Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa
File:                     34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa (raw, json)
Hash identifier:          wThVMtD+T172ufRYxoijT/y69GgT8eXaaykBaKSaxE0=
Subject key identifier:   F0:DC:67:2E:2B:A3:08:91:51:4A:DB:A5:31:DE:FD:EC:EB:DA:7E:85
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       4A8A939AB98DD2280D1B8849C06E64762A3BBD3F
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa
Signing time:             Tue 05 Mar 2024 17:40:18 +0000
ROA not before:           Tue 05 Mar 2024 17:35:18 +0000
ROA not after:            Tue 04 Mar 2025 17:40:18 +0000
asID:                     266684
IP address blocks:        45.228.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8a:93:9a:b9:8d:d2:28:0d:1b:88:49:c0:6e:64:76:2a:3b:bd:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Mar  5 17:35:18 2024 GMT
            Not After : Mar  4 17:40:18 2025 GMT
        Subject: CN=F0DC672E2BA30891514ADBA531DEFDECEBDA7E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b0:ea:6e:9c:b3:f0:e7:ad:8f:21:7f:bb:eb:
                    fd:f9:d3:72:4d:34:76:0c:e7:d1:e0:e7:95:14:1b:
                    77:44:6d:05:cc:a9:62:1c:b7:14:a9:05:e7:c0:71:
                    76:31:4a:c6:49:ce:cd:19:e8:8c:d8:01:57:cf:dc:
                    bc:6b:f6:d8:5a:31:8a:4f:47:38:6d:e7:f4:97:59:
                    33:c8:42:fe:50:d5:c3:82:d2:19:68:d0:f8:8b:42:
                    7f:29:96:e9:cd:44:b8:2d:49:fa:18:ee:91:2f:34:
                    a2:be:f0:44:c1:74:39:f0:26:be:ed:42:fb:83:91:
                    aa:30:85:45:1c:c9:15:d6:e2:e0:8b:e6:79:c6:3a:
                    ae:47:ec:70:30:05:0d:bc:12:3b:c4:7b:2e:58:d4:
                    fa:fd:00:33:b6:fb:14:1f:84:46:36:b3:df:33:eb:
                    f1:ee:20:13:74:c2:b3:63:b9:0e:32:89:f6:da:09:
                    20:15:f3:a9:f7:ef:41:91:2f:65:b0:cb:65:65:1d:
                    c1:0e:19:ef:0d:be:7c:34:a4:3d:10:3d:6d:5f:58:
                    07:30:8f:55:2d:78:ea:a1:93:e4:cc:39:50:7e:e6:
                    c0:a9:74:fe:d8:43:16:dd:94:13:c4:aa:f7:02:c6:
                    a9:47:72:15:25:0a:6f:db:a0:e7:1a:b0:e6:52:64:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DC:67:2E:2B:A3:08:91:51:4A:DB:A5:31:DE:FD:EC:EB:DA:7E:85
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32322d3232203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:8c:9d:f8:80:cf:4e:36:53:ac:8b:f8:25:c6:91:07:ab:13:
         54:c5:4b:a0:6f:c9:49:39:41:c6:9a:75:18:26:c5:53:37:1b:
         ad:8c:4b:82:66:78:d0:47:52:e1:ac:e5:2c:da:b8:2e:ae:80:
         b8:f6:b6:78:da:65:dc:1f:a2:75:4e:5f:b0:ce:db:ee:da:cd:
         6f:d8:e9:ee:3f:7e:65:66:07:fc:30:40:c4:b8:31:f6:c3:71:
         ec:3f:a4:18:cb:f1:74:c5:ae:13:3a:f1:f5:f3:63:00:48:11:
         97:35:26:94:f3:11:aa:8d:1e:36:3d:97:f5:57:82:0d:66:d6:
         01:d6:1d:cf:64:c5:a9:b4:89:65:5f:59:0f:3e:e6:f4:28:46:
         2e:56:d7:1e:ee:1d:7a:e7:27:96:37:31:3f:28:33:4f:45:db:
         30:74:ab:5a:de:15:38:df:ce:14:fa:bf:34:ba:0d:e5:74:4c:
         c6:a1:de:8a:aa:45:24:96:39:7c:68:46:a0:49:e0:db:2c:d7:
         fd:cf:0d:0e:7f:e0:db:94:be:2a:1f:4d:f0:4c:a3:ae:3b:f5:
         c1:b6:d5:65:aa:e1:6c:0f:de:5e:57:97:0a:b6:b3:1f:99:92:
         6c:45:99:7b:f3:07:90:bd:9b:9d:e8:95:8b:94:d5:e5:6c:39:
         91:a2:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:01 2024 by rpki-client on console-ams.rpki-client.org