Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e38382e302f32332d3234203d3e203634313634.roa
File:                     34352e36382e38382e302f32332d3234203d3e203634313634.roa (raw, json)
Hash identifier:          gEQlRYeyGvOGRJyxKQ4EyUTz0LNbxGMc7Mpruciny+U=
Subject key identifier:   63:2E:FA:D9:FD:24:38:1F:B3:8C:B2:58:A8:AF:41:DD:30:BB:37:EA
Certificate issuer:       /CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
Certificate serial:       1745BE9F5355E097E75341B11F547ADC2F89F53E
Authority key identifier: 73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e38382e302f32332d3234203d3e203634313634.roa
Signing time:             Tue 30 Jul 2024 03:50:00 +0000
ROA not before:           Tue 30 Jul 2024 03:45:00 +0000
ROA not after:            Tue 29 Jul 2025 03:50:00 +0000
asID:                     64164
IP address blocks:        45.68.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl
                          rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:45:be:9f:53:55:e0:97:e7:53:41:b1:1f:54:7a:dc:2f:89:f5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30
        Validity
            Not Before: Jul 30 03:45:00 2024 GMT
            Not After : Jul 29 03:50:00 2025 GMT
        Subject: CN=632EFAD9FD24381FB38CB258A8AF41DD30BB37EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:49:42:bb:c6:83:fd:5a:3b:50:96:bb:95:
                    43:39:f7:bc:c6:0e:9a:8f:ed:02:9f:78:44:da:63:
                    3b:3f:3a:58:88:45:a1:19:12:91:00:95:3c:ab:f4:
                    56:54:52:c7:12:a8:07:13:94:50:26:30:84:af:44:
                    7b:4c:3d:f0:ac:a8:56:be:86:5d:ae:18:b3:80:4d:
                    f4:34:09:0d:5c:ad:af:b1:a4:ec:e7:b1:c4:68:e1:
                    06:eb:b4:c3:f6:97:84:b7:01:8b:d8:2e:58:60:79:
                    59:2c:fd:bc:35:04:78:9a:e8:04:4f:35:4b:19:74:
                    81:fe:05:32:1d:d0:39:2d:1d:4a:90:02:ef:e8:05:
                    25:0c:fc:26:33:06:be:3a:13:7d:02:ff:27:e5:e3:
                    dd:bb:aa:23:39:70:a6:1f:09:a6:81:eb:f0:47:b5:
                    ec:3f:c3:d8:80:35:d1:b2:06:5d:7e:bb:d9:2a:06:
                    98:ce:e4:b5:a4:1a:78:16:36:b3:b8:90:72:8f:c8:
                    13:89:a7:9f:6b:49:d8:c2:21:8e:ce:df:44:8e:0b:
                    05:1d:6c:a6:9d:13:d4:fd:4c:3c:f7:f5:d3:1b:e6:
                    a7:af:97:8c:03:fd:fa:83:bc:ce:2b:fb:57:1f:f1:
                    7b:59:e7:72:a1:4c:50:a0:b0:32:47:b6:b3:58:91:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2E:FA:D9:FD:24:38:1F:B3:8C:B2:58:A8:AF:41:DD:30:BB:37:EA
            X509v3 Authority Key Identifier:
                keyid:73:D7:EB:8D:CC:9C:93:37:55:64:7B:F8:E5:EE:D5:AA:EE:26:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73D7EB8DCC9C933755647BF8E5EED5AAEE26EA30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66D359949D44AB5BDBBF902207D0F118C53AD6B1A063328FB714FC3849B0B3E8/0/34352e36382e38382e302f32332d3234203d3e203634313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:15:76:e5:0e:f7:f8:c7:b0:64:dc:76:75:94:d9:c5:24:62:
         42:a0:88:02:a8:f3:5e:dd:7e:91:ef:3a:b9:f8:8d:91:f6:14:
         d6:7a:07:e2:c0:39:06:c3:b4:cd:23:3c:fd:a1:1b:38:55:90:
         e4:f2:f3:a7:17:b3:67:5b:00:8c:bf:c5:1a:63:b2:9b:40:d9:
         b2:c7:e7:26:66:b1:cc:6d:5c:b1:d7:da:1d:4d:20:43:00:d5:
         7a:65:dc:73:5f:62:2c:43:8d:3d:a4:12:1e:87:a5:54:36:fb:
         19:f6:80:08:3d:31:89:96:df:bf:7a:e5:d2:b0:5e:8d:76:1d:
         71:68:0f:97:38:89:25:45:39:87:b8:d0:33:f0:5e:b9:a0:35:
         47:c7:08:73:ad:69:f7:43:bf:2a:e7:4e:ad:86:08:08:14:e6:
         dc:af:42:0a:ff:20:1b:d3:2f:67:c0:8e:cf:ce:b0:a9:98:79:
         fd:88:55:e2:45:43:0c:c4:e0:9f:ce:a0:81:90:31:ca:7c:e6:
         68:bf:75:a1:97:99:3e:05:ac:74:be:23:07:a1:1e:92:f2:f9:
         7d:4b:19:20:e9:e7:26:e8:ac:65:f7:c7:59:bb:6c:2d:aa:cb:
         28:0e:be:3f:f8:10:bb:e1:ec:e3:c7:f7:25:7e:eb:ee:4c:bc:
         5d:35:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:31:25 2024 by rpki-client on console-fra.rpki-client.org