Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa
File:                     34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa (raw, json)
Hash identifier:          HH5ipJubk5VUq7pbbMvnDB9CnNpYfo0eLz2IK15kwHQ=
Subject key identifier:   4F:01:1C:A4:0F:5D:52:3C:47:14:7F:82:88:34:9D:30:46:13:56:95
Certificate issuer:       /CN=78DB9B853B894970FDA0B31FC3D80A965749E569
Certificate serial:       71CA84A0C396F2B7F3624787B6A0CD1E9FE248C1
Authority key identifier: 78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa
Signing time:             Tue 05 Mar 2024 17:59:34 +0000
ROA not before:           Tue 05 Mar 2024 17:54:34 +0000
ROA not after:            Tue 04 Mar 2025 17:59:34 +0000
asID:                     267734
IP address blocks:        45.165.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ca:84:a0:c3:96:f2:b7:f3:62:47:87:b6:a0:cd:1e:9f:e2:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DB9B853B894970FDA0B31FC3D80A965749E569
        Validity
            Not Before: Mar  5 17:54:34 2024 GMT
            Not After : Mar  4 17:59:34 2025 GMT
        Subject: CN=4F011CA40F5D523C47147F8288349D3046135695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:28:c9:ad:4d:9d:9e:ea:22:d4:ea:8b:dd:
                    1d:cf:c8:9d:45:0d:12:54:b6:d6:50:93:f4:a0:a9:
                    78:08:e2:a5:49:bd:17:48:f4:ab:8f:9e:dc:40:0b:
                    01:1d:1e:3c:08:be:84:16:fd:5a:96:e3:19:83:37:
                    c7:d5:10:e3:2f:71:e5:9e:b8:07:db:8b:7d:7d:dd:
                    d1:82:88:29:78:7b:9d:e5:22:c6:97:2b:f7:81:d1:
                    38:af:87:6c:36:14:5a:38:10:88:7c:22:b2:0a:1b:
                    47:89:9d:7b:b2:71:f4:e0:f8:a6:2f:e5:45:4b:71:
                    4b:23:20:76:76:1d:c3:9c:41:21:72:f8:09:08:8d:
                    23:1a:7f:d1:e0:d8:d0:67:94:cf:61:02:a8:7e:98:
                    f9:c0:ba:7e:0f:49:a7:56:8d:99:b3:29:18:fc:bb:
                    69:b5:84:92:0b:e7:17:bf:0b:1f:7b:07:23:be:af:
                    bf:51:79:20:63:a0:f0:ab:aa:24:66:31:8e:e7:49:
                    3c:5b:e4:4e:e7:4a:59:3a:76:39:bf:e5:ab:fd:0b:
                    4a:2e:95:9d:67:c6:60:18:94:61:cf:6c:c3:c3:d1:
                    6b:30:76:a2:77:c1:15:ff:03:15:20:7f:c3:b0:f6:
                    8a:99:87:30:4b:89:a6:fe:19:0a:f1:d1:8e:94:23:
                    17:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:1C:A4:0F:5D:52:3C:47:14:7F:82:88:34:9D:30:46:13:56:95
            X509v3 Authority Key Identifier:
                keyid:78:DB:9B:85:3B:89:49:70:FD:A0:B3:1F:C3:D8:0A:96:57:49:E5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/78DB9B853B894970FDA0B31FC3D80A965749E569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78DB9B853B894970FDA0B31FC3D80A965749E569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5976D519B5A542B2BCBF2249EB926C15B1C77C2DA9F38290FF163291DA390DB8/0/34352e3136352e3131322e302f32322d3234203d3e20323637373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:95:e9:e1:99:03:5d:03:24:42:89:6b:f3:22:77:5b:65:
         6d:fb:41:16:e6:a0:cc:05:32:ea:44:b3:c6:98:49:2e:f1:19:
         2f:89:4f:70:d1:11:fe:ca:0e:fb:fa:38:97:da:a8:6b:d9:4f:
         5a:78:3d:6c:3e:ac:0f:c7:2f:92:36:51:c5:28:ae:68:93:95:
         36:97:5d:12:f9:b5:3c:13:a7:dc:ed:4f:04:5c:75:9c:c6:ce:
         1b:da:0f:fd:74:67:46:85:53:d1:4b:6f:11:73:ff:86:5e:c5:
         25:68:86:23:be:fe:ab:a5:6a:c2:7e:df:f5:6f:9e:ef:57:39:
         85:7a:0d:a8:cf:f1:64:d1:af:eb:0b:39:28:5c:74:c9:8c:2f:
         12:4b:62:25:d3:5e:24:0c:00:3a:70:7d:35:24:29:1f:60:d1:
         c9:87:0b:68:e3:73:47:42:f0:96:52:ae:90:e4:59:5a:5c:a7:
         c3:ff:5b:86:0c:98:5f:01:a3:1b:31:61:00:88:9e:0a:52:4f:
         6c:77:5d:b1:3a:b3:0f:60:16:45:2b:66:e5:3e:3b:fd:76:bf:
         72:73:3b:a7:8d:94:7b:5e:c6:e1:2c:8c:a6:23:9e:ae:82:40:
         be:e8:b7:ea:7f:cc:1c:f4:4e:75:ad:b1:76:ca:5f:eb:65:72:
         07:ed:7a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 21:34:19 2024 by rpki-client on console-fra.rpki-client.org