Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa
File:                     34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa (raw, json)
Hash identifier:          RLRw2Bl4I9e/DL5GTXcT4ooGlJ841YCRAoXY/LOozaQ=
Subject key identifier:   8E:EE:48:AC:04:7B:D8:7F:30:16:36:D1:F1:AA:41:14:B2:81:C8:4E
Certificate issuer:       /CN=9A758BF09145BEC830A7EE000666C15B37354654
Certificate serial:       52CAC66DA0709CEDE38A78C0838B2774D8E0D72C
Authority key identifier: 9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa
Signing time:             Tue 05 Mar 2024 18:21:52 +0000
ROA not before:           Tue 05 Mar 2024 18:16:52 +0000
ROA not after:            Tue 04 Mar 2025 18:21:52 +0000
asID:                     270158
IP address blocks:        45.168.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:c6:6d:a0:70:9c:ed:e3:8a:78:c0:83:8b:27:74:d8:e0:d7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A758BF09145BEC830A7EE000666C15B37354654
        Validity
            Not Before: Mar  5 18:16:52 2024 GMT
            Not After : Mar  4 18:21:52 2025 GMT
        Subject: CN=8EEE48AC047BD87F301636D1F1AA4114B281C84E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:51:66:f6:b0:41:70:74:3a:c5:3c:17:1d:
                    d1:9f:0f:b5:15:48:64:d4:2e:95:84:2b:10:2e:11:
                    ca:22:a3:de:1f:b1:bd:2d:62:dd:b7:9e:ec:52:87:
                    5b:9f:43:57:32:85:03:f6:c1:06:35:ac:3b:06:20:
                    cc:7a:76:6e:f9:cb:7a:2e:2a:3b:69:3f:bf:3d:64:
                    44:c2:48:cf:61:22:be:e2:5c:c4:55:ec:d1:2e:ef:
                    11:86:fd:89:c9:d5:88:dc:d3:43:6b:9d:28:68:65:
                    19:7f:0f:c0:53:d9:92:5a:1a:60:f0:fa:c3:e6:9e:
                    4f:72:02:f9:9f:6e:cb:f0:23:a8:63:bf:64:b7:7e:
                    98:15:e6:d3:96:4a:86:ae:22:6f:e7:0e:2e:89:62:
                    2b:56:ac:9b:d9:2e:ac:a1:5d:40:34:30:11:3c:f4:
                    44:3f:8c:c3:81:46:99:cd:67:4f:c1:f8:f0:18:bc:
                    a8:79:04:ff:b2:40:d1:50:74:87:e8:14:b8:08:e7:
                    49:d1:21:65:a9:33:21:6f:83:e8:d7:18:33:3d:5e:
                    47:27:9b:3d:da:cb:f1:06:e8:48:e7:98:de:3c:a9:
                    fb:74:0b:39:d4:32:d1:a3:28:f7:18:06:e9:77:2e:
                    29:57:0a:b0:0f:61:61:4d:58:c8:68:90:4c:c4:cd:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EE:48:AC:04:7B:D8:7F:30:16:36:D1:F1:AA:41:14:B2:81:C8:4E
            X509v3 Authority Key Identifier:
                keyid:9A:75:8B:F0:91:45:BE:C8:30:A7:EE:00:06:66:C1:5B:37:35:46:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/9A758BF09145BEC830A7EE000666C15B37354654.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A758BF09145BEC830A7EE000666C15B37354654.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34613EE4AD25884516963E168FF68101D8ACA5D9B37354A534BAFDC76D437C2C/0/34352e3136382e3233362e302f32322d3234203d3e20323730313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:54:4b:bb:4f:fb:00:06:75:c5:00:3b:d4:b0:22:04:47:8b:
         80:2d:fb:8a:74:1c:d8:e9:e8:3e:4a:e1:dc:9c:ea:f5:7a:0f:
         b7:45:44:fe:a1:ba:94:98:98:c5:11:e1:d3:6b:df:c9:8a:19:
         83:26:c2:d9:0a:37:2c:4e:67:5d:7b:45:28:92:43:e7:5a:13:
         49:6f:82:0f:f9:c5:8f:50:45:a4:d8:be:1d:b3:21:3d:30:32:
         01:a2:af:58:ea:0f:8c:02:c9:b8:3a:28:db:04:26:8d:be:b3:
         c5:c0:76:8b:c7:ff:aa:46:1e:b3:5c:eb:a4:fb:99:3b:93:20:
         d5:71:7a:97:9c:46:b6:b6:95:c7:4b:1b:93:b0:f8:b0:aa:06:
         4e:c5:ab:0c:3f:60:8d:df:f5:42:a7:f2:6a:c4:28:c3:ad:0e:
         dc:f0:46:b7:f0:97:0b:9f:fd:c5:16:f0:43:3d:00:3e:00:44:
         c6:e1:ce:4c:ef:55:cb:76:c5:1e:7c:6b:e7:b8:77:ac:44:5b:
         29:e0:34:68:c0:11:d5:22:dc:d1:64:30:23:3d:ce:43:c1:f4:
         c0:ff:1f:af:d5:a0:1b:2b:1e:73:42:cd:47:1a:2d:ef:10:40:
         b7:78:cd:08:0d:eb:34:05:38:eb:76:cb:df:f4:b8:76:70:f3:
         de:25:1b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org