Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/34352e3233302e34342e302f32322d3234203d3e20323639373530.roa
File:                     34352e3233302e34342e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier:          +Mnna54uuqoViu0paUviJJtAkhubQR9wolVrS8/UfB4=
Subject key identifier:   38:B7:DE:F0:04:86:9E:AB:90:F9:28:FE:84:19:E8:C1:C2:CA:54:CF
Certificate issuer:       /CN=75812974A06BBC586C8B2B8774FD236214956CF8
Certificate serial:       669D14A9F4126E5EA54132045DC34B81D67114EB
Authority key identifier: 75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/34352e3233302e34342e302f32322d3234203d3e20323639373530.roa
Signing time:             Tue 21 May 2024 15:55:00 +0000
ROA not before:           Tue 21 May 2024 15:50:00 +0000
ROA not after:            Tue 20 May 2025 15:55:00 +0000
asID:                     269750
IP address blocks:        45.230.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:9d:14:a9:f4:12:6e:5e:a5:41:32:04:5d:c3:4b:81:d6:71:14:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75812974A06BBC586C8B2B8774FD236214956CF8
        Validity
            Not Before: May 21 15:50:00 2024 GMT
            Not After : May 20 15:55:00 2025 GMT
        Subject: CN=38B7DEF004869EAB90F928FE8419E8C1C2CA54CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:da:3b:5c:fd:18:42:88:82:7e:76:45:dc:
                    25:e0:b5:88:62:fa:d1:c7:e8:fc:f5:11:e1:6e:1e:
                    22:48:99:57:2a:60:b3:30:ab:3b:80:e1:70:72:37:
                    1e:3d:36:fd:da:b4:83:eb:0f:45:8d:26:a8:ed:9e:
                    92:c3:13:2c:68:a5:81:75:7e:b3:d9:30:cd:c8:9b:
                    4c:b7:0b:b3:14:39:a3:2a:a6:a0:1b:62:a6:db:11:
                    06:fd:ec:cb:21:0a:2c:a5:32:ef:69:62:7b:2f:97:
                    ff:f1:fe:2d:63:e9:09:b2:ab:8f:d4:90:da:66:4e:
                    3c:48:50:2f:fa:7a:3f:a8:de:9b:d6:39:23:ef:07:
                    f5:73:ba:c9:38:7c:71:28:ff:80:5e:40:fd:09:83:
                    de:27:fa:9a:07:8b:65:03:21:18:11:19:73:07:af:
                    9e:29:15:63:38:f7:fc:b9:e2:2a:84:ac:de:a3:a8:
                    85:fd:b9:19:7d:1d:9f:f8:dd:0b:7f:c3:31:2f:47:
                    6a:b9:99:fd:62:90:16:5b:23:01:e4:69:92:30:cd:
                    e4:28:6b:b4:f5:01:a5:8b:ef:90:6f:50:82:87:98:
                    cd:27:39:01:0f:e9:f2:6b:04:0c:46:f0:9a:ec:a0:
                    e9:09:e8:32:38:3d:91:ee:42:01:ad:41:6c:c9:e4:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B7:DE:F0:04:86:9E:AB:90:F9:28:FE:84:19:E8:C1:C2:CA:54:CF
            X509v3 Authority Key Identifier:
                keyid:75:81:29:74:A0:6B:BC:58:6C:8B:2B:87:74:FD:23:62:14:95:6C:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/75812974A06BBC586C8B2B8774FD236214956CF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75812974A06BBC586C8B2B8774FD236214956CF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B19661D740F88B2991D8E23968E8E69A2D67B603A8AE9BCC488AC79543AAF13/0/34352e3233302e34342e302f32322d3234203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:45:eb:53:6e:49:98:ba:f8:9f:e7:73:e5:0c:bd:ed:19:fa:
         cd:25:78:0c:f2:1c:6f:e7:1b:07:14:61:82:f8:05:b6:f2:ac:
         cd:0f:3a:a0:ab:e5:47:fc:eb:56:c5:c4:8e:68:03:ab:a8:d3:
         95:b3:77:c5:f6:31:6c:bd:2d:37:1c:41:98:78:a4:75:ba:37:
         19:34:05:04:af:4e:8f:eb:c6:85:57:38:d5:96:51:3b:95:dc:
         31:a5:28:ec:21:fe:7e:d2:be:65:fd:14:7f:3f:9a:f3:39:48:
         5d:05:69:57:93:f5:fe:17:44:74:b1:2a:48:0c:da:97:ce:0a:
         7d:53:81:c0:18:8e:6f:51:df:81:9d:a9:59:01:8c:de:f5:18:
         36:9f:c6:46:6a:df:56:03:ae:cd:b1:d2:41:9c:ab:6b:8f:14:
         26:a9:4a:4b:bc:ad:7a:c2:6d:24:74:15:c3:f7:08:83:72:df:
         18:35:ab:93:8c:8a:08:f8:c1:f0:62:69:3c:bd:8f:f5:40:3d:
         5d:a5:cd:a5:67:11:d4:cc:4d:78:f4:f5:7f:af:3f:53:e6:4b:
         31:43:25:8a:11:da:4f:37:c6:44:da:6a:45:d1:52:cc:f7:73:
         f3:81:31:20:a1:5d:78:96:d6:f0:06:13:e7:82:a3:0d:d7:29:
         b4:d5:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org