Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa
File:                     34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa (raw, json)
Hash identifier:          owzPXaZmcvzx9v2fJZj7R6TvsxiJqSVIEzVixDNaxCk=
Subject key identifier:   4F:FD:4F:6F:AD:1D:EB:48:A5:E1:1F:60:4F:92:1F:29:22:BF:E6:19
Certificate issuer:       /CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
Certificate serial:       3870C4E5F2CAFDF70711A32EAC718D5266572DD9
Authority key identifier: FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa
Signing time:             Tue 05 Mar 2024 17:43:01 +0000
ROA not before:           Tue 05 Mar 2024 17:38:01 +0000
ROA not after:            Tue 04 Mar 2025 17:43:01 +0000
asID:                     267859
IP address blocks:        45.176.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:70:c4:e5:f2:ca:fd:f7:07:11:a3:2e:ac:71:8d:52:66:57:2d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF458BCF6CF40DFE3E43BC054BF5206905966427
        Validity
            Not Before: Mar  5 17:38:01 2024 GMT
            Not After : Mar  4 17:43:01 2025 GMT
        Subject: CN=4FFD4F6FAD1DEB48A5E11F604F921F2922BFE619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:a8:58:b1:18:17:a8:3c:0e:42:1d:13:88:
                    5d:c1:1d:0c:c4:87:51:d8:6a:f2:20:18:fa:9f:72:
                    d4:99:c9:d9:33:a3:51:a8:99:b7:e3:ee:ef:b6:a7:
                    4a:c6:73:4b:eb:45:61:e5:f8:d3:8b:20:26:23:ef:
                    43:c3:57:07:e3:2e:54:a0:81:d8:58:e3:c1:34:bb:
                    56:d6:06:4d:a8:2e:b2:8a:3a:9e:2d:23:81:3c:21:
                    e4:a2:66:fa:ba:4c:4b:3f:5b:7b:d7:aa:96:f7:73:
                    94:97:84:df:0c:62:45:0b:b9:20:ac:24:15:35:cd:
                    5c:ab:db:09:4b:1c:00:4f:a5:b0:19:0a:6a:9a:39:
                    41:d9:2a:9e:bf:c5:62:f6:d3:e3:2b:89:0e:9c:ba:
                    26:f7:15:10:9f:65:51:d5:b0:ce:da:c4:10:ab:2c:
                    a5:bf:76:56:14:f9:91:8a:f0:05:6d:c9:90:c4:e4:
                    1d:41:48:e8:15:88:28:d4:4d:b8:ff:7c:82:7a:cb:
                    74:c2:e0:b9:a6:bf:23:02:aa:30:93:d9:5c:e4:58:
                    50:39:a9:39:6c:92:db:4b:3f:c1:01:47:59:27:8d:
                    d4:9d:05:53:3d:d6:fe:51:3e:03:2f:c7:6e:bf:62:
                    ae:a4:06:bd:e1:93:bd:ee:4b:1c:ae:a4:d2:2e:dd:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FD:4F:6F:AD:1D:EB:48:A5:E1:1F:60:4F:92:1F:29:22:BF:E6:19
            X509v3 Authority Key Identifier:
                keyid:FF:45:8B:CF:6C:F4:0D:FE:3E:43:BC:05:4B:F5:20:69:05:96:64:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF458BCF6CF40DFE3E43BC054BF5206905966427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3771603B26869A00F661754D1037283AA8B965241E8FDE29C1C85942A123EFA4/0/34352e3137362e3131362e302f32322d3234203d3e20323637383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:d9:7c:2a:8b:e8:ed:e4:a4:a1:c6:51:d2:3b:1b:ef:ce:
         ce:db:8d:b2:7d:74:4f:b4:c4:50:e5:fd:41:96:e1:76:fe:8d:
         98:e9:fb:87:cf:12:48:26:43:ac:c9:23:c3:2b:b4:45:26:b9:
         fd:93:ce:56:94:43:c7:4c:f4:8d:75:72:41:9e:63:df:ca:3a:
         25:84:2c:e2:55:78:90:f5:39:36:6a:ff:23:73:37:4d:4e:57:
         67:64:96:f6:ae:85:a7:24:82:b5:1c:50:04:c0:0a:63:9d:c1:
         97:38:8e:8b:5b:ef:88:65:e7:35:85:e4:cc:f6:4f:2a:53:20:
         38:ec:0d:0b:ce:dc:6c:88:7e:5b:e1:2b:fc:5a:2d:d9:14:66:
         dc:84:a9:60:40:20:cf:db:ad:20:e3:1d:e9:b1:cc:e3:91:e8:
         28:47:2c:da:4f:5e:fa:92:af:63:8d:db:eb:79:76:12:e7:72:
         19:ff:ed:9e:9b:5b:6a:48:a5:21:a4:04:6e:e3:dc:b0:cd:2e:
         57:da:1f:c4:cc:1e:2c:aa:dc:6a:3c:87:17:d5:95:44:3b:fd:
         4a:74:3e:08:e1:db:7d:50:13:bb:30:3a:3b:78:8d:e3:0f:8c:
         74:45:5a:4a:7d:d8:e2:c4:d6:c1:40:73:a2:0e:f7:26:90:61:
         85:b2:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:51 2024 by rpki-client on console-ams.rpki-client.org