Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/34352e342e3136382e302f32322d3234203d3e20323635363738.roa
File:                     34352e342e3136382e302f32322d3234203d3e20323635363738.roa (raw, json)
Hash identifier:          h9JHPpC+/tzUyq7DD+iSWKZsyAI1amZyTsvq+1bsR94=
Subject key identifier:   29:D0:35:08:F8:F8:C0:2D:75:1A:C8:AF:35:B5:34:CC:81:82:0C:E9
Certificate issuer:       /CN=85A05B4BE012BF18A1139686B06217D2F16BE873
Certificate serial:       5E0EC8D88E51313F75122700626B0DDF8362B433
Authority key identifier: 85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/34352e342e3136382e302f32322d3234203d3e20323635363738.roa
Signing time:             Tue 05 Mar 2024 18:15:27 +0000
ROA not before:           Tue 05 Mar 2024 18:10:27 +0000
ROA not after:            Tue 04 Mar 2025 18:15:27 +0000
asID:                     265678
IP address blocks:        45.4.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.crl
                          rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0e:c8:d8:8e:51:31:3f:75:12:27:00:62:6b:0d:df:83:62:b4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A05B4BE012BF18A1139686B06217D2F16BE873
        Validity
            Not Before: Mar  5 18:10:27 2024 GMT
            Not After : Mar  4 18:15:27 2025 GMT
        Subject: CN=29D03508F8F8C02D751AC8AF35B534CC81820CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:79:2e:bc:fc:af:f7:e2:e6:4a:62:d5:37:46:
                    ea:14:45:4c:4f:a7:a2:29:fb:12:57:1e:e4:85:99:
                    ce:1b:b5:03:bb:04:64:6d:11:0f:f8:67:ab:af:5a:
                    32:57:99:26:c6:ba:66:5d:d6:56:27:8e:21:67:6e:
                    dc:ba:2d:fc:24:b6:6c:7e:dd:52:e8:df:91:ee:1d:
                    9a:bd:3b:54:78:88:08:59:30:8e:1f:78:3a:9b:a5:
                    d3:9b:4a:3a:5f:e9:4d:70:21:64:3f:cf:d6:dc:93:
                    27:28:c6:20:e4:ca:bf:f3:63:b7:2e:b8:e0:06:19:
                    4f:88:13:9c:3e:84:87:4c:a5:73:9a:f1:f4:80:b0:
                    fd:41:d9:a7:ab:ac:fa:00:d4:43:ad:27:a2:b1:8a:
                    7f:88:a7:f1:cf:a2:96:40:04:b3:cd:ba:67:ea:db:
                    5b:f6:36:41:a0:d4:02:92:b2:47:86:c5:64:42:97:
                    0f:a3:38:37:d6:db:e9:8a:3c:93:ab:45:7f:29:b5:
                    c6:c6:aa:c9:71:91:90:36:0f:85:69:2f:7f:b8:52:
                    67:b8:20:5e:d2:45:4c:6f:22:fa:31:7b:f7:d5:22:
                    11:6a:97:a9:b1:33:a5:a5:71:c9:ad:ee:19:7f:20:
                    cc:1a:c3:91:92:74:88:67:63:27:d3:89:7a:19:4f:
                    8a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:35:08:F8:F8:C0:2D:75:1A:C8:AF:35:B5:34:CC:81:82:0C:E9
            X509v3 Authority Key Identifier:
                keyid:85:A0:5B:4B:E0:12:BF:18:A1:13:96:86:B0:62:17:D2:F1:6B:E8:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/85A05B4BE012BF18A1139686B06217D2F16BE873.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85A05B4BE012BF18A1139686B06217D2F16BE873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/450E7E5D1A2CC466DA072F633B637CE5BC517E3E75035D45B8CB8D8BCA85C19B/0/34352e342e3136382e302f32322d3234203d3e20323635363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:89:66:4d:16:e4:e2:5c:25:2e:5a:e6:94:6e:16:10:5e:6b:
         75:8d:1d:05:2a:ec:30:ee:ce:d0:3d:ed:57:0e:a7:c0:ea:1b:
         74:c3:b5:f6:fd:99:6a:c6:da:ae:3b:d2:7e:10:a4:f4:e8:94:
         68:ed:0a:d0:5a:2e:69:73:83:ac:9b:59:7e:8b:cf:02:6f:ba:
         a8:89:cc:8c:4c:21:4d:1f:76:bd:fd:02:39:25:43:61:95:bb:
         95:42:06:8e:f6:a4:3f:e1:41:6d:7b:11:cd:82:a4:06:82:66:
         bb:3c:6f:96:3f:b1:d5:55:07:cf:bc:87:cc:21:a3:9c:3c:96:
         9a:2e:8c:43:87:85:61:43:15:c8:ab:79:34:43:ee:57:f2:6f:
         1f:db:2c:81:da:9a:12:51:fa:78:a1:f5:7c:19:5e:ca:e9:10:
         cc:9a:3f:b9:16:61:bd:25:f8:59:5f:92:22:cb:dc:02:5d:77:
         af:84:e1:dd:9f:2b:a6:d0:99:2d:a2:b5:38:cd:ea:7a:c5:26:
         ec:bd:1c:b9:fa:4d:94:76:c1:ad:5e:6c:91:ae:6a:c5:e1:dc:
         c3:a8:69:e9:43:be:03:d0:a2:29:5b:cc:a5:a8:73:1a:58:dc:
         7c:27:cf:f5:1c:72:be:33:c3:70:29:e6:0b:28:68:25:b7:27:
         76:5f:3e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:19:18 2024 by rpki-client on console-fra.rpki-client.org