Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa
File:                     34352e372e3133322e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier:          977W4OUOe7T6Lsuw2G/aubAEUcviaUPYa1F/Q/7HmV8=
Subject key identifier:   73:68:B7:09:F2:FD:50:8B:DB:03:DF:4E:A5:B4:25:07:7D:78:5A:56
Certificate issuer:       /CN=04C9538FA5038299A42B9882163AF36632AD588F
Certificate serial:       1CEBA4224A9C647C41D81B143E7D687F7F3D66AC
Authority key identifier: 04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa
Signing time:             Tue 05 Mar 2024 17:47:46 +0000
ROA not before:           Tue 05 Mar 2024 17:42:46 +0000
ROA not after:            Tue 04 Mar 2025 17:47:46 +0000
asID:                     267857
IP address blocks:        45.7.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:eb:a4:22:4a:9c:64:7c:41:d8:1b:14:3e:7d:68:7f:7f:3d:66:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C9538FA5038299A42B9882163AF36632AD588F
        Validity
            Not Before: Mar  5 17:42:46 2024 GMT
            Not After : Mar  4 17:47:46 2025 GMT
        Subject: CN=7368B709F2FD508BDB03DF4EA5B425077D785A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8d:40:f3:3b:61:54:85:66:f6:71:8e:75:f8:
                    5b:18:81:10:56:bd:93:23:b6:a5:ad:b8:4b:3d:bf:
                    42:43:e9:4b:8e:b2:f4:89:c2:1b:1a:4b:8d:95:0e:
                    79:d2:04:3a:3b:e4:9b:b1:d6:0a:ff:10:c9:da:0e:
                    5e:fa:ac:4b:95:ec:9e:d2:7d:f6:50:c5:e9:95:5e:
                    0c:6e:dd:1b:cb:36:f2:fd:b7:6f:8a:62:ee:51:38:
                    a9:77:2a:dd:a4:69:8d:b3:94:24:ad:45:d4:ac:3f:
                    3d:6d:c4:ef:e6:1b:a8:59:5d:e2:f9:5b:14:e2:1d:
                    2b:36:e7:7c:c8:5c:94:1e:8d:d7:5d:a9:33:a4:4d:
                    8e:e4:84:25:97:f3:15:45:e1:8c:e4:06:d0:e1:d8:
                    d4:a9:bc:28:32:82:76:6a:8c:01:d3:ca:d6:d8:92:
                    a9:57:62:8f:57:28:de:09:44:b3:4d:81:09:7c:74:
                    24:f0:99:1d:e8:d0:1c:c9:b0:a2:03:9c:30:5a:8d:
                    70:28:b5:ae:ae:8c:eb:73:d5:12:44:3b:9f:4f:cb:
                    4e:1e:2b:49:af:1c:01:6d:cc:b0:4d:30:46:c5:bb:
                    6d:ef:92:d2:17:c9:17:0b:c5:4c:7a:de:60:a5:c7:
                    dc:14:c5:78:cb:ef:d9:31:7a:2c:bc:fb:80:57:64:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:68:B7:09:F2:FD:50:8B:DB:03:DF:4E:A5:B4:25:07:7D:78:5A:56
            X509v3 Authority Key Identifier:
                keyid:04:C9:53:8F:A5:03:82:99:A4:2B:98:82:16:3A:F3:66:32:AD:58:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/04C9538FA5038299A42B9882163AF36632AD588F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04C9538FA5038299A42B9882163AF36632AD588F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74C85794F885FCC27D537B204A5BBAD25FE6117EA61DE281F7F83F8833D85A9B/0/34352e372e3133322e302f32322d3232203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:aa:ab:61:69:fa:99:03:7e:a4:55:b5:6a:b2:b2:08:1a:08:
         1e:00:0a:40:dd:17:3e:c4:e2:e1:45:76:7e:08:5d:e7:b8:71:
         96:2c:0d:3c:67:00:de:81:eb:d1:6a:8c:62:07:91:d7:0f:44:
         f6:3a:29:87:70:07:59:99:dc:b0:d0:ae:36:cc:a7:27:46:61:
         42:d9:6a:b9:8b:82:13:ab:49:6e:05:e4:eb:04:63:29:a2:9c:
         73:f6:ce:a7:b7:a8:a4:47:63:ad:d0:1f:85:91:a5:19:6e:77:
         e6:57:c8:44:32:c4:38:8b:cd:78:4d:87:74:00:db:5d:7e:94:
         32:28:ce:2d:47:ab:c5:00:95:4c:a5:90:7b:f3:02:cc:01:85:
         e4:27:c6:ad:2d:cd:75:c9:d7:92:1c:fc:3d:c9:00:b3:87:32:
         77:14:18:e7:13:07:ee:85:6a:75:64:1a:51:99:45:36:6e:8a:
         1c:d9:7e:c9:64:cd:d8:e4:bd:0d:f7:bb:0d:0a:3b:ac:6f:15:
         d9:d2:b0:2a:fa:fe:c9:01:16:b6:10:db:ab:76:cf:e4:5b:41:
         40:fd:7f:9e:cb:c7:79:1b:a6:d5:dd:a8:ab:72:05:cb:d2:97:
         85:b8:db:de:2b:fe:c6:75:76:d1:60:b7:80:f5:41:34:30:17:
         01:a6:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 10:21:56 2024 by rpki-client on console-fra.rpki-client.org