Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa
File:                     34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa (raw, json)
Hash identifier:          /q9LQAh8yR6HjcVfiJNg/40NirI8lBf8EDIEIPMs288=
Subject key identifier:   04:46:69:9C:74:15:5E:CC:AB:A1:20:42:71:B7:9D:4B:9D:EC:88:63
Certificate issuer:       /CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
Certificate serial:       45CF650104C0384AB1406A418ECDCE27471AC80D
Authority key identifier: 65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa
Signing time:             Mon 22 Jul 2024 15:25:00 +0000
ROA not before:           Mon 22 Jul 2024 15:20:00 +0000
ROA not after:            Mon 21 Jul 2025 15:25:00 +0000
asID:                     269748
IP address blocks:        45.182.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cf:65:01:04:c0:38:4a:b1:40:6a:41:8e:cd:ce:27:47:1a:c8:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D543688C82CC80ED68DF2A93441C295C9FA3E2
        Validity
            Not Before: Jul 22 15:20:00 2024 GMT
            Not After : Jul 21 15:25:00 2025 GMT
        Subject: CN=0446699C74155ECCABA1204271B79D4B9DEC8863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:73:a6:85:0d:92:55:1d:09:dc:ae:26:9f:1a:
                    bf:27:d4:8a:77:3f:d5:c4:80:f7:ef:3f:60:1a:4b:
                    a1:23:e4:62:0d:64:4d:47:2c:0c:ba:2b:18:cb:91:
                    ad:7b:36:c7:7c:a7:7a:8d:08:6e:7a:df:92:2b:49:
                    b3:98:4e:40:9e:25:0e:53:b8:2d:b0:1a:76:89:46:
                    2b:6c:26:65:a1:3e:f5:d6:0a:bd:a6:31:12:91:28:
                    92:95:33:3d:62:26:2e:d2:91:ce:69:46:93:e0:b3:
                    91:af:cc:31:03:1d:ea:34:6f:88:96:55:b2:71:8b:
                    e6:4e:56:55:27:d6:12:b1:6b:26:0b:60:9e:a9:d7:
                    f1:e2:b1:45:c7:14:ff:e3:9c:20:c1:d4:9f:3c:ec:
                    3c:ea:bd:05:60:81:a9:c4:89:74:95:ad:ea:04:06:
                    95:59:dc:b7:fb:00:d0:b0:83:be:4e:3e:f1:78:cf:
                    25:c0:36:5c:4d:3d:15:ff:75:72:fc:b5:49:7f:84:
                    91:67:dc:5b:b4:ea:69:e0:ec:02:3a:4d:7d:76:ac:
                    2f:92:93:26:c2:62:83:3c:9d:34:a5:63:b2:5c:e5:
                    3e:87:7b:42:d5:78:ea:6f:b6:92:c9:c3:42:b7:05:
                    8d:0f:4e:d5:a4:24:67:8e:46:9c:5d:a4:0d:ac:bb:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:46:69:9C:74:15:5E:CC:AB:A1:20:42:71:B7:9D:4B:9D:EC:88:63
            X509v3 Authority Key Identifier:
                keyid:65:D5:43:68:8C:82:CC:80:ED:68:DF:2A:93:44:1C:29:5C:9F:A3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D543688C82CC80ED68DF2A93441C295C9FA3E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/443BC0667CD66E7084807D7CE5827232F3FD1C9E2AE04D69D19A2278FFD2326B/0/34352e3138322e3132382e302f32322d3234203d3e20323639373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:7f:8f:b2:df:5b:ab:2c:97:b6:9b:ba:5f:c1:19:95:13:71:
         0a:f8:1f:96:51:e9:54:4e:68:17:c9:d1:dd:07:3a:7e:1b:b2:
         66:cd:7c:ff:07:78:bb:3b:5d:03:6a:69:65:0f:6f:3d:ce:e6:
         4f:ec:2b:50:ac:da:39:88:39:77:8a:bb:3c:9a:af:d3:b7:3a:
         e8:b0:71:a2:d9:a8:1e:24:65:89:04:94:ca:d6:cb:23:a7:b2:
         a9:ba:c7:61:55:6c:a0:49:c9:20:1b:07:ca:83:2d:37:6c:c6:
         bf:cd:1e:5e:6b:99:a1:1a:8d:fa:b7:d2:b5:40:3e:7b:24:62:
         56:a8:51:fa:aa:46:97:c6:b5:07:54:9e:a6:bb:f6:eb:5f:8f:
         32:db:da:4b:88:c1:ae:cd:62:b8:22:5d:e2:9f:b2:2a:d4:d4:
         6e:ff:36:92:7f:af:2d:70:4d:a3:ca:d8:69:c8:1d:fb:cf:b0:
         16:f9:51:88:4d:70:90:92:ec:cb:e1:99:5e:82:11:99:16:40:
         0e:aa:4c:c4:24:1f:0b:78:68:2d:fe:40:b5:79:90:2c:3b:84:
         26:bd:e3:6e:82:f3:9f:0d:75:95:f5:8d:dd:d8:b3:dd:56:50:
         5c:72:0e:5a:08:be:72:21:09:6c:9d:a4:01:f0:50:a0:70:01:
         18:74:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org