Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323635373033.roa
File:                     34352e3137362e3131362e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          hxQ1qoRWYwJ5pEfcOF0No3dZkwl65mLnAWbbu9vCaow=
Subject key identifier:   3E:F2:8A:40:9E:15:D8:06:E1:2B:26:26:1A:18:B8:B3:DA:F3:B7:AA
Certificate issuer:       /CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
Certificate serial:       6122C1F6D592436650F63FE3A87AE9F576B064B4
Authority key identifier: FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 17:43:02 +0000
ROA not before:           Tue 05 Mar 2024 17:38:02 +0000
ROA not after:            Tue 04 Mar 2025 17:43:02 +0000
asID:                     265703
IP address blocks:        45.176.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:22:c1:f6:d5:92:43:66:50:f6:3f:e3:a8:7a:e9:f5:76:b0:64:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
        Validity
            Not Before: Mar  5 17:38:02 2024 GMT
            Not After : Mar  4 17:43:02 2025 GMT
        Subject: CN=3EF28A409E15D806E12B26261A18B8B3DAF3B7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:24:d6:bf:4e:f0:69:8e:83:f7:f9:e4:87:
                    13:dd:af:bc:ec:cb:b8:91:44:3f:74:7e:7a:f2:99:
                    77:b1:b6:0d:d1:c7:4d:5a:f4:e7:28:b4:1a:34:0a:
                    db:6c:af:9a:7d:7e:3d:18:5e:81:d2:00:08:9b:e4:
                    35:3d:44:50:28:0d:4c:27:c2:39:6d:bf:87:bc:7f:
                    97:7b:38:3a:ad:c6:97:76:9d:ab:3b:1f:9b:55:91:
                    8f:97:5b:6b:d6:2c:bd:d8:ab:7f:38:08:fc:6e:64:
                    fe:7d:d7:53:0b:3a:ef:95:27:96:c3:31:64:2d:b0:
                    be:4d:72:06:b0:c3:9a:5d:73:a3:f3:56:cc:9a:ad:
                    fd:a9:71:85:13:17:51:86:38:4f:0f:f4:e1:5b:9d:
                    98:4d:50:cf:5b:43:8f:5d:67:f5:ab:00:61:41:34:
                    e3:0e:0f:4a:92:ae:40:53:a6:04:7f:90:08:23:d7:
                    df:96:8e:7d:b9:06:ff:bb:95:21:42:81:3d:88:c0:
                    66:47:5a:da:76:39:61:45:56:7e:5d:31:ff:d9:6f:
                    9c:6d:8e:08:c9:8e:6c:70:7f:5e:f2:f9:ba:14:5f:
                    ea:f0:93:f0:46:58:d9:ee:f4:4a:5b:e4:f3:3f:1d:
                    ce:36:19:b0:f4:ea:96:02:53:ea:c8:42:d7:bd:4f:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F2:8A:40:9E:15:D8:06:E1:2B:26:26:1A:18:B8:B3:DA:F3:B7:AA
            X509v3 Authority Key Identifier:
                keyid:FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:cd:53:aa:3a:65:b1:a8:47:18:07:03:a8:f0:ce:8e:f1:fc:
         a4:bf:f9:8d:d7:ae:33:63:11:07:62:b4:7a:05:f5:a7:7f:5c:
         68:5d:39:3c:4f:78:17:17:85:dc:aa:95:99:8e:82:85:77:1a:
         57:9b:a7:15:28:ed:68:56:16:4f:d0:f8:17:79:92:37:b0:35:
         79:d7:3c:5e:76:1a:6b:e3:6c:17:9b:57:25:35:f2:21:7c:8f:
         03:bc:98:7f:57:b5:e2:33:9e:02:66:ca:2c:c9:b8:dc:92:dc:
         c8:27:5e:a5:d8:45:46:99:ff:79:d8:2c:5c:0e:8d:48:8f:54:
         e7:5c:e4:97:32:f0:c7:23:9c:7f:ff:09:93:af:aa:f8:cf:ec:
         9a:5f:50:c1:c9:f9:2c:57:37:23:43:3c:ae:6c:2e:40:39:4d:
         95:07:e3:89:73:ef:79:a5:88:04:0e:c5:72:ed:4b:9b:83:0d:
         ed:fb:f5:0a:43:2a:63:08:ce:2e:38:81:75:ac:ce:32:a8:f0:
         2c:cb:c9:93:c4:a9:13:5e:ef:ef:a2:63:2b:29:de:2e:48:33:
         94:0b:51:cb:d5:28:10:b6:2b:0c:71:84:87:42:96:82:48:bc:
         4d:93:ce:05:fa:2e:8d:7a:5d:f0:05:81:ea:64:5a:f8:4a:7f:
         bd:32:03:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org