Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136372e302f32342d3234203d3e20323635363035.roa
File:                     34352e3138382e3136372e302f32342d3234203d3e20323635363035.roa (raw, json)
Hash identifier:          8RDZtG/o1PzpK/IUVCx0rjF0jSBDReNt1N4gSzeikjg=
Subject key identifier:   9D:17:69:5A:3D:2F:D8:31:A7:84:53:FF:09:89:0B:91:76:5B:93:A7
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       731C9C9E3F7CA6AB37130D47289BBFE653F39500
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136372e302f32342d3234203d3e20323635363035.roa
Signing time:             Tue 05 Mar 2024 17:58:02 +0000
ROA not before:           Tue 05 Mar 2024 17:53:02 +0000
ROA not after:            Tue 04 Mar 2025 17:58:02 +0000
asID:                     265605
IP address blocks:        45.188.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl
                          rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1c:9c:9e:3f:7c:a6:ab:37:13:0d:47:28:9b:bf:e6:53:f3:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Mar  5 17:53:02 2024 GMT
            Not After : Mar  4 17:58:02 2025 GMT
        Subject: CN=9D17695A3D2FD831A78453FF09890B91765B93A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:b6:c9:b1:63:dc:4d:90:b1:01:60:96:ad:
                    9d:12:5f:37:ba:b0:a0:f4:d0:25:fa:61:bf:bd:76:
                    ae:54:43:fa:83:c3:b5:51:55:1a:bf:a3:88:42:87:
                    e0:b6:d9:b8:34:16:40:d0:75:fa:e8:90:0a:a3:82:
                    67:98:c5:57:0c:53:29:5c:6e:59:1f:0d:cf:49:b1:
                    6b:be:c5:75:dc:c2:c9:12:8f:be:3e:bc:31:ba:ec:
                    b1:ec:2e:92:17:de:b2:d0:b2:b3:41:50:58:54:e4:
                    c1:06:f1:54:eb:89:71:a2:a1:5a:99:72:a0:17:b5:
                    9e:66:b8:02:69:84:81:bd:a2:a2:dd:8a:0e:cb:65:
                    f8:b8:ba:3a:6a:f9:6e:b6:4e:1d:24:e9:94:41:a0:
                    37:50:71:8d:94:6e:89:62:ae:27:2f:da:d7:ad:f6:
                    0b:76:f5:98:ba:f3:8c:3a:b8:73:25:43:dd:6b:c2:
                    e7:77:33:14:e3:86:22:da:84:0b:3a:b4:7b:2a:50:
                    fd:6a:3c:3d:ab:45:89:cf:90:7b:44:0e:3b:16:4e:
                    b0:e7:7c:7e:bc:e9:ba:4b:91:9f:a4:e5:32:ff:ad:
                    c6:e2:f2:11:60:9d:46:d7:70:da:e2:7e:b1:8f:3a:
                    d1:88:02:10:c8:e1:e5:59:20:e8:e6:7d:38:5b:ce:
                    ad:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:17:69:5A:3D:2F:D8:31:A7:84:53:FF:09:89:0B:91:76:5B:93:A7
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136372e302f32342d3234203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:de:d0:fd:c8:c0:74:b2:a5:85:e7:22:55:ae:c8:38:c3:46:
         5b:4c:9c:be:cf:de:18:be:3f:1f:da:ff:8a:14:1c:e5:b4:25:
         df:28:17:d4:b2:3b:f3:dc:32:2c:c4:0e:92:52:cc:59:17:b8:
         ad:ac:b8:19:6e:dc:3e:04:4f:4b:8d:7f:c9:2f:91:46:6f:0f:
         70:11:1e:3f:42:b0:4c:0a:54:3d:02:ea:81:d2:72:a5:55:af:
         4b:cb:9a:54:41:fe:ef:6f:79:5d:79:af:c6:24:c0:c4:46:84:
         72:13:ae:7d:f9:80:7e:1d:7b:d0:cb:2f:c9:ea:bc:a9:ac:4c:
         a5:1c:f5:8b:65:8b:0d:f0:75:b7:96:eb:dc:d1:1b:ee:5d:2a:
         81:ee:ee:95:88:23:2e:e6:ad:1c:b3:7b:a9:74:6a:15:fa:67:
         bb:b7:b8:3a:16:f7:c3:e7:a8:d7:f1:3b:46:08:f0:eb:f2:94:
         8d:d9:81:7a:3d:67:53:df:08:93:13:b5:5f:af:38:67:a5:21:
         9e:e4:18:3e:e8:30:9d:ab:6d:00:2b:5e:e4:92:e8:99:4f:5b:
         1e:bd:77:26:57:14:4d:52:82:77:8b:47:69:92:b9:52:ce:d3:
         cf:c3:6f:1a:37:6e:f3:9a:0e:66:74:d3:9c:29:36:68:3a:c9:
         a7:f9:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org