Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa
File:                     34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa (raw, json)
Hash identifier:          zd3DVG/526jxjewviQDrjSdnQycdrbZMO/RUNN8S8kk=
Subject key identifier:   34:AB:67:98:88:55:5F:4A:25:FA:0F:07:9B:B8:53:DB:1E:F9:C1:5A
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       7F8BDBDAFADD8D261DBF645E3412A932F62192D2
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa
Signing time:             Tue 05 Mar 2024 17:58:01 +0000
ROA not before:           Tue 05 Mar 2024 17:53:01 +0000
ROA not after:            Tue 04 Mar 2025 17:58:01 +0000
asID:                     265605
IP address blocks:        45.188.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8b:db:da:fa:dd:8d:26:1d:bf:64:5e:34:12:a9:32:f6:21:92:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Mar  5 17:53:01 2024 GMT
            Not After : Mar  4 17:58:01 2025 GMT
        Subject: CN=34AB679888555F4A25FA0F079BB853DB1EF9C15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:50:49:8e:a4:5b:2d:3c:3a:d5:07:79:d2:
                    af:df:03:54:bb:d7:f3:d4:d5:4e:b3:f2:eb:de:64:
                    37:19:d2:7f:80:0f:6e:2f:4e:fd:85:bd:ec:6f:82:
                    bd:29:72:c8:bf:6e:e6:3e:3c:90:84:78:a3:01:c4:
                    1c:e5:ba:b1:3a:3f:12:16:1b:7f:81:c9:03:41:56:
                    37:2d:dd:83:79:89:4b:37:5e:97:75:eb:48:59:97:
                    16:96:49:eb:4a:f5:58:db:db:b8:63:33:c2:22:dd:
                    a4:a5:d8:bc:ae:4a:bb:8c:10:03:d5:a1:4d:41:54:
                    2e:ce:f9:f1:e4:24:8d:a8:21:b5:d6:f8:2f:ba:22:
                    10:93:4c:4e:9d:02:53:23:9f:81:77:9a:b4:60:0d:
                    f4:2a:62:8b:3b:c6:04:0c:17:d0:59:c2:35:e3:8d:
                    08:f1:5a:8c:b5:4e:cc:36:d3:bc:c4:2b:b3:d1:2e:
                    fc:6d:b2:b2:4b:ce:e0:17:84:dd:2f:1c:ca:73:e9:
                    41:3f:5d:75:c2:0f:56:f2:a9:c6:fb:db:eb:56:85:
                    ce:90:a0:70:92:6f:ae:c8:56:20:db:23:2c:79:2d:
                    18:a8:9e:b6:10:44:7e:65:97:e2:fb:dc:57:c1:b1:
                    b3:1a:10:9a:ed:10:f8:5d:f3:e4:9d:ce:56:bb:a9:
                    bc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AB:67:98:88:55:5F:4A:25:FA:0F:07:9B:B8:53:DB:1E:F9:C1:5A
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a1:6b:34:9b:40:2f:5f:f5:bd:88:ff:e9:f1:37:07:a5:aa:
         d9:d5:4c:17:c0:14:ed:92:72:31:e6:59:bd:ee:0d:a6:92:31:
         f2:20:f7:c5:44:74:28:48:d1:8c:d0:05:2e:a8:75:51:5b:43:
         7a:38:b7:34:8f:f9:a0:e4:fb:16:ea:c8:4e:3d:fe:fe:b8:90:
         53:66:9e:e6:31:e9:ac:57:69:72:ec:8b:47:fe:a0:6f:bb:f2:
         1c:a3:98:9b:ec:6f:26:71:6d:7e:e6:3b:97:f4:4f:03:fb:b3:
         37:12:05:d4:56:ed:42:a8:c6:36:8e:30:1b:19:ef:f8:4f:91:
         f8:9e:c4:db:e0:92:ef:24:56:0b:46:a7:77:96:3a:78:fa:1a:
         fc:05:fe:e7:14:fe:9e:d6:6c:3c:ae:1d:b6:96:b9:03:c5:7e:
         70:4d:3b:17:b3:99:2d:fe:0e:da:46:ac:77:17:5e:90:a7:9d:
         e3:20:d2:06:f6:4b:43:8c:01:e1:46:8f:79:4c:71:97:7f:1c:
         ca:ca:c6:74:de:6a:80:87:d1:17:ff:09:a2:e9:92:2b:5a:8d:
         ed:8d:e5:43:52:c0:62:30:a7:9b:84:3b:36:43:78:ea:9c:28:
         56:3e:16:20:b5:35:a7:69:d8:4a:d2:1e:58:dd:dd:d1:4f:4b:
         95:38:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:46 2024 by rpki-client on console-fra.rpki-client.org