Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa
File:                     34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa (raw, json)
Hash identifier:          J23zVO2be50DNC1PIt1oz1F1T3EIVHltc7O+fESx+S8=
Subject key identifier:   5A:89:AD:15:43:83:DD:96:F9:F6:8A:F9:DC:18:AD:35:FB:56:95:94
Certificate issuer:       /CN=616110FCE6833EA1E50974D2E8885CBCD8B7D7B2
Certificate serial:       07521D84C94CF71CEEFBBB7724A22B9BE03E2C0E
Authority key identifier: 61:61:10:FC:E6:83:3E:A1:E5:09:74:D2:E8:88:5C:BC:D8:B7:D7:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa
Signing time:             Tue 05 Mar 2024 17:56:32 +0000
ROA not before:           Tue 05 Mar 2024 17:51:32 +0000
ROA not after:            Tue 04 Mar 2025 17:56:32 +0000
asID:                     267713
IP address blocks:        45.164.148.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:52:1d:84:c9:4c:f7:1c:ee:fb:bb:77:24:a2:2b:9b:e0:3e:2c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616110FCE6833EA1E50974D2E8885CBCD8B7D7B2
        Validity
            Not Before: Mar  5 17:51:32 2024 GMT
            Not After : Mar  4 17:56:32 2025 GMT
        Subject: CN=5A89AD154383DD96F9F68AF9DC18AD35FB569594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:65:ac:fa:d1:e9:81:f3:ff:cd:ec:05:bd:
                    82:3c:9e:3d:af:76:59:59:4e:d7:6f:ec:a7:f4:40:
                    58:1f:42:d1:a7:84:64:51:3a:06:db:17:2b:ff:8f:
                    2b:ad:33:a3:37:36:62:34:03:0e:ae:8e:19:56:1d:
                    ca:60:21:21:72:2a:73:51:7a:ea:a9:83:e3:e0:42:
                    17:71:97:e9:7b:0e:21:e7:09:02:f7:34:30:a4:30:
                    44:38:e6:da:32:b4:5c:dc:5b:cc:69:52:e9:18:c4:
                    af:5f:57:fa:04:c6:74:b3:f8:ad:ea:40:f5:fb:86:
                    1a:7c:c9:17:15:ca:ce:e9:4d:a3:d0:d8:2b:2b:15:
                    0a:a9:50:9a:53:7b:95:85:ea:4a:00:2d:76:3a:f5:
                    e6:33:31:70:d6:fb:dd:0e:8b:f9:98:ee:7b:8c:33:
                    f9:b1:08:64:e3:ac:97:20:0b:37:ae:28:d7:13:a6:
                    74:2b:20:63:fa:f3:a3:e4:fa:dc:88:99:9b:1f:f1:
                    7c:17:a8:4d:7d:2a:7f:b1:b5:6c:00:38:3b:5b:c8:
                    b3:a3:79:b2:30:c4:32:c7:c2:2d:fa:6a:7a:57:8c:
                    b3:f9:d1:92:70:9b:3d:9b:11:51:7a:60:3b:83:13:
                    ac:a6:78:16:42:70:77:47:68:7a:a6:ae:fa:a0:a7:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:89:AD:15:43:83:DD:96:F9:F6:8A:F9:DC:18:AD:35:FB:56:95:94
            X509v3 Authority Key Identifier:
                keyid:61:61:10:FC:E6:83:3E:A1:E5:09:74:D2:E8:88:5C:BC:D8:B7:D7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3232203d3e20323637373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:ed:ae:2c:81:8f:90:ed:17:3d:90:23:2d:2d:af:51:7d:8f:
         88:80:e0:71:64:5f:e6:46:91:4d:8e:57:49:0c:0b:29:7a:15:
         f6:cc:42:cf:2b:e5:a7:f5:76:e9:01:0b:4e:48:3d:f1:63:97:
         cc:47:65:3c:33:76:05:e8:69:92:f2:ad:a4:86:b0:1a:2a:02:
         76:d3:4f:68:9d:7a:fb:d3:49:7c:79:8c:77:c7:30:34:ed:8c:
         6a:48:f8:c1:c7:6a:cd:c3:a7:f1:49:07:dd:c4:15:6a:3f:f1:
         fa:13:33:3f:09:72:ca:d8:02:a1:06:61:3d:af:51:81:0d:e1:
         31:38:44:34:3a:f8:f8:84:e1:f9:d7:bd:69:23:77:31:c0:e1:
         fa:c4:2f:dd:b2:f5:e7:52:98:45:fd:31:86:41:a7:ca:04:d0:
         6e:b6:8a:03:9f:52:15:9b:7b:6a:fc:ce:7e:e2:6a:59:c8:06:
         49:9a:6b:1f:06:cb:fa:a9:56:58:b2:c5:a8:b5:ae:33:5b:d7:
         c4:d6:35:6b:d1:81:b2:ef:10:aa:ee:b2:76:b3:26:d6:14:da:
         f1:d8:a3:71:af:4a:b7:52:64:20:9d:d8:6b:2b:28:43:ba:76:
         aa:54:fa:a6:c1:a6:db:9c:3a:f7:30:4d:9a:65:52:97:93:88:
         6b:16:59:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 21:44:38 2024 by rpki-client on console-fra.rpki-client.org