Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/34352e3136342e31362e302f32322d3234203d3e20323637363935.roa
File:                     34352e3136342e31362e302f32322d3234203d3e20323637363935.roa (raw, json)
Hash identifier:          lM0/0fdwJKuupcKY5LdiOu+MfpwAT1Wfz68i4yAXB+Q=
Subject key identifier:   F9:7B:CD:D7:EB:71:E9:2A:96:98:D4:32:58:51:E4:55:71:0B:1F:24
Certificate issuer:       /CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C
Certificate serial:       458800BFF069040B31262E57A5EF173680CEEB9C
Authority key identifier: 64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/34352e3136342e31362e302f32322d3234203d3e20323637363935.roa
Signing time:             Tue 05 Mar 2024 17:50:02 +0000
ROA not before:           Tue 05 Mar 2024 17:45:02 +0000
ROA not after:            Tue 04 Mar 2025 17:50:02 +0000
asID:                     267695
IP address blocks:        45.164.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:88:00:bf:f0:69:04:0b:31:26:2e:57:a5:ef:17:36:80:ce:eb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C
        Validity
            Not Before: Mar  5 17:45:02 2024 GMT
            Not After : Mar  4 17:50:02 2025 GMT
        Subject: CN=F97BCDD7EB71E92A9698D4325851E455710B1F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:04:cf:e1:bb:ed:d4:0d:67:b3:6e:e8:6e:
                    90:f3:d3:62:de:cc:eb:4f:1e:67:74:4e:03:d7:73:
                    c7:7a:af:01:14:9e:bf:62:63:f1:92:04:c5:89:f0:
                    0b:ad:d6:43:51:6d:21:73:21:d7:85:a7:a5:e4:db:
                    0c:01:8c:09:a4:b6:70:bc:d9:b4:5a:cf:1c:ac:f1:
                    9a:c3:a6:99:6b:34:22:4b:5b:ae:4c:9f:c2:6f:dc:
                    73:d4:cb:f3:ad:32:68:7a:e6:c5:3d:17:29:bf:00:
                    8b:e2:a7:c0:07:84:08:88:a9:de:2b:33:3d:b2:06:
                    42:1b:4b:d0:b3:4c:3a:e6:da:5d:5d:a7:9e:2a:e6:
                    6d:8b:96:6b:6c:9d:56:bc:c2:f5:74:ac:2b:ed:e7:
                    5f:46:46:a2:9b:50:97:d5:01:21:cb:b1:d4:40:f9:
                    9e:cb:d8:95:43:f2:cc:ff:44:df:ed:d3:b0:60:63:
                    c7:0e:a5:62:61:01:3b:e3:e6:24:b6:63:3a:51:47:
                    68:c9:4e:a7:06:b8:9f:50:3b:32:e1:d4:b7:e8:8b:
                    c0:7c:38:21:9e:6c:58:de:ac:43:42:d7:74:14:2a:
                    b6:dc:6a:a3:f8:aa:11:3e:1c:a4:fd:93:16:d7:bc:
                    17:ef:ec:a7:38:96:73:d8:e6:20:fb:e2:0e:95:bc:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:CD:D7:EB:71:E9:2A:96:98:D4:32:58:51:E4:55:71:0B:1F:24
            X509v3 Authority Key Identifier:
                keyid:64:AD:17:CB:5B:C0:70:8C:93:6D:4B:99:5E:E5:8F:7D:E3:9D:1F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64AD17CB5BC0708C936D4B995EE58F7DE39D1F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4173F70888D08F58AC4247988876598ABAE1BF2F90E65EFB4E6268A580D273C1/0/34352e3136342e31362e302f32322d3234203d3e20323637363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:90:20:68:71:c6:18:de:2a:44:06:db:2f:db:52:75:0e:8d:
         66:33:56:f2:4c:3b:35:86:5c:d8:ca:fa:c0:dd:15:7a:7a:19:
         6c:de:7d:40:08:5c:df:a4:62:98:bc:59:2d:56:ca:61:1a:56:
         c8:d8:ea:97:80:0d:8b:2d:e8:d5:ed:e1:9d:ec:40:e2:6e:00:
         83:9e:c1:9d:69:e4:fd:08:ce:d1:53:d2:02:a8:28:5b:bf:f0:
         bf:aa:26:90:5b:33:33:27:25:24:f0:61:54:07:ac:0a:8b:bf:
         7b:fd:fc:a3:07:c0:98:f1:32:95:24:c9:af:fa:3e:db:f6:40:
         4f:05:f9:b6:c4:c0:68:f8:63:db:7c:6d:a1:d8:72:b3:ec:36:
         38:8b:b1:35:91:8e:fe:5c:7a:9f:13:61:dc:16:b2:29:41:b0:
         64:53:c7:d3:3c:65:c6:4e:b6:92:d9:68:ca:41:e5:19:3a:38:
         e4:01:62:74:9b:75:f2:46:ed:2a:23:9d:b6:1b:7b:39:9b:8b:
         35:79:b8:aa:65:a7:3b:41:06:a8:93:83:8e:6a:f5:f2:9e:d6:
         fe:bc:bc:b9:8e:20:7c:a8:ce:43:da:1c:b7:87:b4:65:60:f0:
         ba:2a:53:78:8c:32:4c:19:0b:1f:c7:52:fe:c7:4d:3c:58:31:
         50:24:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org