Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa
File:                     34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa (raw, json)
Hash identifier:          Qv7VrryhJG3qjPDJw6oVxQ/PEFic9uhWpbF6TJVUHG8=
Subject key identifier:   D9:D4:37:BA:7A:2A:B3:42:15:44:3E:D7:8A:06:E9:CF:0F:56:E4:46
Certificate issuer:       /CN=79791EF384555781F9129D52AFAD809B3BE307E0
Certificate serial:       3EFE61620BABB65405A2C14B2E0DF398E9FD9EAD
Authority key identifier: 79:79:1E:F3:84:55:57:81:F9:12:9D:52:AF:AD:80:9B:3B:E3:07:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa
Signing time:             Tue 05 Mar 2024 17:55:24 +0000
ROA not before:           Tue 05 Mar 2024 17:50:24 +0000
ROA not after:            Tue 04 Mar 2025 17:55:24 +0000
asID:                     266827
IP address blocks:        45.237.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Nov 2024 18:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:fe:61:62:0b:ab:b6:54:05:a2:c1:4b:2e:0d:f3:98:e9:fd:9e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79791EF384555781F9129D52AFAD809B3BE307E0
        Validity
            Not Before: Mar  5 17:50:24 2024 GMT
            Not After : Mar  4 17:55:24 2025 GMT
        Subject: CN=D9D437BA7A2AB34215443ED78A06E9CF0F56E446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:2b:c2:3a:39:6c:de:45:ab:1e:1a:9b:3e:
                    c0:44:b3:5a:35:7c:cb:c9:a0:ed:02:6c:64:c8:10:
                    18:31:6f:7c:8e:3f:a2:d7:36:67:ef:5c:d3:8a:a6:
                    d5:77:1b:82:77:b5:c2:7a:d4:1c:ae:7c:73:93:5d:
                    90:e2:f7:39:94:36:37:91:c0:9a:e3:2d:0c:07:84:
                    fe:8b:e5:9c:7c:e8:75:04:c7:28:39:f7:70:be:80:
                    aa:5b:4a:ec:a1:a4:fd:f9:3f:0c:5d:a6:f6:1b:39:
                    28:e4:a9:6a:d8:c5:ba:46:90:c0:a1:02:c6:de:5a:
                    f4:25:81:5a:15:98:4d:78:48:a2:e1:c5:ec:fd:ec:
                    db:56:9a:c0:ea:7e:e3:cb:e5:86:57:96:9a:56:bd:
                    67:98:bb:8a:03:6e:12:0d:25:dc:5c:2b:6a:60:72:
                    50:8b:b1:ca:b5:1c:e5:e1:6d:fe:c7:db:7c:9c:ef:
                    95:c3:e6:26:3b:95:cf:f9:a3:89:90:b9:38:d5:a0:
                    54:ea:a3:14:ba:6a:0c:2f:9d:58:0e:da:5c:a1:33:
                    b6:2d:29:13:57:43:e3:35:4d:c7:11:b3:2b:eb:b5:
                    29:79:dd:d8:93:08:73:8c:32:8a:26:58:ed:bd:ca:
                    0e:c2:60:38:55:a1:b7:16:10:c6:03:ae:75:c1:0e:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D4:37:BA:7A:2A:B3:42:15:44:3E:D7:8A:06:E9:CF:0F:56:E4:46
            X509v3 Authority Key Identifier:
                keyid:79:79:1E:F3:84:55:57:81:F9:12:9D:52:AF:AD:80:9B:3B:E3:07:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/79791EF384555781F9129D52AFAD809B3BE307E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79791EF384555781F9129D52AFAD809B3BE307E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4379EE160134909C44102BBA84170965E2E0A3AD2E88A2D3532C2EA945A3A879/0/34352e3233372e3136382e302f32322d3232203d3e20323636383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:15:cb:e8:9a:6b:80:e5:1e:e3:05:f7:81:be:12:cd:e7:94:
         bc:54:b2:7a:0b:cd:61:07:bb:cd:4a:b1:74:9f:80:c0:01:58:
         65:f7:ad:92:b8:37:50:87:ae:1a:20:64:62:23:05:82:55:85:
         40:bd:58:8a:b6:27:4e:a7:c2:07:44:9a:eb:98:07:b4:cc:5a:
         67:50:61:fa:d1:86:4c:09:cc:75:75:22:95:91:f5:55:f4:33:
         4f:c2:7b:16:aa:15:7f:49:80:cf:e2:25:44:90:e6:94:60:a5:
         21:4f:f6:b8:4a:ec:4f:e7:86:9b:6a:99:91:ce:0c:02:20:62:
         b5:9d:56:0d:75:4f:ac:e7:1e:78:eb:3e:c6:1f:c3:17:08:57:
         4c:9d:80:db:8a:24:e2:c8:7b:a8:e7:6b:28:38:bc:63:c5:9a:
         15:e6:0e:a2:84:fb:5f:0e:54:94:06:23:2c:dc:9e:f3:a6:ba:
         78:30:83:c9:fc:56:8f:e6:e3:f3:5d:65:99:19:d7:f3:9f:0a:
         00:16:2d:6f:26:3c:9b:67:89:43:e0:f9:09:90:de:72:6d:86:
         4a:51:81:cb:13:49:c7:52:df:fa:c2:d3:95:bf:00:25:93:ad:
         3b:79:5c:fb:eb:b4:99:42:c2:d0:d2:e1:0d:8a:6f:62:84:51:
         ff:fd:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 17:46:45 2024 by rpki-client on console-fra.rpki-client.org