Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa
File:                     34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa (raw, json)
Hash identifier:          //rCUjEOoSEJ2vKzLkNly3Bj/QXtZQOOIm8aPqhV90g=
Subject key identifier:   39:95:F9:2A:C9:0A:22:AE:95:57:D7:CC:46:2A:3B:07:5C:67:DC:09
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       0E27B479DBC07E7701C51A077609826150C74E12
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa
Signing time:             Tue 05 Mar 2024 17:58:00 +0000
ROA not before:           Tue 05 Mar 2024 17:53:00 +0000
ROA not after:            Tue 04 Mar 2025 17:58:00 +0000
asID:                     265605
IP address blocks:        45.188.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:27:b4:79:db:c0:7e:77:01:c5:1a:07:76:09:82:61:50:c7:4e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Mar  5 17:53:00 2024 GMT
            Not After : Mar  4 17:58:00 2025 GMT
        Subject: CN=3995F92AC90A22AE9557D7CC462A3B075C67DC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:9c:6f:1d:f0:cb:87:06:62:8f:ef:97:8b:
                    5e:31:e8:02:82:ee:45:c4:b8:9b:01:71:8c:bc:b8:
                    99:c1:34:02:20:a9:8f:37:63:36:82:b8:65:ac:e5:
                    00:75:e1:4b:c3:28:7c:4b:84:35:ba:5d:6d:71:df:
                    b7:45:eb:3b:74:c3:ba:90:83:76:af:2b:95:11:fe:
                    60:05:62:15:31:16:24:14:c3:2b:a7:bf:8d:98:02:
                    42:e0:10:43:6d:3a:ed:0e:57:cc:b3:6e:37:ed:06:
                    82:10:46:33:5b:65:02:84:12:c1:29:5c:a0:f2:0e:
                    f2:35:f6:3a:d2:20:49:65:a2:7e:8c:df:dd:4c:9c:
                    73:5f:da:bc:79:b6:9a:f3:03:80:52:11:b6:49:57:
                    b8:7b:c7:0d:c1:a9:b9:b4:c7:df:7b:b0:9e:1a:85:
                    c7:7a:d4:30:ab:86:81:5b:b6:4a:a3:2c:ab:cb:41:
                    dd:8c:6e:96:86:71:d2:38:08:46:f3:d2:f6:07:ed:
                    d1:09:2f:72:ec:8c:17:74:dc:d9:fe:2c:3a:02:19:
                    45:31:6f:1c:5f:d8:f9:a6:56:e6:3d:b5:3e:3f:4e:
                    3a:62:1a:e3:30:26:e1:f9:89:84:f8:83:5d:55:e7:
                    1e:69:6e:e7:a1:27:94:c1:66:25:58:1a:53:69:7b:
                    80:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:95:F9:2A:C9:0A:22:AE:95:57:D7:CC:46:2A:3B:07:5C:67:DC:09
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32332d3233203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:d0:fb:56:e2:55:0a:40:30:49:6e:1b:95:aa:ba:b7:c1:b8:
         de:38:9a:60:08:12:f7:aa:f9:e6:9c:c8:de:3f:89:5f:b2:8f:
         67:21:87:d1:50:d6:53:e6:20:55:da:62:11:92:87:33:d5:7c:
         f6:95:e7:c7:aa:1a:29:b3:30:05:a9:4c:26:33:8f:f6:14:94:
         f8:26:db:8d:f0:25:06:35:75:b5:4d:7b:5c:4e:6d:69:70:f1:
         d8:b9:56:00:35:e5:87:5f:e1:8d:4c:b0:86:77:27:6b:e6:e4:
         9b:da:30:3a:f4:0c:65:4b:21:01:2b:c1:7c:28:16:6c:c0:98:
         b3:19:74:f0:bf:26:05:22:86:f6:52:e6:af:90:2d:a9:44:a2:
         af:b5:7e:cd:df:15:b0:9e:38:78:d7:95:d2:ff:f5:1c:c4:7b:
         e0:1a:aa:7f:b3:ae:4f:3d:07:1d:38:90:57:fd:a5:39:02:bf:
         4b:ea:be:ca:a3:2d:a7:97:8e:b6:9a:44:c7:30:c1:d5:d5:cc:
         14:84:40:01:0b:59:51:17:68:ef:66:cf:06:24:6b:28:d0:12:
         63:ce:cc:a2:72:80:f2:fe:31:b4:2d:ad:36:4c:9b:98:aa:ce:
         fc:d2:53:10:70:ae:2b:8a:14:ed:2c:59:c1:a8:19:9f:bf:49:
         02:b0:a4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:56 2024 by rpki-client on console-ams.rpki-client.org