Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/34352e3136392e3139322e302f32322d3234203d3e203532343731.roa
File:                     34352e3136392e3139322e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          Yl3FJw9Nqxj5qdFIWIIzwrqiDu1+YO27En+nUGgtxBE=
Subject key identifier:   8F:39:19:B6:F8:53:68:77:54:B4:DF:A6:39:39:33:93:41:55:6F:52
Certificate issuer:       /CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
Certificate serial:       263AFD2EF735671FC4F6C0A4463479DE88AC097A
Authority key identifier: 2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/34352e3136392e3139322e302f32322d3234203d3e203532343731.roa
Signing time:             Tue 05 Mar 2024 18:23:14 +0000
ROA not before:           Tue 05 Mar 2024 18:18:14 +0000
ROA not after:            Tue 04 Mar 2025 18:23:14 +0000
asID:                     52471
IP address blocks:        45.169.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3a:fd:2e:f7:35:67:1f:c4:f6:c0:a4:46:34:79:de:88:ac:09:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6C417EA637B9F50D220D62AE4762455E2FD4C7
        Validity
            Not Before: Mar  5 18:18:14 2024 GMT
            Not After : Mar  4 18:23:14 2025 GMT
        Subject: CN=8F3919B6F853687754B4DFA63939339341556F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:7e:ed:43:52:e2:fe:ab:ba:57:36:6a:61:
                    3b:3b:ad:6f:d9:5d:36:f7:d3:8f:57:2b:0c:44:60:
                    5f:fc:fa:5d:4f:8a:9c:ea:8f:4c:05:92:e8:6c:93:
                    04:4d:84:14:99:fe:c7:84:c0:54:9e:e8:fc:92:ed:
                    12:a2:c6:22:97:d4:09:ff:35:51:b1:a0:0c:fa:8b:
                    14:b9:1a:15:72:9f:00:1d:51:c5:1a:ae:42:93:46:
                    f8:e3:44:53:72:e6:c1:52:65:df:5e:98:88:ed:01:
                    41:1c:bd:8e:64:2a:13:80:49:76:a5:46:5e:d3:1d:
                    b2:0c:15:b1:1f:fb:0c:9d:5e:e1:ee:6b:4a:f5:f9:
                    bc:85:84:b4:a9:00:0a:eb:97:09:c9:73:42:13:16:
                    15:99:65:e5:69:58:99:8e:07:35:41:2d:00:21:b3:
                    55:ba:26:c5:cb:48:f1:ea:bb:0f:89:20:dd:9c:24:
                    e1:49:0d:c0:c0:0b:a0:ba:ab:f1:de:fd:79:11:bd:
                    5b:51:b1:08:32:bd:30:a0:db:6e:c8:54:fe:60:47:
                    09:35:75:f5:c3:53:2e:c1:b2:cd:c6:8d:e4:57:40:
                    61:c9:73:1a:81:2e:41:4c:7f:de:4e:cb:8b:3b:b0:
                    e8:84:24:ef:e9:aa:8a:48:81:d5:40:62:83:44:38:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:39:19:B6:F8:53:68:77:54:B4:DF:A6:39:39:33:93:41:55:6F:52
            X509v3 Authority Key Identifier:
                keyid:2A:6C:41:7E:A6:37:B9:F5:0D:22:0D:62:AE:47:62:45:5E:2F:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6C417EA637B9F50D220D62AE4762455E2FD4C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757BAD82C1507A948E8184A59EDE8AF15F432F637F2AD03FB7668CC9C1D53CAA/0/34352e3136392e3139322e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:82:41:81:5f:92:86:42:72:49:77:5f:25:93:08:21:3f:1e:
         ff:e9:1e:c6:5c:8b:e2:c1:ae:75:1a:87:bf:60:f8:77:70:08:
         59:5d:55:f5:25:11:ab:f6:b5:ce:cf:c7:f5:2f:c0:2c:96:60:
         01:f5:1d:e8:1c:39:13:3f:10:df:f1:d4:14:fc:33:16:fe:fe:
         df:0a:4d:0e:99:b2:fd:ae:5b:61:42:08:bf:43:2e:19:39:4f:
         20:71:c5:c0:9d:27:7f:2f:3f:0f:ab:53:23:56:cc:11:56:25:
         86:a9:a7:9a:17:0c:c9:9b:a7:82:c0:67:81:b3:f8:72:55:f6:
         4d:8e:df:2a:c2:ed:aa:75:cd:8a:93:6f:85:68:06:83:32:73:
         99:d8:41:91:54:57:eb:6d:41:38:4e:e3:93:7a:d3:1d:12:59:
         ff:e3:65:60:35:b6:74:bc:e6:65:13:34:fa:93:b1:fd:6f:3b:
         55:ef:c8:26:cf:a1:8d:02:b6:0d:7d:2e:b3:72:5c:3e:99:58:
         26:41:d2:a3:3a:17:c9:09:c2:f2:e4:46:fd:57:2b:73:61:13:
         e7:c0:84:d7:11:f1:60:43:03:57:ff:07:a7:5e:5c:f0:05:16:
         08:8d:9d:8b:f6:ef:a4:56:3b:01:f3:67:2b:04:d8:de:02:90:
         a7:7e:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:23:57 2024 by rpki-client on console-fra.rpki-client.org