Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa
File:                     34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa (raw, json)
Hash identifier:          nIjFUS4uoYSyWbuLbiiQrvKmtK8pTjDDgNm4sq7feqw=
Subject key identifier:   C3:7C:52:DC:F3:B5:1B:FB:85:76:A0:9E:83:E3:6D:B2:CE:1D:5A:9C
Certificate issuer:       /CN=DB64E4361CC10336A50698A495856E73977BB462
Certificate serial:       50053CEEB2274EA4A0DC243548F612FB5F6C0619
Authority key identifier: DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa
Signing time:             Tue 05 Mar 2024 18:16:41 +0000
ROA not before:           Tue 05 Mar 2024 18:11:41 +0000
ROA not after:            Tue 04 Mar 2025 18:16:41 +0000
asID:                     265741
IP address blocks:        45.172.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:05:3c:ee:b2:27:4e:a4:a0:dc:24:35:48:f6:12:fb:5f:6c:06:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB64E4361CC10336A50698A495856E73977BB462
        Validity
            Not Before: Mar  5 18:11:41 2024 GMT
            Not After : Mar  4 18:16:41 2025 GMT
        Subject: CN=C37C52DCF3B51BFB8576A09E83E36DB2CE1D5A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:ac:0c:ad:8e:e3:b9:9e:1d:94:2d:dc:33:
                    7c:19:48:49:59:a5:b5:c5:d8:50:4b:3c:a2:bf:25:
                    78:6f:34:9c:e5:65:ed:8e:a5:1c:a4:e4:29:5a:49:
                    6e:a7:71:31:15:02:bb:87:bd:b5:5e:6b:95:dd:3f:
                    1d:02:09:6a:59:34:6f:38:c3:62:8b:0f:23:8f:41:
                    c2:28:c2:80:d0:0e:99:b2:e5:2d:79:1c:41:28:1d:
                    84:5d:b0:ed:7b:98:86:bb:6a:f4:fe:53:07:48:7c:
                    46:7e:9b:c9:6d:d0:b3:6c:13:7b:59:f8:23:1d:c1:
                    29:52:28:45:ac:8a:80:f8:25:cb:03:00:53:b7:24:
                    02:73:53:97:bf:f7:a7:bf:d8:f2:1a:6b:d9:20:fb:
                    a9:b0:96:69:ab:fe:4a:ac:0e:1e:76:b1:67:4d:73:
                    93:22:ef:3a:60:f2:77:33:e8:13:86:4d:8a:c3:ba:
                    91:c1:6c:a4:97:33:e8:08:fb:32:60:59:d8:6b:7c:
                    d9:4d:75:96:bb:45:fa:2a:16:25:00:00:91:b2:51:
                    97:ce:e3:c3:a7:fb:c5:49:25:87:a3:3d:c2:a3:21:
                    a6:0e:8c:7d:cd:56:29:ce:74:13:0f:52:f5:35:f2:
                    b0:c1:63:77:67:cc:46:3a:29:6c:1c:cb:b5:63:a2:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:52:DC:F3:B5:1B:FB:85:76:A0:9E:83:E3:6D:B2:CE:1D:5A:9C
            X509v3 Authority Key Identifier:
                keyid:DB:64:E4:36:1C:C1:03:36:A5:06:98:A4:95:85:6E:73:97:7B:B4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/DB64E4361CC10336A50698A495856E73977BB462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB64E4361CC10336A50698A495856E73977BB462.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7C07B7BFE230DE1B21832A31AB591E2BA5D68F1196AD9458487924D34E826632/0/34352e3137322e3130382e302f32322d3234203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:b3:ec:1c:05:cc:a8:f6:ca:83:a1:1a:69:fb:6a:e3:3f:0d:
         07:5c:48:83:9a:3f:8b:e8:f4:86:9e:47:c6:42:2f:de:ba:ee:
         43:6d:76:94:0f:a8:2c:57:16:cb:49:2d:c6:eb:99:2f:24:82:
         34:33:15:b3:58:56:95:34:aa:c4:66:d6:59:62:18:95:7c:15:
         59:38:c8:5a:79:82:7b:42:5a:f8:a4:5e:ce:6e:01:91:0d:2a:
         a8:81:af:fe:f2:6e:07:36:de:af:b9:b3:f5:11:6c:ed:6f:d2:
         b8:db:7f:85:86:0f:ef:2c:6a:2c:4c:31:69:fe:d8:6f:22:1a:
         8e:fa:90:26:1c:8d:39:6e:c3:4f:00:d9:68:50:0b:8c:c8:2f:
         7e:da:08:2f:ad:fd:c8:d9:a9:eb:54:9b:60:24:c0:2e:f2:c1:
         ff:3d:a5:62:52:35:6e:19:67:7d:8e:19:a0:09:88:84:86:c1:
         35:21:23:22:ff:2e:71:3b:4a:4a:25:bf:f1:2f:90:ea:1e:62:
         92:4f:29:81:1c:d7:07:a3:6e:02:d6:c6:e0:8e:7a:59:f2:64:
         f3:27:92:ac:15:c2:80:54:c4:7a:bd:b0:35:ad:b0:6a:8f:74:
         7e:c3:49:2b:8e:fa:f0:0a:82:1f:f7:a3:98:4e:da:62:d1:3b:
         5c:0d:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:57:42 2024 by rpki-client on console-ams.rpki-client.org