Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/34352e3137372e31362e302f32322d3234203d3e20323637383835.roa
File:                     34352e3137372e31362e302f32322d3234203d3e20323637383835.roa (raw, json)
Hash identifier:          LiOUubUvyY0ILbVZrGmOPg9eUDpMPcnE1J/p/dTO1Co=
Subject key identifier:   67:D9:17:57:6C:94:91:64:BE:11:99:58:65:09:A2:9A:6E:BD:8F:A5
Certificate issuer:       /CN=87E86111F292762220D44761EC4E8B3C4F012F38
Certificate serial:       3912F7A5BC91123257ECCA47905BAE27881EC320
Authority key identifier: 87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/34352e3137372e31362e302f32322d3234203d3e20323637383835.roa
Signing time:             Tue 05 Mar 2024 18:02:49 +0000
ROA not before:           Tue 05 Mar 2024 17:57:49 +0000
ROA not after:            Tue 04 Mar 2025 18:02:49 +0000
asID:                     267885
IP address blocks:        45.177.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:12:f7:a5:bc:91:12:32:57:ec:ca:47:90:5b:ae:27:88:1e:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87E86111F292762220D44761EC4E8B3C4F012F38
        Validity
            Not Before: Mar  5 17:57:49 2024 GMT
            Not After : Mar  4 18:02:49 2025 GMT
        Subject: CN=67D917576C949164BE1199586509A29A6EBD8FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:d4:8d:9f:8a:68:dc:1c:f1:3d:a0:c7:7a:
                    50:56:99:2a:5a:11:19:87:c2:be:71:dd:ac:1f:07:
                    45:c7:8b:03:cb:0e:aa:51:97:d4:0b:5e:80:7a:b7:
                    ad:77:7d:41:4b:26:20:b5:7d:d8:31:5f:9f:21:35:
                    49:fd:35:ce:64:8e:4b:d7:8b:2e:68:f2:b0:90:f1:
                    c3:d3:89:15:a4:10:ee:53:2f:74:d5:cf:84:e8:00:
                    a6:b7:4a:07:3f:24:6f:ba:37:dd:fc:48:39:de:17:
                    ca:c2:66:e5:00:7a:93:a8:92:34:93:ff:31:43:02:
                    f7:67:c0:30:78:89:3b:50:ee:a5:2c:62:00:58:d3:
                    22:2e:46:a9:75:89:4b:f3:f4:71:df:5b:1a:d6:d0:
                    2d:c8:4a:99:65:bd:c4:94:bc:c4:d5:1d:ca:6d:92:
                    70:68:a6:cc:11:b6:b1:18:82:b0:94:11:d0:88:8f:
                    53:94:b5:e6:e4:79:8b:72:b4:c2:6c:f7:df:77:8d:
                    2b:a9:84:44:ff:b7:a5:f4:5b:7a:17:c5:97:0e:69:
                    2b:4b:23:1e:64:ad:cd:94:6d:ee:af:ee:92:1a:32:
                    30:48:ca:c1:0f:84:cd:6e:66:9d:88:28:67:24:83:
                    2c:96:70:6e:95:f5:2a:11:25:a2:ce:6f:7e:09:4f:
                    af:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D9:17:57:6C:94:91:64:BE:11:99:58:65:09:A2:9A:6E:BD:8F:A5
            X509v3 Authority Key Identifier:
                keyid:87:E8:61:11:F2:92:76:22:20:D4:47:61:EC:4E:8B:3C:4F:01:2F:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/87E86111F292762220D44761EC4E8B3C4F012F38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87E86111F292762220D44761EC4E8B3C4F012F38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6418A6DC546DDE05D160CE8944520A5EC7CB2E3F2C4F35E23DB8F1D0FBAE54DA/0/34352e3137372e31362e302f32322d3234203d3e20323637383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:82:60:ba:f9:df:b2:f3:03:c9:a5:90:0e:ee:71:f6:64:
         62:cf:c6:02:19:f4:3d:ad:f2:cf:78:d7:cf:61:bc:b7:f8:6e:
         c3:aa:10:4c:77:1e:d3:fe:b6:75:ac:cf:ef:26:0a:85:2f:b2:
         79:fc:bb:d9:20:3a:c8:19:4a:88:1a:d3:b5:4b:fe:f1:04:77:
         e8:eb:f4:4e:27:e5:a3:8a:e6:6b:5d:73:81:2d:1b:95:82:cd:
         08:47:42:bf:af:8f:85:ac:c6:56:d7:5a:71:3a:1e:9d:35:7e:
         a2:fc:b7:f5:6a:52:00:4d:b2:30:60:2d:d2:95:7d:1b:c6:67:
         dc:26:72:4c:7f:0b:b4:7b:83:23:75:25:96:d5:9a:49:76:23:
         08:ab:de:13:e4:6e:f3:2b:9f:77:37:1e:c2:4d:2d:f2:69:c7:
         91:88:a9:0d:9b:73:6f:9b:e0:c3:b6:d1:6e:f2:4b:c6:e7:b7:
         1f:3a:b6:f8:1d:5f:02:d8:51:e6:3c:70:02:c2:d1:71:a8:63:
         99:c2:82:9a:cb:76:22:32:a6:d9:e2:fb:af:be:09:34:d2:61:
         a2:63:df:22:ee:34:c6:8b:dd:b1:19:65:3c:59:97:72:e4:37:
         3d:70:3d:79:c7:ba:22:37:dc:85:29:43:22:9c:c1:1a:a8:47:
         d8:67:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org