Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133332e302f32342d3234203d3e20313937393931.roa
File:                     34352e3137302e3133332e302f32342d3234203d3e20313937393931.roa (raw, json)
Hash identifier:          +Jl90s//dgsbLQFWU/E/dyqRhOv/VghufWlY4xfgEro=
Subject key identifier:   19:C8:BE:A5:C3:33:6B:46:80:C2:4C:9A:70:4F:D7:73:49:29:F2:84
Certificate issuer:       /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial:       59DF1E86C9E4723AC53F976DDAC39A2DF2F770FA
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133332e302f32342d3234203d3e20313937393931.roa
Signing time:             Tue 05 Mar 2024 18:08:10 +0000
ROA not before:           Tue 05 Mar 2024 18:03:10 +0000
ROA not after:            Tue 04 Mar 2025 18:08:10 +0000
asID:                     197991
IP address blocks:        45.170.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:df:1e:86:c9:e4:72:3a:c5:3f:97:6d:da:c3:9a:2d:f2:f7:70:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
        Validity
            Not Before: Mar  5 18:03:10 2024 GMT
            Not After : Mar  4 18:08:10 2025 GMT
        Subject: CN=19C8BEA5C3336B4680C24C9A704FD7734929F284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:7c:8d:14:89:aa:67:92:c2:d2:3f:ec:a5:
                    d9:af:01:4e:8b:28:b9:e2:22:9b:8e:ac:d7:fc:c7:
                    2d:bb:84:23:67:ef:ea:e7:55:94:12:a2:0e:4c:fe:
                    b4:f4:ba:53:35:8f:4c:f0:03:cb:27:9e:95:9c:ee:
                    20:48:a5:a1:27:54:c3:4c:0d:98:a2:4c:c8:fe:2f:
                    57:2a:62:c3:9a:20:7b:79:be:eb:cc:ea:29:b0:85:
                    ce:a9:0b:1a:1c:e8:11:e8:21:f3:fb:ce:72:44:64:
                    ef:07:d0:91:40:53:7e:06:f3:08:2b:db:c6:cd:04:
                    38:6a:d4:b6:35:c6:0e:13:46:d0:11:12:8b:31:ea:
                    0a:1d:e4:99:bc:65:b8:b3:f3:7a:de:d7:91:e0:cd:
                    98:1f:99:17:6c:08:65:0f:96:d2:5c:99:64:e5:ef:
                    25:01:b7:5e:72:4f:f5:27:e4:94:0f:f3:d8:26:41:
                    ff:cf:05:7f:32:02:4f:60:e0:63:dc:34:f0:57:a2:
                    59:92:38:fa:d1:a6:fe:a5:4e:ca:ee:be:fe:01:c3:
                    94:4a:80:d3:c9:ce:1a:41:06:c3:b7:e5:fa:50:81:
                    83:f5:76:c3:a0:a5:ba:fe:72:1b:85:fe:24:45:6a:
                    c7:ab:46:29:c7:32:dd:63:9b:b4:67:32:f8:b1:b0:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C8:BE:A5:C3:33:6B:46:80:C2:4C:9A:70:4F:D7:73:49:29:F2:84
            X509v3 Authority Key Identifier:
                keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/34352e3137302e3133332e302f32342d3234203d3e20313937393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:09:00:68:4b:dc:ce:64:0c:39:9d:74:cd:6d:13:55:2c:c1:
         46:5f:ab:88:5d:90:4b:a1:e4:d6:3a:f3:6e:04:fe:d3:a1:5b:
         ac:2a:ae:12:3d:d0:a4:73:20:fe:66:ed:d0:f4:5f:e8:9c:0c:
         41:29:e5:07:a5:74:12:8e:c8:02:f1:39:7b:41:37:a3:78:49:
         97:47:9f:1f:75:45:58:2a:8f:6f:c0:ce:fb:38:f7:49:e8:b9:
         a2:73:ed:e8:a4:c1:96:f5:93:36:2b:68:43:5d:52:ca:92:ad:
         66:05:c2:8f:59:51:e6:6a:ff:2e:b9:17:81:3a:91:05:f7:3d:
         95:04:db:77:2b:6c:74:4a:ef:4f:f6:ae:77:66:42:e0:da:98:
         5b:41:fd:c8:c5:fb:36:cc:86:cc:c8:85:26:07:0b:ed:8f:76:
         f8:8d:3b:a8:ec:d7:00:f0:c5:f1:99:4a:a1:d0:d4:f0:a0:8d:
         e0:b0:ec:54:3c:61:d8:ca:16:79:33:6a:71:31:6c:61:89:c5:
         96:0b:32:a3:28:1f:e1:56:6e:cd:f9:c2:c7:55:66:6f:33:7f:
         f8:e9:74:a1:97:b2:7a:e3:40:a5:3d:e4:ca:4b:ed:f5:35:be:
         a0:bd:48:2a:19:0a:ea:44:c6:3a:dc:48:91:52:dc:39:b1:2c:
         ff:8f:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org