Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/699E2E2C545386F966A47108D57E57719556DC6C93C7A824FB803D072A31D01B/0/34352e3137342e36302e302f32322d3234203d3e20323637383231.roa
File:                     34352e3137342e36302e302f32322d3234203d3e20323637383231.roa (raw, json)
Hash identifier:          QXdwH+RnYVEsHmo6QsXYZVPQ6+3GTlO1NuA7Ngqg/0M=
Subject key identifier:   35:E7:4E:7D:B1:83:E9:51:EA:39:B8:BA:4F:4C:15:F6:50:74:C3:4E
Certificate issuer:       /CN=38040DBC9823C0B92F1B93B130610080404A74FF
Certificate serial:       733F950CF1497789919B0E79175A6401E6F9F5F9
Authority key identifier: 38:04:0D:BC:98:23:C0:B9:2F:1B:93:B1:30:61:00:80:40:4A:74:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38040DBC9823C0B92F1B93B130610080404A74FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/699E2E2C545386F966A47108D57E57719556DC6C93C7A824FB803D072A31D01B/0/34352e3137342e36302e302f32322d3234203d3e20323637383231.roa
Signing time:             Mon 14 Oct 2024 18:10:00 +0000
ROA not before:           Mon 14 Oct 2024 18:05:00 +0000
ROA not after:            Mon 13 Oct 2025 18:10:00 +0000
asID:                     267821
IP address blocks:        45.174.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/699E2E2C545386F966A47108D57E57719556DC6C93C7A824FB803D072A31D01B/0/38040DBC9823C0B92F1B93B130610080404A74FF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/699E2E2C545386F966A47108D57E57719556DC6C93C7A824FB803D072A31D01B/0/38040DBC9823C0B92F1B93B130610080404A74FF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38040DBC9823C0B92F1B93B130610080404A74FF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3f:95:0c:f1:49:77:89:91:9b:0e:79:17:5a:64:01:e6:f9:f5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38040DBC9823C0B92F1B93B130610080404A74FF
        Validity
            Not Before: Oct 14 18:05:00 2024 GMT
            Not After : Oct 13 18:10:00 2025 GMT
        Subject: CN=35E74E7DB183E951EA39B8BA4F4C15F65074C34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:eb:92:03:9e:9b:7d:08:29:2f:fb:45:91:
                    34:8f:f2:c6:bf:53:88:99:db:cc:60:48:e7:fe:d9:
                    b4:b2:7e:54:33:f8:e3:b3:58:c9:20:49:55:3f:ae:
                    f7:15:e5:ce:04:e8:f6:a8:0e:68:42:ca:ed:2f:3c:
                    73:4e:d9:88:8f:78:35:da:bf:22:41:29:64:d7:7a:
                    af:e6:1d:03:3d:b4:21:38:4e:07:a3:05:00:9f:23:
                    28:ca:a3:7f:9d:67:b1:3e:51:25:2b:26:80:30:c6:
                    1e:9e:ce:06:7a:95:a8:8c:33:e7:16:96:19:ae:ae:
                    99:9b:b0:42:bc:71:da:41:72:30:1a:c7:c3:e5:d0:
                    79:b8:37:39:ce:a7:0d:67:39:61:2e:fc:71:94:d7:
                    72:a7:a2:92:16:91:c8:60:8a:75:09:c1:b6:96:20:
                    b4:db:48:b8:7b:03:f9:7d:53:03:11:d6:b1:6f:1a:
                    0a:02:28:2b:b9:96:8a:9e:60:99:fe:ca:d3:15:c6:
                    53:d7:77:a5:a9:c2:c9:2f:61:61:18:1b:f1:90:c4:
                    ad:62:46:e6:4c:98:fe:14:e1:22:32:2d:49:8d:9b:
                    73:7a:0c:26:22:31:17:cc:b7:5b:e3:49:7a:8e:77:
                    f7:70:e4:a7:2d:8e:79:bf:fe:13:54:b7:16:38:a5:
                    9c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E7:4E:7D:B1:83:E9:51:EA:39:B8:BA:4F:4C:15:F6:50:74:C3:4E
            X509v3 Authority Key Identifier:
                keyid:38:04:0D:BC:98:23:C0:B9:2F:1B:93:B1:30:61:00:80:40:4A:74:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/699E2E2C545386F966A47108D57E57719556DC6C93C7A824FB803D072A31D01B/0/38040DBC9823C0B92F1B93B130610080404A74FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/38040DBC9823C0B92F1B93B130610080404A74FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/699E2E2C545386F966A47108D57E57719556DC6C93C7A824FB803D072A31D01B/0/34352e3137342e36302e302f32322d3234203d3e20323637383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:51:16:3c:a7:98:a5:87:d2:be:b4:9f:2e:a6:1b:22:50:a1:
         91:d0:71:71:39:c9:ee:e1:5a:1f:95:c5:8f:a4:e8:56:5b:48:
         18:30:e3:6f:d7:af:29:ca:4d:3e:80:89:87:a4:4c:0c:8a:86:
         4c:72:9d:c8:22:23:0d:3c:ea:01:a3:93:8c:23:bc:69:74:75:
         b0:ed:eb:3b:4f:65:dc:9b:bb:5a:91:ab:ac:9e:f7:ad:ae:42:
         10:84:53:3f:ba:56:07:6d:cc:2c:6e:7e:9a:61:af:74:99:aa:
         54:39:3a:31:78:f3:17:16:06:5d:e2:4c:73:99:de:d4:47:28:
         0e:5c:74:6b:2f:83:98:42:4b:86:c3:86:55:5d:4a:f5:c3:f9:
         3b:97:ef:57:8b:7e:88:71:e4:5d:55:c0:51:b2:6f:a4:2a:e4:
         9e:21:a8:16:48:36:19:c6:9e:18:36:f8:9f:26:46:63:e5:71:
         e8:87:d6:45:d6:d7:05:1c:98:67:8a:ad:69:dd:26:3a:31:57:
         49:2f:b9:e5:c5:b2:8a:e9:e0:a3:7b:6f:71:30:8f:c9:cd:d4:
         d3:22:4e:78:d4:ae:fc:e7:ca:67:e5:d0:f5:ad:59:36:54:5c:
         d0:94:f0:5c:92:d6:6b:76:c7:fa:78:a7:fa:39:c4:10:c6:99:
         51:d0:8c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org