signing time:             Tue 05 Mar 2024 17:42:46 +0000
ROA not before:           Tue 05 Mar 2024 17:37:46 +0000
ROA not after:            Tue 04 Mar 2025 17:42:46 +0000
asID:                     269884
IP address blocks:        45.188.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Oct 2024 15:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f1:31:0c:4a:5d:34:f0:96:c0:63:d3:cf:70:8a:b1:83:47:ec:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F
        Validity
            Not Before: Mar  5 17:37:46 2024 GMT
            Not After : Mar  4 17:42:46 2025 GMT
        Subject: CN=27AA80B05A89F1D3274814237A52D41CA082C8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:d0:4e:cc:ff:2b:ac:f5:09:79:c0:4c:fb:
                    c1:9b:81:98:38:67:62:a6:16:81:a1:2b:28:71:80:
                    ee:52:6b:c1:e6:5c:ad:de:67:c7:d4:34:b1:83:b9:
                    c8:6e:4a:49:a0:7f:14:76:09:1f:1e:47:a2:a7:64:
                    a6:2d:c9:2a:f0:8e:ad:be:43:28:1f:c4:5a:1f:7c:
                    4e:20:d8:49:1d:11:4f:2f:50:3b:a6:b8:3d:a1:22:
                    73:d9:17:d8:85:98:92:59:2f:cc:98:74:af:7e:f2:
                    fc:cd:75:08:a0:11:55:ac:cd:89:48:5d:22:c6:60:
                    5e:bc:f5:4a:15:38:d4:fd:29:47:01:ec:82:5a:ab:
                    c8:41:a4:09:6e:28:94:b4:22:73:9d:ee:3e:ca:86:
                    6c:f4:21:cb:0b:11:ed:df:fd:9e:f5:c5:31:eb:49:
                    ce:b0:34:9d:02:75:68:a3:4c:71:1c:03:c9:17:25:
                    22:00:f9:16:37:d1:84:16:e4:83:32:61:5d:b8:00:
                    b0:f1:a7:3f:4b:d7:88:80:d5:24:24:9c:03:98:34:
                    91:67:0d:7f:00:6f:43:a2:8a:70:b0:13:fc:3f:bd:
                    d8:53:0b:e2:63:0e:6d:fa:24:f6:1b:2e:29:e9:4d:
                    76:04:23:7c:4a:8a:d3:d2:22:4c:ec:fe:64:81:59:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:80:B0:5A:89:F1:D3:27:48:14:23:7A:52:D4:1C:A0:82:C8:E2
            X509v3 Authority Key Identifier:
                keyid:2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/34352e3138382e3231362e302f32332d3233203d3e20323639383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:61:fb:50:38:4f:f1:10:6a:63:52:4c:99:09:54:8b:2f:23:
         6e:25:47:e3:61:32:96:cf:49:76:88:04:a1:0d:57:82:2e:36:
         36:94:53:41:1c:58:ec:ef:cb:42:1b:e4:0b:58:ac:22:11:bb:
         eb:2c:2a:70:4b:9c:14:cc:18:c2:55:68:ed:75:39:5e:cf:76:
         2b:b9:f4:36:0a:9b:80:1f:bf:b1:8a:07:57:0c:85:6f:f3:be:
         85:61:04:11:aa:aa:e4:ce:d2:54:b1:64:76:50:8b:3f:e4:1e:
         5c:38:9c:d5:1e:f4:47:f4:88:ee:f4:af:3f:ce:9e:ed:7d:bc:
         07:75:9d:0f:0d:9b:0f:ae:f1:33:c8:f9:4d:df:4d:e3:29:98:
         71:88:d9:ed:86:48:07:e6:e6:f5:3d:9c:1f:98:50:1e:e3:cb:
         cc:3a:ca:b2:f6:0a:b3:12:c9:5a:76:1b:34:95:05:ed:ee:58:
         3f:63:fe:bb:44:dc:fc:bd:96:5c:dc:dc:59:86:79:5e:60:68:
         de:12:28:61:42:30:dd:c4:55:66:14:cf:6a:03:23:66:54:7e:
         2a:24:8d:79:52:3f:bd:b5:1b:7d:52:9a:56:15:1a:38:9e:e4:
         55:d8:c4:24:82:10:be:3d:1a:0a:46:f3:3c:de:aa:1a:4c:eb:
         03:92:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 12:14:30 2024 by rpki-client on console-ams.rpki-client.org