Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa
File:                     34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa (raw, json)
Hash identifier:          ENfleCJ/D5JxqX/cGqekK5qmtgdgw47EMVMqmhStZwo=
Subject key identifier:   F2:B1:3A:EB:8B:EB:4D:50:C5:BF:F5:88:F6:E0:CD:08:17:23:EE:1A
Certificate issuer:       /CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
Certificate serial:       70084BC22D390EBB85852412B0B7302DFB73DD82
Authority key identifier: 29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa
Signing time:             Tue 05 Mar 2024 17:53:43 +0000
ROA not before:           Tue 05 Mar 2024 17:48:43 +0000
ROA not after:            Tue 04 Mar 2025 17:53:43 +0000
asID:                     270173
IP address blocks:        45.164.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:08:4b:c2:2d:39:0e:bb:85:85:24:12:b0:b7:30:2d:fb:73:dd:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291BF264E3DFBE29A5D52AE24CE1243DF6F398C2
        Validity
            Not Before: Mar  5 17:48:43 2024 GMT
            Not After : Mar  4 17:53:43 2025 GMT
        Subject: CN=F2B13AEB8BEB4D50C5BFF588F6E0CD081723EE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:78:ee:9b:33:c4:58:4a:74:1d:f1:3f:c7:
                    e0:a6:79:43:50:08:aa:e5:42:f7:7d:b5:0f:94:ac:
                    cf:1f:78:0f:f9:6f:06:ea:22:02:fa:eb:41:45:aa:
                    40:d4:cf:63:86:49:a7:a4:24:de:19:cb:ea:6e:2f:
                    33:f1:42:cd:fa:8c:dd:8a:4e:51:d7:3e:c8:47:b6:
                    5a:54:c7:b1:00:25:e3:ec:45:d3:87:c9:7f:94:27:
                    5e:36:9a:91:96:6a:73:38:d3:b6:10:61:94:84:49:
                    6f:00:42:13:de:1e:60:f9:df:2f:71:2e:75:1f:dc:
                    86:b1:0a:0b:b7:63:d3:36:cf:c0:d1:01:e2:1b:96:
                    ca:fd:97:80:8b:f7:75:5c:57:67:c6:dc:ad:76:13:
                    bc:82:6c:d6:b5:16:5d:a7:0f:9e:26:74:68:ab:76:
                    90:53:c0:21:76:66:5c:56:f4:d5:2a:61:e0:e0:d8:
                    84:a0:26:5e:d9:fe:fa:d6:6b:90:49:82:b5:2d:d4:
                    d8:f3:90:25:8d:31:08:ef:b6:c3:98:d2:3f:ad:25:
                    3b:28:f3:c7:c3:d3:1c:48:19:2e:53:b9:f3:1e:38:
                    7e:ab:b7:08:52:f8:6a:e3:12:ec:18:53:10:e2:e3:
                    cb:77:9d:e4:4b:e8:0b:70:c0:58:67:71:81:96:a0:
                    08:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B1:3A:EB:8B:EB:4D:50:C5:BF:F5:88:F6:E0:CD:08:17:23:EE:1A
            X509v3 Authority Key Identifier:
                keyid:29:1B:F2:64:E3:DF:BE:29:A5:D5:2A:E2:4C:E1:24:3D:F6:F3:98:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/291BF264E3DFBE29A5D52AE24CE1243DF6F398C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FA771377A3530818881DC2226705A58B195BD6EC03510382117E92EE961D3A9/0/34352e3136342e3130382e302f32322d3234203d3e20323730313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:bc:33:ca:a4:97:91:0a:78:f7:97:ce:05:b4:3f:7c:30:
         42:a3:1c:f3:bd:46:82:09:6c:68:d4:b9:6a:25:49:8b:e0:98:
         52:67:2b:17:cb:66:68:4c:86:54:6c:ab:a9:2a:29:33:be:b0:
         f5:7d:dd:3e:b6:d6:e1:33:2b:78:47:58:05:ee:fa:b5:e0:33:
         76:93:95:39:f9:34:13:b3:04:92:dd:40:4a:f5:df:dc:ac:d2:
         61:6f:4c:26:ec:5b:f1:50:72:3c:99:85:c8:8f:df:77:d2:27:
         26:5d:12:bc:cd:88:4c:2a:4c:eb:88:cd:59:ab:14:3a:8a:10:
         d1:ae:d9:68:79:42:e0:14:ae:20:9d:d1:1c:d2:03:c2:35:a7:
         34:05:e6:ce:95:8b:7a:0e:50:17:b3:68:e9:9f:4b:ab:76:08:
         87:97:2a:b1:cd:e8:85:dd:05:57:2a:0c:1d:19:c3:48:ab:dc:
         03:2d:0d:68:ee:6b:25:f3:0b:f3:a8:1e:38:a9:94:9e:f1:e9:
         2f:60:b9:34:1c:c0:65:e5:6a:52:10:49:75:b2:57:a3:de:82:
         01:4a:b7:c4:2c:65:e0:c9:5f:cd:ea:c4:d3:ea:a9:35:1f:96:
         60:0f:10:f5:55:da:33:de:a5:47:9f:20:ad:b1:17:c8:00:1c:
         87:66:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:35 2024 by rpki-client on console-ams.rpki-client.org