Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32332d3233203d3e20323635363035.roa
File:                     34352e3138382e3136362e302f32332d3233203d3e20323635363035.roa (raw, json)
Hash identifier:          V2Ldi6Ms1FdbUnMwdrhRsiimbL/95uSYZDUyZ0wgW+A=
Subject key identifier:   B6:3E:F7:26:D1:0E:36:14:B6:16:C2:90:85:E3:02:49:76:A4:CA:AC
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       2671EFB7B584C03333B2E88D354CB854043F3668
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32332d3233203d3e20323635363035.roa
Signing time:             Tue 05 Mar 2024 17:58:01 +0000
ROA not before:           Tue 05 Mar 2024 17:53:01 +0000
ROA not after:            Tue 04 Mar 2025 17:58:01 +0000
asID:                     265605
IP address blocks:        45.188.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:71:ef:b7:b5:84:c0:33:33:b2:e8:8d:35:4c:b8:54:04:3f:36:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Mar  5 17:53:01 2024 GMT
            Not After : Mar  4 17:58:01 2025 GMT
        Subject: CN=B63EF726D10E3614B616C29085E3024976A4CAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:e9:99:b4:d6:e8:57:6d:b4:97:49:b5:f7:
                    18:c5:71:56:72:12:54:da:c6:d6:ba:84:43:33:73:
                    2c:0e:6e:5d:b3:34:10:d7:0a:db:3d:7c:c7:18:cf:
                    a1:d7:57:36:e1:0f:5c:5a:5d:d4:c7:e8:43:0f:48:
                    e1:61:08:0f:0e:40:5b:5d:70:dc:7b:f0:20:6f:c9:
                    c3:50:5e:ac:8e:f0:a6:ca:82:a5:07:54:d6:72:71:
                    4d:d6:62:68:1d:5c:41:bd:e7:24:7e:21:f0:72:51:
                    66:5e:51:1a:04:28:6c:3d:0f:64:46:79:7d:27:e2:
                    c3:a3:a6:95:ec:bb:b4:5c:19:00:19:fc:27:04:39:
                    30:11:c8:eb:6b:5b:64:f0:76:e4:cf:46:74:6c:76:
                    50:aa:43:91:d3:fc:1d:f5:d8:cf:d9:a2:74:2e:f9:
                    92:51:46:05:e2:39:7b:9d:7c:fa:b2:4a:f1:b0:cf:
                    ea:4d:33:4e:dc:c2:89:74:69:22:d7:20:8d:64:7c:
                    4c:f7:07:22:63:8e:61:30:ed:2a:99:c4:63:ba:8b:
                    83:ea:32:2a:f0:a0:69:6d:74:69:56:b2:93:0d:f8:
                    3a:8d:ab:32:25:79:6c:5b:44:d4:c2:e5:71:63:78:
                    73:04:55:04:52:18:de:99:2f:9f:04:e2:c7:dc:62:
                    56:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3E:F7:26:D1:0E:36:14:B6:16:C2:90:85:E3:02:49:76:A4:CA:AC
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32332d3233203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:15:32:f4:3f:9a:2f:ec:33:bf:f1:01:a6:f6:69:74:27:
         16:77:35:12:e1:7a:99:6a:97:e7:32:d5:6a:07:93:cc:df:c6:
         2b:83:3b:e2:79:dc:7e:c9:2b:f0:bf:3c:55:fc:bd:79:b8:8d:
         ea:e0:7e:7f:64:66:e1:84:53:d8:11:10:71:30:65:38:b9:6b:
         72:76:85:d3:76:4c:d4:0f:74:eb:d9:91:83:08:11:97:0b:7f:
         d0:95:63:f1:ef:64:07:86:ba:80:e8:5f:1e:f0:25:55:b0:3a:
         2f:98:fa:cf:bb:26:d9:a6:1a:77:28:7d:d9:7c:91:64:74:5e:
         8a:36:1f:b8:a1:fb:4f:6d:70:80:b4:4d:fb:1f:3b:4c:bb:2f:
         e7:9d:a4:28:f9:b3:8e:ea:34:7d:23:e2:8c:d9:01:42:6b:0d:
         8d:d9:d6:20:33:5d:8a:33:7c:7d:4e:9f:46:59:ac:d2:ce:25:
         4a:97:a5:0b:4c:6b:83:2c:ee:9c:8e:f0:02:1c:f9:f0:a6:af:
         7d:07:c0:f7:26:b1:e5:35:25:10:b3:3f:e0:b5:11:d6:49:19:
         e2:9a:5e:a7:29:39:60:98:ee:68:77:83:41:be:7f:fe:de:67:
         2d:f4:c5:8c:95:3e:f9:19:c8:92:24:de:67:32:cf:bf:ce:90:
         fb:28:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org