Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/34352e3137332e3139362e302f32322d3234203d3e20323637383039.roa
File:                     34352e3137332e3139362e302f32322d3234203d3e20323637383039.roa (raw, json)
Hash identifier:          M6T1EhKheriACbjwRhR4La5Hn35w3cMrrxQObfXVLuk=
Subject key identifier:   7D:1C:D4:71:45:96:F3:32:AC:F5:1F:AE:8C:50:9C:01:EA:5F:38:83
Certificate issuer:       /CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
Certificate serial:       43F55FEC868D7C1565FE03649A369134A89F0C01
Authority key identifier: 95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/34352e3137332e3139362e302f32322d3234203d3e20323637383039.roa
Signing time:             Mon 05 Aug 2024 18:35:00 +0000
ROA not before:           Mon 05 Aug 2024 18:30:00 +0000
ROA not after:            Mon 04 Aug 2025 18:35:00 +0000
asID:                     267809
IP address blocks:        45.173.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f5:5f:ec:86:8d:7c:15:65:fe:03:64:9a:36:91:34:a8:9f:0c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA
        Validity
            Not Before: Aug  5 18:30:00 2024 GMT
            Not After : Aug  4 18:35:00 2025 GMT
        Subject: CN=7D1CD4714596F332ACF51FAE8C509C01EA5F3883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:25:37:6d:27:29:81:7d:7e:05:84:33:db:
                    ce:f0:05:f9:8a:29:48:37:8c:b4:92:3f:44:5b:91:
                    da:f0:eb:5d:a1:64:48:c0:a7:18:0e:ca:73:5e:c7:
                    31:5e:c4:ee:16:30:22:28:e5:bf:48:cb:c5:e3:04:
                    81:14:85:b8:7d:d0:ad:58:69:92:f1:7b:25:ab:84:
                    2a:0c:61:ce:88:5b:ca:3e:25:b3:fb:31:73:b1:8d:
                    2c:27:3e:6c:88:aa:13:07:cd:02:15:ee:3f:94:9d:
                    14:ad:79:b3:88:e4:1d:3a:3e:b8:d5:f7:13:e3:a3:
                    2b:1b:83:29:d5:ff:7d:c4:67:87:e4:41:11:e1:a0:
                    c6:38:54:6f:4f:8c:69:11:df:8f:05:66:70:2f:cb:
                    12:22:a9:43:f5:2e:2f:0c:c1:ab:0f:8a:d7:b6:16:
                    df:96:bb:82:11:02:63:64:6d:b7:1c:d8:1e:55:4f:
                    00:4a:ce:94:a4:35:24:e9:8a:54:12:67:70:fc:9c:
                    b7:4d:2c:07:dd:fe:ae:6d:29:4b:52:b1:78:21:13:
                    39:58:ff:8e:14:f3:20:c2:9d:c9:a9:2a:83:32:68:
                    be:a2:81:88:3f:af:75:f3:32:e3:96:ab:d5:b2:76:
                    99:c6:74:9c:0c:f4:25:a3:5d:3b:83:ab:8c:b3:13:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1C:D4:71:45:96:F3:32:AC:F5:1F:AE:8C:50:9C:01:EA:5F:38:83
            X509v3 Authority Key Identifier:
                keyid:95:A8:CE:A1:F7:11:5C:0D:99:08:32:8A:0B:91:BA:4C:ED:D4:B6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/95A8CEA1F7115C0D9908328A0B91BA4CEDD4B6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CDC5DE2D7CD6AC9AF27F2C749BE2DB823BF4D531F23C0C35E1743B2D7F11C09/0/34352e3137332e3139362e302f32322d3234203d3e20323637383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f5:3c:99:fc:ff:9d:e5:ca:d6:3c:05:d9:73:7a:85:49:2a:
         5d:d8:ac:9b:4a:e7:07:53:f0:88:87:85:77:85:d3:04:48:ae:
         93:1d:cc:34:e8:62:5d:ff:3e:0d:9c:c8:9b:ad:e1:7b:c2:a3:
         29:89:a9:55:bc:5c:68:e7:4e:53:75:ee:bb:a5:86:4f:62:1c:
         3a:4b:3b:f8:80:e1:51:fd:90:da:6d:38:b7:19:96:d3:a9:88:
         f8:a8:08:f9:be:fc:3a:90:01:ac:bd:9a:54:57:b1:1f:67:7d:
         90:f2:58:32:58:28:98:61:57:7b:55:0c:27:79:44:f4:ab:95:
         9f:88:71:5d:5e:a6:40:e0:37:a1:ba:9e:e6:f5:94:7d:8f:69:
         92:14:0f:16:ac:c3:cb:97:1f:db:3f:57:76:27:2b:a9:77:6a:
         69:84:00:82:05:cf:0b:d4:79:4b:49:20:79:e8:f0:ad:f5:db:
         85:89:c9:83:e8:f6:87:1b:a5:43:ef:4f:ac:bd:5c:9d:7e:cb:
         b1:0d:8d:3e:10:3a:4e:3a:86:66:d7:30:54:90:96:50:49:d8:
         5c:7c:0e:5c:f3:12:84:14:36:f5:fe:e1:46:18:d0:b1:ed:51:
         ee:12:b0:fb:76:ee:ee:f4:fa:f4:96:7c:b9:11:f9:3d:ad:3f:
         d9:f1:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org