Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3232203d3e20323639373539.roa
File:                     34352e3138332e35322e302f32322d3232203d3e20323639373539.roa (raw, json)
Hash identifier:          UGVa9NvzSHPruywn8nm9g3mlV7DaV5AtyOuSwDHOek4=
Subject key identifier:   8F:EF:F6:91:94:B5:14:3B:F1:00:24:D7:40:AF:08:2F:A0:1A:47:7B
Certificate issuer:       /CN=FD653B1E827221FC7B80694271984B30114955E0
Certificate serial:       668578C023F7C62927AA22D534400916B3821342
Authority key identifier: FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3232203d3e20323639373539.roa
Signing time:             Tue 05 Mar 2024 17:44:10 +0000
ROA not before:           Tue 05 Mar 2024 17:39:10 +0000
ROA not after:            Tue 04 Mar 2025 17:44:10 +0000
asID:                     269759
IP address blocks:        45.183.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:85:78:c0:23:f7:c6:29:27:aa:22:d5:34:40:09:16:b3:82:13:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD653B1E827221FC7B80694271984B30114955E0
        Validity
            Not Before: Mar  5 17:39:10 2024 GMT
            Not After : Mar  4 17:44:10 2025 GMT
        Subject: CN=8FEFF69194B5143BF10024D740AF082FA01A477B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:30:29:09:76:b9:2d:eb:6b:bd:ec:17:8c:0b:
                    7a:5f:a8:d6:a5:4e:1a:4b:39:cf:57:41:d4:e8:0f:
                    9d:60:cd:42:96:7a:89:6d:e0:fa:e7:bc:76:0a:e6:
                    b3:92:b3:75:f5:24:30:70:74:bc:88:71:93:68:3c:
                    c8:4d:8e:30:f2:20:89:cf:e1:81:bd:56:41:c7:cb:
                    1a:c2:08:0d:a1:25:cf:9f:35:5c:07:18:39:fb:33:
                    6d:97:6e:97:82:b7:b9:29:da:fe:a9:8a:37:47:cb:
                    c0:48:bd:9c:7d:45:04:ea:68:d8:9d:1c:da:65:9e:
                    7d:fa:d7:26:66:9f:10:87:0e:71:eb:8e:ac:4d:39:
                    48:0d:28:1b:67:3e:fb:6e:e5:8d:60:e6:a0:1e:8a:
                    ae:b0:e0:0b:a5:33:71:57:2d:ad:1a:f7:e2:21:54:
                    15:27:d6:3c:2c:98:a8:ca:a7:f1:ae:6e:c1:64:20:
                    cd:ae:65:88:92:ae:9f:bb:61:ad:07:6f:42:61:0c:
                    b1:d2:a8:05:b9:e8:22:e7:ba:aa:2d:8b:fc:8d:a8:
                    62:99:6a:cb:ec:6c:48:c3:c0:06:ea:90:64:2c:fa:
                    04:28:60:7d:b6:48:ac:c3:c3:d8:18:87:92:81:41:
                    cb:5b:32:c4:91:68:a5:c4:d6:21:74:9b:41:44:7e:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EF:F6:91:94:B5:14:3B:F1:00:24:D7:40:AF:08:2F:A0:1A:47:7B
            X509v3 Authority Key Identifier:
                keyid:FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/34352e3138332e35322e302f32322d3232203d3e20323639373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:cc:7c:5f:39:43:52:86:2a:f2:3f:fa:ca:5c:b7:ab:fa:
         59:bf:31:3e:7d:23:18:01:bc:9f:e8:e4:e8:37:45:87:90:ae:
         3f:0a:10:64:15:ec:7b:29:f7:7b:99:21:58:ad:0c:b6:c6:a2:
         36:e6:9d:e0:25:60:d6:ca:35:6b:ed:9e:92:b7:7c:00:52:bd:
         b0:fe:92:e4:c5:39:ee:5c:37:da:a5:b1:9c:af:e0:0c:e4:32:
         d9:fd:46:30:7c:be:84:c1:f3:a1:b0:8e:b1:87:b4:b6:8f:26:
         d0:f4:92:e7:13:dc:fb:ec:6a:3e:12:72:f8:02:80:ff:5f:3e:
         0f:9f:75:e6:f8:c9:f0:6c:df:c5:71:1d:b9:90:06:99:dd:47:
         76:c0:ce:69:ef:92:a9:4b:1f:a2:e9:dc:ff:bf:fb:2d:12:d6:
         5a:ed:b2:b2:60:a9:a4:1d:01:8f:db:08:df:d9:ce:fd:98:a8:
         f0:aa:ae:19:d0:37:c8:ea:c4:10:f8:f5:23:1c:fe:d4:2c:82:
         c2:97:7f:17:86:b1:f4:ab:db:31:db:b4:2a:1c:26:f1:55:15:
         55:60:75:14:b7:46:1e:58:a5:c7:9c:d9:7b:78:c1:1b:6e:1d:
         5e:55:91:11:0f:df:90:37:dd:b6:0f:09:40:69:71:ea:d4:d9:
         ba:23:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:21:57 2024 by rpki-client on console-ams.rpki-client.org