Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e20323635373232.roa
File:                     34352e372e38342e302f32322d3234203d3e20323635373232.roa (raw, json)
Hash identifier:          UrBE9JlpUjdfzyX1x7vo76uCygBZ7Iu5CmavSGrXwgc=
Subject key identifier:   A2:EB:D0:BA:FF:8F:41:5F:A4:04:49:BC:FF:DB:AC:65:C5:EA:41:E5
Certificate issuer:       /CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
Certificate serial:       635B6705AE60D09D03F3099B9AD657B06D174782
Authority key identifier: FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e20323635373232.roa
Signing time:             Tue 05 Mar 2024 17:39:59 +0000
ROA not before:           Tue 05 Mar 2024 17:34:59 +0000
ROA not after:            Tue 04 Mar 2025 17:39:59 +0000
asID:                     265722
IP address blocks:        45.7.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl
                          rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5b:67:05:ae:60:d0:9d:03:f3:09:9b:9a:d6:57:b0:6d:17:47:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB037DD6ACAA6389722AF82D5B43CBAFA3A33153
        Validity
            Not Before: Mar  5 17:34:59 2024 GMT
            Not After : Mar  4 17:39:59 2025 GMT
        Subject: CN=A2EBD0BAFF8F415FA40449BCFFDBAC65C5EA41E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:dd:eb:b0:c0:45:63:3b:62:f2:80:c4:fc:
                    29:68:c4:ef:5d:90:6f:c4:fd:67:1e:a1:be:69:27:
                    29:89:98:8e:40:dd:d7:24:4f:65:05:13:ff:8f:54:
                    ce:03:6a:1a:53:e0:ec:47:80:ca:60:92:cc:7c:a5:
                    77:2c:e2:f0:8f:1b:e4:80:93:a7:59:6b:ce:55:de:
                    f8:3b:15:72:88:1d:64:4d:2b:ed:22:32:61:d0:9a:
                    04:5b:2b:03:4a:72:92:7a:50:69:29:0a:5b:2e:9d:
                    9e:72:95:f0:7b:e6:58:8b:ae:e1:4e:2a:f4:f8:a5:
                    a0:df:34:2f:6f:e5:2d:a3:1e:1a:2f:1d:6e:e8:05:
                    fb:3b:62:2f:a3:c0:7b:c4:02:a3:09:87:ab:06:4f:
                    9d:2e:9f:eb:74:58:fd:1e:ee:dd:50:af:4e:bc:ea:
                    82:d4:44:f0:6e:f5:c8:62:d5:1e:a8:29:f4:dd:3d:
                    9d:5f:e6:77:95:29:2e:97:80:3c:34:de:fa:de:66:
                    78:d0:6d:c4:83:09:9b:f7:fd:34:e1:3f:09:73:0b:
                    08:88:3a:75:8a:e6:b4:39:49:5f:cd:3c:e1:e3:5b:
                    cd:85:d6:1a:e4:30:cb:0a:ea:38:99:dd:65:d3:92:
                    34:88:f6:62:9e:1d:96:1e:28:46:21:bc:8d:46:e8:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EB:D0:BA:FF:8F:41:5F:A4:04:49:BC:FF:DB:AC:65:C5:EA:41:E5
            X509v3 Authority Key Identifier:
                keyid:FB:03:7D:D6:AC:AA:63:89:72:2A:F8:2D:5B:43:CB:AF:A3:A3:31:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB037DD6ACAA6389722AF82D5B43CBAFA3A33153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38341965AE766940A3EC2965818A70FE8AB95C2A5C48C696B384EB73088E208A/0/34352e372e38342e302f32322d3234203d3e20323635373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:e3:ff:21:c0:16:79:df:84:38:1e:20:d3:43:61:6b:d8:1a:
         6f:6c:55:62:29:2b:20:03:e7:12:1b:53:5a:0e:c0:dd:4e:43:
         2b:6f:ac:48:68:de:aa:a5:31:18:98:42:9e:a8:15:67:94:5d:
         7d:ef:bf:e0:a9:9a:56:b0:b7:fd:e4:9b:44:06:e3:10:4c:11:
         43:06:5f:54:f4:23:c2:c7:3d:1d:f2:96:55:64:60:50:fb:44:
         77:b3:3b:31:bc:7a:5b:ef:49:36:a5:54:f8:0c:b5:95:b6:7a:
         ad:56:9c:46:7b:19:64:4a:d1:04:a4:7c:f8:be:f1:91:19:d6:
         de:c6:ac:54:fc:91:3c:f2:75:2d:c6:1c:10:f9:3a:d9:94:e4:
         ee:43:63:b1:b8:48:b0:11:b5:30:12:df:6b:dc:3d:0b:01:87:
         06:70:ab:c1:c6:d9:96:46:2f:f3:d7:02:1e:8b:1b:bd:19:0f:
         4b:55:08:63:4b:58:7a:59:3f:7c:02:44:91:1e:01:e2:2b:85:
         59:c0:76:f2:b7:21:4b:f1:53:53:a7:42:d9:dd:18:49:2b:17:
         98:57:91:02:e8:d4:b0:6e:da:8b:8a:94:38:39:b3:71:02:b8:
         51:84:5d:64:a5:62:39:39:5d:cf:dc:5c:0a:fb:26:8e:6c:dd:
         8a:5c:2a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 04:27:51 2024 by rpki-client on console-ams.rpki-client.org