Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa
File:                     34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa (raw, json)
Hash identifier:          VHeqDSxvbHqnpyapcUYfYQa9GoToxqld+OeUtqZH9EM=
Subject key identifier:   06:C7:22:4C:04:1B:B1:DB:79:14:E8:90:06:23:DD:7E:BA:99:00:E9
Certificate issuer:       /CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
Certificate serial:       1A535CABB2B445A9DF0DB6F84ADE351E488384D4
Authority key identifier: 55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa
Signing time:             Tue 05 Mar 2024 17:40:04 +0000
ROA not before:           Tue 05 Mar 2024 17:35:04 +0000
ROA not after:            Tue 04 Mar 2025 17:40:04 +0000
asID:                     267833
IP address blocks:        45.175.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:53:5c:ab:b2:b4:45:a9:df:0d:b6:f8:4a:de:35:1e:48:83:84:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550C6BE760B5DF61359F2CD954A0E95372835F2C
        Validity
            Not Before: Mar  5 17:35:04 2024 GMT
            Not After : Mar  4 17:40:04 2025 GMT
        Subject: CN=06C7224C041BB1DB7914E8900623DD7EBA9900E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:14:51:97:3a:ea:15:52:96:b2:4a:1d:bd:
                    50:cc:07:c2:ea:41:fa:88:10:36:37:b5:ad:33:e2:
                    e5:cc:76:60:93:67:4b:98:68:de:53:b9:80:d5:38:
                    47:9e:ac:47:d5:d1:de:1c:be:7c:d2:27:83:5f:48:
                    45:90:41:12:f8:47:30:cf:9a:d5:6b:4f:cb:6b:35:
                    48:a8:5c:e3:b5:e4:e2:46:67:2c:12:11:fe:98:88:
                    91:9b:60:1a:1d:54:72:fc:c9:52:f6:c3:91:8f:ed:
                    31:85:9b:9f:8b:d8:0e:f5:2a:a3:3f:c0:c2:61:fc:
                    f4:d5:3c:74:a6:84:7c:ad:1b:4c:7c:0f:21:53:b5:
                    bf:4a:5e:bf:2e:48:32:f2:b5:39:96:be:d5:e9:1e:
                    2a:25:24:46:b4:2f:d9:d9:68:3f:dc:b7:76:16:30:
                    89:20:cc:52:10:14:99:b4:96:32:88:27:f7:e4:3e:
                    ba:e9:3a:57:36:4e:44:aa:6f:b4:3f:77:b6:91:a0:
                    20:fe:e2:6f:a5:47:1b:a4:f2:8a:72:2e:c5:10:f4:
                    10:a3:a9:3e:53:0b:a5:b3:2a:0f:7a:7a:50:de:bf:
                    e9:3c:f4:9e:fc:5c:26:db:37:bb:56:1b:5f:79:2d:
                    b3:e0:a4:49:25:af:e6:3b:4a:94:ce:33:c6:ac:03:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C7:22:4C:04:1B:B1:DB:79:14:E8:90:06:23:DD:7E:BA:99:00:E9
            X509v3 Authority Key Identifier:
                keyid:55:0C:6B:E7:60:B5:DF:61:35:9F:2C:D9:54:A0:E9:53:72:83:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550C6BE760B5DF61359F2CD954A0E95372835F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A5DB254E8643A5B1F1EB81E89CE039CF3341B0754A46522B65EB4477C34029D/0/34352e3137352e3130302e302f32322d3232203d3e20323637383333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:23:43:a7:0c:88:ca:49:de:c6:38:2f:40:b2:af:c6:c7:
         25:d3:f3:5c:e3:5b:22:49:72:38:22:4c:c3:1f:a9:d2:01:99:
         fc:b8:15:3e:73:6e:7e:64:ca:26:2a:7f:dc:68:e3:3d:16:b9:
         51:4a:fd:68:06:86:c2:ff:ba:02:91:1f:76:6b:5d:c1:ee:d3:
         91:12:5d:a1:b5:76:96:ab:d7:cf:b7:6b:2c:94:e5:f4:09:99:
         e1:ca:c6:92:c3:1b:95:c7:04:2f:51:a9:c5:be:7c:75:0a:26:
         3c:e3:6d:3c:67:b7:ff:7e:02:a1:db:e2:b5:b6:d1:50:02:ca:
         8d:09:4f:d4:ab:0d:51:74:df:e1:4a:0a:e5:5c:6f:00:dc:94:
         04:aa:70:12:90:2a:ce:fd:ba:21:a0:de:56:8a:19:13:f0:40:
         27:10:db:b4:0d:26:a0:1b:7e:12:e9:5d:5c:2d:f7:f6:dd:21:
         65:4d:25:4a:67:fc:72:eb:be:48:b9:70:27:cd:1b:c6:e4:81:
         3b:b6:b4:7a:22:10:fd:00:87:f2:b1:f8:44:1a:d0:5b:91:d8:
         95:cd:50:f8:92:8d:b1:cb:df:f2:cd:f8:26:11:f9:6a:41:2c:
         c3:0e:4d:a2:67:01:18:1f:b7:69:9d:3e:9e:4a:d5:d0:70:7a:
         ae:95:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org