Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa
File:                     34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa (raw, json)
Hash identifier:          eqplUkiXpfcL9Klr4G0p8aJeKGq49M4Z6prTX2RY8DU=
Subject key identifier:   2E:91:C0:61:59:63:A3:1D:15:BD:81:1A:02:62:57:57:F8:E2:C5:6D
Certificate issuer:       /CN=54D7EE69523D3779807321281B145BDDA5C28116
Certificate serial:       620D7C4AF5D6652E7A2A5D96D6FE00F745CB8C37
Authority key identifier: 54:D7:EE:69:52:3D:37:79:80:73:21:28:1B:14:5B:DD:A5:C2:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa
Signing time:             Tue 05 Mar 2024 18:02:19 +0000
ROA not before:           Tue 05 Mar 2024 17:57:19 +0000
ROA not after:            Tue 04 Mar 2025 18:02:19 +0000
asID:                     2667733
IP address blocks:        45.167.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/54D7EE69523D3779807321281B145BDDA5C28116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/54D7EE69523D3779807321281B145BDDA5C28116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0d:7c:4a:f5:d6:65:2e:7a:2a:5d:96:d6:fe:00:f7:45:cb:8c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D7EE69523D3779807321281B145BDDA5C28116
        Validity
            Not Before: Mar  5 17:57:19 2024 GMT
            Not After : Mar  4 18:02:19 2025 GMT
        Subject: CN=2E91C0615963A31D15BD811A02625757F8E2C56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:8b:a6:e2:16:36:eb:9b:53:dc:2c:f4:f5:
                    fd:90:b6:99:d6:07:8f:6e:db:53:39:a0:c6:97:d2:
                    bd:e3:cd:71:1a:2e:15:54:7c:23:52:b5:13:c1:6d:
                    15:af:4a:e3:f0:bc:b2:20:66:99:1a:4c:14:79:be:
                    b3:32:38:cf:85:76:af:28:73:0b:e1:ab:6f:4d:f7:
                    84:9f:94:88:20:59:fc:de:4f:59:38:97:45:c1:e7:
                    02:f3:e9:11:a5:7b:c1:f3:c4:9a:d1:f1:46:15:a1:
                    e8:ca:15:a8:10:e4:3c:bf:7b:45:77:18:c8:c8:00:
                    ac:55:23:82:a1:d1:35:97:ab:e3:89:bf:05:11:57:
                    e7:00:fc:12:e3:de:65:a6:5c:60:65:71:a2:34:4e:
                    40:a6:70:b1:6f:ce:00:65:17:c9:7b:72:29:09:52:
                    8d:a3:06:f2:90:4a:ed:75:53:cf:22:0d:69:34:01:
                    26:b8:1e:d3:70:f6:e4:fd:69:a4:d6:e9:d7:d8:6a:
                    e4:40:00:95:77:4f:1c:e6:3e:e1:4e:4a:38:84:0a:
                    b1:62:23:f7:4f:24:df:d8:12:8e:dd:6d:81:68:fe:
                    78:6a:e6:83:1c:8c:b5:61:73:f7:79:59:4c:42:63:
                    e9:bf:f5:8f:3d:8f:41:38:06:6c:20:ae:05:6c:a4:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:C0:61:59:63:A3:1D:15:BD:81:1A:02:62:57:57:F8:E2:C5:6D
            X509v3 Authority Key Identifier:
                keyid:54:D7:EE:69:52:3D:37:79:80:73:21:28:1B:14:5B:DD:A5:C2:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/54D7EE69523D3779807321281B145BDDA5C28116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:7a:3e:bd:51:cb:9e:23:54:44:0e:13:6a:b4:0a:61:1b:4b:
         c3:ad:ec:b2:96:2a:08:b8:51:6a:d3:ac:d1:94:29:2d:c7:fd:
         f5:6a:53:5b:85:a5:64:ca:fa:41:cf:5f:d1:d8:ad:f1:27:7f:
         f6:b9:f9:9a:28:3c:2a:d2:4b:92:fd:33:e4:a4:f1:f2:c9:27:
         ba:81:77:19:37:9d:4f:83:75:70:ad:f6:a2:4a:27:46:a1:ea:
         0b:6d:ea:02:9d:ce:e2:48:d2:ea:6f:ab:65:d6:9c:23:9e:e4:
         fb:5a:f1:55:3b:b0:2e:f6:1a:a3:5d:dd:64:26:be:6f:65:3c:
         5f:da:25:8c:53:58:68:6e:98:d3:be:5c:a9:4d:42:18:15:f1:
         09:51:c0:f3:10:d1:07:df:32:d2:53:34:f2:a7:79:73:85:05:
         e5:69:f1:37:d7:b3:51:53:1f:2e:24:a0:d1:87:bd:92:bf:b5:
         c0:57:df:8e:1d:51:e4:a8:d8:2e:d4:db:2f:de:a5:23:4d:b3:
         1c:fe:dd:4a:06:31:e1:32:9b:e9:bc:9d:56:95:59:a2:58:46:
         d4:f9:f5:01:48:c4:e4:9a:de:a1:36:df:f1:0e:e8:04:ad:00:
         b7:51:e3:e3:0f:6e:b1:ba:38:08:ee:67:4b:28:82:b0:b0:b8:
         c0:60:78:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org