Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137322e302f32322d3234203d3e20323635353738.roa
File:                     34352e3137342e3137322e302f32322d3234203d3e20323635353738.roa (raw, json)
Hash identifier:          yXDphq/9Xf5zZLyptWWSkrhGCidWuKaLdKYxYrVFUDU=
Subject key identifier:   38:14:9B:88:05:FA:D6:A2:5B:A9:8C:71:27:6C:1F:0B:C0:39:C6:B3
Certificate issuer:       /CN=FA40F4074261959953C6B11359AE13D2C4B837D3
Certificate serial:       0F572446E102D4B39DB995BD318979399DC7D2CB
Authority key identifier: FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137322e302f32322d3234203d3e20323635353738.roa
Signing time:             Tue 05 Mar 2024 18:21:07 +0000
ROA not before:           Tue 05 Mar 2024 18:16:07 +0000
ROA not after:            Tue 04 Mar 2025 18:21:07 +0000
asID:                     265578
IP address blocks:        45.174.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:57:24:46:e1:02:d4:b3:9d:b9:95:bd:31:89:79:39:9d:c7:d2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA40F4074261959953C6B11359AE13D2C4B837D3
        Validity
            Not Before: Mar  5 18:16:07 2024 GMT
            Not After : Mar  4 18:21:07 2025 GMT
        Subject: CN=38149B8805FAD6A25BA98C71276C1F0BC039C6B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:c3:03:20:e5:ce:06:d8:48:21:76:2b:ee:
                    6e:f7:76:7e:9a:e8:c5:2c:2c:fb:10:df:62:49:7c:
                    8d:1a:19:a6:51:7f:f6:a0:f8:e2:40:9f:76:03:fc:
                    56:1f:1c:b3:13:bc:3b:36:45:60:da:18:a3:58:10:
                    b9:69:74:07:75:fa:65:a5:99:97:98:3a:6c:51:49:
                    bf:a8:19:4b:c8:38:6a:ee:29:a7:de:47:2d:2e:da:
                    7f:5b:85:ab:7f:67:9d:c7:88:a2:d6:1d:d9:8c:91:
                    e1:6b:d9:c7:2a:5e:73:40:85:30:b0:e5:03:e3:93:
                    89:c7:e2:b2:f6:2b:91:48:d6:4d:7b:f8:48:36:ea:
                    72:bc:0c:7e:63:78:50:ec:a5:5d:65:be:1b:60:30:
                    04:db:3e:a8:48:cd:c4:e5:26:fb:fc:e6:f7:fd:94:
                    fd:b1:92:89:44:43:b8:4b:c7:23:76:00:27:69:43:
                    15:90:ac:7e:36:1d:5a:91:b4:1a:1a:a5:f4:24:3f:
                    9e:1d:5c:71:b1:dc:aa:bd:84:98:f8:81:2b:e4:a6:
                    ec:39:41:04:26:54:d1:67:a2:2d:31:56:a0:a5:c6:
                    03:08:ac:e8:c1:8c:c3:e9:05:f2:9b:c6:29:f6:da:
                    ba:9c:4d:91:8e:1c:80:2d:ab:a1:e9:33:2a:28:e8:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:14:9B:88:05:FA:D6:A2:5B:A9:8C:71:27:6C:1F:0B:C0:39:C6:B3
            X509v3 Authority Key Identifier:
                keyid:FA:40:F4:07:42:61:95:99:53:C6:B1:13:59:AE:13:D2:C4:B8:37:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/FA40F4074261959953C6B11359AE13D2C4B837D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA40F4074261959953C6B11359AE13D2C4B837D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43D4FF27DFCF4A5EEC5E4CE140231E33157DB51122C105CE1AB5AD6E34DB4332/0/34352e3137342e3137322e302f32322d3234203d3e20323635353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:ee:87:80:1c:a2:40:f4:1f:0d:59:68:f7:40:df:fe:bb:
         cc:52:c0:3f:b2:b2:24:71:8b:5a:cc:ea:34:d9:84:c6:4e:51:
         87:b1:ac:59:8f:22:b0:9b:54:25:14:51:53:8b:c1:b6:47:4c:
         98:28:0a:bc:b3:f1:ca:d7:f5:cb:c9:ad:e3:36:38:13:95:b5:
         55:52:3c:c1:90:32:64:eb:46:82:6b:62:67:30:d0:7f:58:d1:
         ae:c8:28:11:6b:90:86:6d:67:49:c4:85:b0:dc:03:eb:14:49:
         3d:31:05:2c:6b:33:ba:74:74:88:86:03:49:9e:d3:74:5b:1d:
         c5:6d:3b:f1:ef:44:dc:f5:57:15:2e:10:7b:29:9b:46:89:9f:
         47:5d:59:e8:60:11:bf:d8:ed:62:86:5d:3e:f7:1a:9a:57:d1:
         84:39:a2:7a:51:0b:53:86:d7:df:82:09:8e:77:5e:67:9e:f8:
         6e:d1:77:25:f4:0c:c2:25:a0:ec:22:0d:f8:39:ba:15:1b:65:
         69:9c:c8:eb:ec:ca:7e:e2:7a:1f:36:1d:9c:ee:56:f0:43:3b:
         cf:9b:82:31:34:66:2c:24:e4:60:ec:28:0b:89:33:c4:a7:e0:
         2f:fa:7f:d1:86:bb:22:74:b1:93:2c:82:a7:e7:da:33:de:ce:
         fe:42:a0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:53 2024 by rpki-client on console-fra.rpki-client.org