Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/34352e3139302e36342e302f32322d3232203d3e2033323537.roa
File:                     34352e3139302e36342e302f32322d3232203d3e2033323537.roa (raw, json)
Hash identifier:          w9OL62dbjgi74m0JahcPstZ4bQrSyeluyfwyZpImSKU=
Subject key identifier:   94:37:84:13:8F:DD:84:97:BF:84:E7:44:75:F4:74:50:9A:F1:DF:28
Certificate issuer:       /CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
Certificate serial:       2AB034202B201A311F562B61DDA0FD091FD17DF8
Authority key identifier: AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/34352e3139302e36342e302f32322d3232203d3e2033323537.roa
Signing time:             Tue 05 Mar 2024 18:19:46 +0000
ROA not before:           Tue 05 Mar 2024 18:14:46 +0000
ROA not after:            Tue 04 Mar 2025 18:19:46 +0000
asID:                     3257
IP address blocks:        45.190.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b0:34:20:2b:20:1a:31:1f:56:2b:61:dd:a0:fd:09:1f:d1:7d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7F1EDD64F14628866EF03BA56A3C8D93914DB1
        Validity
            Not Before: Mar  5 18:14:46 2024 GMT
            Not After : Mar  4 18:19:46 2025 GMT
        Subject: CN=943784138FDD8497BF84E74475F474509AF1DF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:49:d9:61:06:81:82:d8:93:bf:79:5d:bd:
                    bb:00:e4:1d:ca:b9:85:5a:25:23:47:b5:d5:71:6c:
                    aa:2c:99:b6:2c:8d:04:df:4b:da:93:ef:5f:7f:f2:
                    98:3b:6a:46:89:86:d2:6b:5a:88:80:f7:8a:19:0c:
                    b7:0f:f6:43:53:46:39:40:2f:41:0c:b6:21:0d:a3:
                    f9:dc:7f:22:f9:67:d4:f6:c7:7a:8b:45:fa:ba:9e:
                    73:0f:d0:95:48:cb:4e:41:6c:28:8d:cc:97:3a:6a:
                    e6:fc:53:ac:0a:80:5a:4c:18:c0:82:cf:6b:04:d2:
                    30:8f:5f:13:d1:bb:13:27:64:71:04:a8:5b:4a:74:
                    19:d0:2f:ce:a5:35:5d:cc:03:8c:a3:4a:90:78:24:
                    3e:3f:61:34:de:26:20:d3:48:ba:f8:41:0d:b0:f5:
                    1b:79:2f:e8:0e:d7:6b:64:7b:26:31:25:fe:44:7d:
                    68:72:17:6c:c3:e6:1a:2b:e8:17:f8:09:28:75:1c:
                    7f:3c:4a:02:4c:01:80:33:b0:a5:cd:cf:18:3a:80:
                    d1:6e:d9:07:aa:64:d9:a5:1a:4e:d7:55:07:d5:67:
                    11:7b:26:3a:e9:f6:72:35:de:17:a3:6a:b7:7c:b6:
                    ef:42:65:83:fe:78:08:c7:05:d7:8a:1d:b1:28:73:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:37:84:13:8F:DD:84:97:BF:84:E7:44:75:F4:74:50:9A:F1:DF:28
            X509v3 Authority Key Identifier:
                keyid:AE:7F:1E:DD:64:F1:46:28:86:6E:F0:3B:A5:6A:3C:8D:93:91:4D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE7F1EDD64F14628866EF03BA56A3C8D93914DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22F8CC05A19CB928BF1FE1F53EC4FAEA8DCF5A1DB61D42BFD19733274EC96C78/0/34352e3139302e36342e302f32322d3232203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:bb:36:5d:1b:2a:4b:1b:11:0d:89:bb:11:a6:72:26:a4:8a:
         f6:99:67:4c:a7:ac:80:5e:b7:82:18:44:8b:d8:c3:ca:8a:04:
         c2:6e:82:2a:46:b1:6e:36:70:d2:04:6e:eb:a7:a0:9a:ee:e7:
         aa:f9:57:d0:82:1a:cb:18:71:66:2f:ef:32:e7:35:8f:6e:be:
         7f:ff:9a:d0:7a:b0:e4:c2:2e:e3:99:9a:bb:bd:12:40:50:8a:
         87:b9:75:b8:13:91:e7:1d:4d:26:95:f7:c9:7c:70:65:fa:f3:
         43:10:b9:e6:94:cc:a0:98:c6:46:9c:43:cc:ab:48:0b:3b:f0:
         65:b7:d6:41:0a:96:83:66:82:57:4a:52:9b:7b:8d:2a:b1:d0:
         99:51:3a:7b:9a:cb:ea:b9:47:32:a3:f0:1c:31:94:6c:cf:de:
         d3:e3:dc:b4:bb:da:5a:af:73:68:3a:2f:74:2b:d5:c9:d3:b6:
         70:d0:70:6b:2f:67:2f:c7:73:3a:64:2d:15:44:88:68:38:d6:
         5b:47:46:64:fd:9b:85:87:53:3e:8c:01:91:ff:25:ef:30:de:
         e4:c0:da:30:81:6b:f8:f9:9d:e7:51:aa:2e:d9:a8:5f:c1:93:
         cf:6c:12:41:66:0c:54:97:0b:71:51:53:37:06:03:6d:27:8d:
         15:5e:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org