Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3234203d3e20323637373338.roa
File:                     34352e3136372e3136382e302f32322d3234203d3e20323637373338.roa (raw, json)
Hash identifier:          eHRhCuF+5S04b/L87s0Defe8h2DXKr7KuMllmPK8PvM=
Subject key identifier:   1D:74:A0:B2:AB:D5:9B:58:FD:4F:69:F9:B7:92:2E:F1:E9:01:58:89
Certificate issuer:       /CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1
Certificate serial:       6CA8C59433C03EA8F264FDFCC589A4B3694C1A13
Authority key identifier: 87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3234203d3e20323637373338.roa
Signing time:             Tue 05 Mar 2024 18:05:16 +0000
ROA not before:           Tue 05 Mar 2024 18:00:16 +0000
ROA not after:            Tue 04 Mar 2025 18:05:16 +0000
asID:                     267738
IP address blocks:        45.167.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a8:c5:94:33:c0:3e:a8:f2:64:fd:fc:c5:89:a4:b3:69:4c:1a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1
        Validity
            Not Before: Mar  5 18:00:16 2024 GMT
            Not After : Mar  4 18:05:16 2025 GMT
        Subject: CN=1D74A0B2ABD59B58FD4F69F9B7922EF1E9015889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:e2:41:98:09:f7:19:28:a8:49:7d:2d:61:
                    99:bd:6c:f0:f1:d6:a5:e9:fe:e4:b9:54:88:18:e2:
                    0a:da:8a:bc:21:f4:7a:33:ea:a4:50:3d:41:88:49:
                    32:b4:bf:9b:4b:f1:73:96:f1:12:4e:c4:53:2d:8d:
                    5b:b2:7a:76:70:66:5d:2a:3a:80:18:65:ec:dc:90:
                    4d:7e:34:9e:4b:bc:ec:4d:26:f4:df:cc:c9:a9:55:
                    d0:68:2b:3f:73:b8:45:a5:c0:11:a4:d6:dc:1a:97:
                    01:28:2f:4e:d2:dc:97:fa:42:06:56:e7:3e:56:5e:
                    7b:71:72:82:ee:75:2e:33:7f:ee:f0:87:8d:ca:ae:
                    ad:cc:58:24:c7:f2:6d:a1:a1:b8:70:d6:95:1d:e6:
                    a8:e4:b6:60:a6:25:c1:89:0d:2a:21:1e:60:dc:c3:
                    47:b7:23:e8:04:47:a1:72:05:8f:df:4a:48:fc:90:
                    16:08:f8:35:29:9c:cb:d7:71:2a:92:22:f5:cc:c0:
                    1c:bb:7e:90:b9:59:b0:ef:fc:e0:38:fd:9d:d9:91:
                    d4:11:2c:ee:33:d7:0f:f3:dc:69:3a:e8:67:b3:35:
                    04:69:17:7c:a7:83:8a:0d:46:2b:a9:3f:98:d8:df:
                    8e:0d:94:ea:41:2a:89:32:06:58:17:5c:48:cc:13:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:74:A0:B2:AB:D5:9B:58:FD:4F:69:F9:B7:92:2E:F1:E9:01:58:89
            X509v3 Authority Key Identifier:
                keyid:87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/34352e3136372e3136382e302f32322d3234203d3e20323637373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:2d:0c:a3:f3:ca:20:35:2e:fe:19:3f:41:25:4f:5d:40:45:
         16:0d:8e:eb:c0:2f:5c:be:c5:5c:81:ec:df:f0:6e:8b:f8:7e:
         55:7c:80:e8:2c:ae:a6:2d:c8:85:fb:df:e7:1e:ba:25:b0:d0:
         23:d1:30:49:65:81:e1:c4:67:68:dc:d8:44:67:4b:8d:15:b1:
         1b:83:71:ba:0b:47:2c:c1:09:2e:f2:0f:c0:f1:ac:37:0a:d7:
         15:b4:c6:a4:cb:6f:ff:46:e9:ba:6b:4b:db:7b:70:38:d8:15:
         ae:5a:ad:31:00:52:04:e1:5d:26:46:bc:78:d6:49:96:e2:26:
         92:14:ab:80:64:8f:5b:d7:7b:59:6b:dc:af:fa:84:dd:4e:94:
         c4:4d:65:d9:34:8d:e6:b3:a3:be:77:73:56:6a:b0:89:0e:03:
         4b:00:78:83:99:94:91:e6:d3:06:07:c0:30:95:ad:6f:47:f0:
         ab:b7:6d:81:68:62:61:6c:82:20:2d:4c:a2:cb:d9:0f:45:50:
         90:a8:c0:46:f7:b5:ce:e7:d2:a2:2d:ab:43:2f:3c:0d:0a:9c:
         42:e7:75:f8:7d:7b:b7:6d:49:9e:f8:8e:53:3e:7c:31:5b:1b:
         a7:73:05:61:7c:43:af:b3:8d:9c:da:94:43:93:6e:b0:c1:c8:
         50:8e:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org