Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32322d3232203d3e20323636373535.roa
File:                     34352e3233332e36342e302f32322d3232203d3e20323636373535.roa (raw, json)
Hash identifier:          rclTUTqQfmmVk9eEbdUWJz18dOeawCVMifZn3xKYol0=
Subject key identifier:   83:87:FE:D0:7C:9A:B9:87:26:11:3E:F1:F9:9C:10:B0:15:33:58:DA
Certificate issuer:       /CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
Certificate serial:       542EBD01E6F54AEBAAAA14632CBBDF07C850FAA2
Authority key identifier: 17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32322d3232203d3e20323636373535.roa
Signing time:             Tue 05 Mar 2024 18:14:35 +0000
ROA not before:           Tue 05 Mar 2024 18:09:35 +0000
ROA not after:            Tue 04 Mar 2025 18:14:35 +0000
asID:                     266755
IP address blocks:        45.233.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2e:bd:01:e6:f5:4a:eb:aa:aa:14:63:2c:bb:df:07:c8:50:fa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17444832D4DFC5B5F0EDB45E0DD0380E36A684B7
        Validity
            Not Before: Mar  5 18:09:35 2024 GMT
            Not After : Mar  4 18:14:35 2025 GMT
        Subject: CN=8387FED07C9AB98726113EF1F99C10B0153358DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2a:e2:91:bf:13:9d:0c:73:d2:bb:cd:d2:0f:
                    c4:7e:51:1b:89:af:c9:5c:fc:fd:89:4b:76:47:1c:
                    06:9a:2b:bc:38:fa:71:3b:04:25:a7:6e:9f:95:05:
                    7a:8e:97:69:18:f5:7c:4d:49:2f:37:1e:21:e7:ad:
                    9c:98:fb:18:60:18:8f:25:56:a4:43:d2:a7:c6:e7:
                    f9:34:bf:3a:76:79:1a:04:cc:bd:ea:07:c4:fd:30:
                    12:93:6e:ce:f3:15:66:24:0d:dd:14:36:1c:d2:5d:
                    1e:34:df:e9:07:8c:7d:5e:05:57:bf:1d:64:f7:47:
                    d5:ba:63:c3:21:38:96:86:fb:81:92:57:ed:61:f8:
                    49:aa:8e:73:c2:88:d1:7a:be:c3:7d:ff:8f:2a:66:
                    f9:de:72:54:5c:a9:76:e5:c1:89:a2:cc:d1:2d:c4:
                    24:72:86:5e:34:09:46:9b:1f:6d:aa:85:3d:4d:64:
                    de:14:57:a7:59:97:83:72:ec:96:95:70:e1:1d:5b:
                    21:53:ef:85:91:50:53:a5:46:cd:95:25:2a:14:b7:
                    cc:bc:46:28:81:95:04:9e:d1:b0:46:66:63:93:f0:
                    04:8c:c0:11:cf:b2:77:44:08:a4:e8:d6:cb:27:df:
                    86:39:6f:f1:27:31:12:a4:49:a4:86:cf:e1:3d:da:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:FE:D0:7C:9A:B9:87:26:11:3E:F1:F9:9C:10:B0:15:33:58:DA
            X509v3 Authority Key Identifier:
                keyid:17:44:48:32:D4:DF:C5:B5:F0:ED:B4:5E:0D:D0:38:0E:36:A6:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17444832D4DFC5B5F0EDB45E0DD0380E36A684B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/760CC0DA4C90C1F0023C05DFEE0070E5744BD89B60F4CD9C02EF81695E71099D/0/34352e3233332e36342e302f32322d3232203d3e20323636373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:75:77:e4:97:b4:c5:c2:9c:f5:f5:fa:7a:19:d5:38:4b:4a:
         cd:77:3b:55:c0:12:0c:0a:d1:1a:da:1b:45:0b:32:b1:10:28:
         d9:ef:33:cd:89:54:d2:77:76:5d:58:79:81:f3:7f:a5:8a:7f:
         20:5c:f8:e2:42:2f:53:1e:f6:d4:3b:6e:38:cd:33:4a:26:91:
         e9:14:dc:2b:3c:11:da:c9:40:6f:b5:5b:01:cd:76:9e:aa:15:
         61:54:33:b5:bd:ee:0b:aa:f0:ba:91:e5:32:f9:d3:29:28:80:
         67:86:79:5b:06:26:c9:1b:3b:74:c8:b2:2b:33:68:58:92:0c:
         ef:fe:14:8f:ab:44:d4:3e:22:c5:e3:cd:18:16:3d:9f:3d:32:
         1b:25:36:6f:d8:88:e1:1f:b6:21:41:5c:67:8b:7c:5a:25:63:
         8f:0b:31:78:06:b5:4e:d1:16:0b:95:f9:22:c6:12:3f:25:75:
         2b:10:54:02:f1:39:a0:cb:2c:b0:fd:f4:1f:71:02:38:d4:d7:
         13:41:6e:82:0d:33:1a:d7:4c:5a:2e:07:ec:13:65:ca:2f:1a:
         a6:2f:f5:4e:c8:81:b6:79:c6:7b:08:db:b7:9f:69:dd:e8:f5:
         b3:58:ef:4c:86:f6:18:db:7d:b3:b5:96:76:68:0e:6e:ff:92:
         e2:a1:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org