Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa
File:                     34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa (raw, json)
Hash identifier:          QyM8fIlQx6OMKisyHw8a4o1QWzhNDJG8snq4crE4B3c=
Subject key identifier:   E3:71:EA:A9:B4:46:63:0F:35:0F:C7:7A:4B:0F:A3:5A:65:BC:CF:13
Certificate issuer:       /CN=D762BD634950F86F90198996258F5C888AE2933E
Certificate serial:       1FD7468BED52FD15EBA29510382D671DD719551E
Authority key identifier: D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa
Signing time:             Tue 05 Mar 2024 18:07:42 +0000
ROA not before:           Tue 05 Mar 2024 18:02:42 +0000
ROA not after:            Tue 04 Mar 2025 18:07:42 +0000
asID:                     266673
IP address blocks:        45.228.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d7:46:8b:ed:52:fd:15:eb:a2:95:10:38:2d:67:1d:d7:19:55:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D762BD634950F86F90198996258F5C888AE2933E
        Validity
            Not Before: Mar  5 18:02:42 2024 GMT
            Not After : Mar  4 18:07:42 2025 GMT
        Subject: CN=E371EAA9B446630F350FC77A4B0FA35A65BCCF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:d0:dc:60:52:42:5c:30:d3:21:3a:a6:7f:
                    84:4e:f1:48:81:4b:e1:bc:e7:cd:c5:4d:a5:c8:2d:
                    ae:b9:d4:97:92:1e:5b:a7:75:0a:e0:0d:b5:4c:8a:
                    99:12:0b:2f:ba:69:16:1c:8f:79:96:b7:85:f8:af:
                    81:36:41:db:76:22:8e:e3:df:45:f7:45:1b:05:2d:
                    48:99:8d:04:3e:f5:db:c8:db:dd:bf:c7:63:ea:d9:
                    6e:7e:e1:67:1e:1b:75:79:5c:96:83:ad:b4:fb:48:
                    5f:85:c6:10:89:2a:04:69:a1:f3:8e:37:2f:63:87:
                    f1:e4:19:59:5b:a9:ec:12:95:39:20:e9:67:79:5d:
                    8b:be:97:5b:d7:c7:d8:f4:4c:4d:48:df:d8:34:8d:
                    f9:d3:f5:34:c0:a0:92:c3:dc:3b:19:fd:60:f6:08:
                    ff:4d:da:34:f7:53:96:da:85:07:c6:39:c4:2a:94:
                    32:3c:81:c3:e4:ee:83:cf:14:ec:47:f5:c6:c3:4e:
                    94:4a:78:4e:19:ea:c1:8c:93:41:ee:5d:be:4a:f2:
                    be:a8:e9:e3:77:12:41:3c:2c:8b:f8:b3:3f:b6:69:
                    95:fc:e4:11:41:1f:d3:6d:ce:c4:fb:5b:20:b2:29:
                    51:9b:fa:49:5f:da:82:0a:d3:35:f3:04:f5:cc:b9:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:71:EA:A9:B4:46:63:0F:35:0F:C7:7A:4B:0F:A3:5A:65:BC:CF:13
            X509v3 Authority Key Identifier:
                keyid:D7:62:BD:63:49:50:F8:6F:90:19:89:96:25:8F:5C:88:8A:E2:93:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/D762BD634950F86F90198996258F5C888AE2933E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D762BD634950F86F90198996258F5C888AE2933E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DB178DFE5151CFC221344705CADC8ED3B7C776AF81EB4C9E2BFED4BB25CADDE/0/34352e3232382e3133362e302f32322d3234203d3e20323636363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:f5:ed:32:13:0f:5a:5b:d6:e7:fa:68:d3:ee:f8:1b:23:3e:
         a9:fc:33:17:43:9b:7d:6e:7e:bb:ea:00:32:5c:ce:27:99:33:
         f4:5e:94:f2:f4:f9:19:0e:0d:be:03:fd:a0:1a:67:43:a6:0b:
         04:7c:38:e1:84:5b:1d:e1:bc:ff:69:71:a3:d8:25:a2:52:a2:
         8a:42:17:49:58:ac:0c:fe:7a:c8:a3:4b:45:ab:76:59:0c:50:
         7e:26:89:ef:d3:e9:dd:7d:b3:9b:e2:8c:96:b2:8b:06:c7:79:
         0f:c2:8f:fd:a6:c1:c2:7c:fe:46:f5:30:39:f4:c2:5f:39:da:
         70:b2:3e:de:85:3f:c6:80:97:dc:56:66:ca:25:0f:be:9d:3d:
         e1:9c:53:c3:4b:1b:67:26:0c:5a:ed:55:1f:41:9e:a1:8e:c8:
         64:4d:5c:b5:07:b1:fa:67:52:09:34:9c:0c:b4:96:b9:fe:6b:
         7c:3d:89:e6:ee:f4:61:35:42:1a:ad:e6:40:5a:75:b4:78:5f:
         e7:8e:f5:88:3a:15:f0:f5:d9:f5:e6:a0:0f:8b:09:4f:ad:15:
         49:0e:8c:50:84:72:d6:3f:a9:dd:b8:ad:98:d8:0a:71:9f:74:
         46:80:48:d5:76:10:e0:27:a8:96:f8:f2:30:78:2e:47:72:9d:
         c1:bd:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:08 2024 by rpki-client on console-fra.rpki-client.org