Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/34352e3137342e38342e302f32322d3235203d3e203238333837.roa
File:                     34352e3137342e38342e302f32322d3235203d3e203238333837.roa (raw, json)
Hash identifier:          ufafvDkmcyCoioa9teGXCDzgb92M3h36/Icw/WyT1u0=
Subject key identifier:   06:28:2D:52:D4:79:80:51:45:64:50:B6:01:6E:B2:FA:1E:7F:8E:09
Certificate issuer:       /CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
Certificate serial:       5CBEBABADFE35F76356A5D2CE5C2505414B3325D
Authority key identifier: A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/34352e3137342e38342e302f32322d3235203d3e203238333837.roa
Signing time:             Wed 08 May 2024 16:00:00 +0000
ROA not before:           Wed 08 May 2024 15:55:00 +0000
ROA not after:            Wed 07 May 2025 16:00:00 +0000
asID:                     28387
IP address blocks:        45.174.84.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:be:ba:ba:df:e3:5f:76:35:6a:5d:2c:e5:c2:50:54:14:b3:32:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13
        Validity
            Not Before: May  8 15:55:00 2024 GMT
            Not After : May  7 16:00:00 2025 GMT
        Subject: CN=06282D52D4798051456450B6016EB2FA1E7F8E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:e5:1b:52:7b:e2:cb:db:5f:79:a8:94:dd:
                    bf:cf:82:76:ae:cc:1a:52:ea:96:e1:e0:2e:7e:d6:
                    59:47:db:69:0b:f4:0e:0b:42:07:42:dd:39:b9:ae:
                    8f:f1:7d:c7:a8:5a:98:3b:d3:83:ff:16:63:62:bb:
                    f6:76:74:6e:4b:23:66:47:2a:7b:2c:bc:a6:0b:87:
                    04:83:1e:f3:a1:83:27:f8:2d:a8:58:54:29:a0:82:
                    7a:6d:6d:42:ea:d3:48:a3:d8:e0:f2:0e:ca:13:9a:
                    3d:fd:16:ce:86:9f:2f:0b:a8:89:77:6b:a5:47:f0:
                    c9:21:ac:8a:73:f6:d0:26:9f:58:5f:f0:a0:72:3c:
                    25:18:f6:a0:83:c3:08:04:01:77:cd:c0:57:b6:bf:
                    ad:d4:74:ef:18:52:31:04:50:75:54:b6:98:1c:49:
                    21:94:e0:41:16:51:49:c3:9f:d1:70:5d:bb:3e:00:
                    33:21:de:58:0a:99:e6:84:81:3a:58:e2:07:5c:4c:
                    31:95:8a:4f:aa:09:33:08:78:e9:50:09:45:92:b8:
                    73:63:29:41:0c:73:24:ed:fd:0c:63:19:d2:65:11:
                    7d:9b:ee:c5:c9:cc:6c:df:bd:4e:b8:07:b8:85:4a:
                    a9:b8:74:52:f1:0d:6f:75:d0:0b:6a:7d:b3:33:26:
                    2d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:28:2D:52:D4:79:80:51:45:64:50:B6:01:6E:B2:FA:1E:7F:8E:09
            X509v3 Authority Key Identifier:
                keyid:A4:B2:98:6F:7A:8C:C1:14:EF:B0:0E:4A:3F:4C:5F:6F:4A:69:0D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4B2986F7A8CC114EFB00E4A3F4C5F6F4A690D13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8210C58519C542AEAA87CCC4B5F1AEAF4AAD063AB3E1F521F2EA624DC0FA92B6/0/34352e3137342e38342e302f32322d3235203d3e203238333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:94:53:3a:3f:2e:29:df:e5:28:c1:8f:51:9a:67:ae:50:60:
         8d:10:f1:7d:d3:94:86:85:f3:dd:40:85:8e:57:cd:7f:9a:8c:
         64:a6:17:45:1e:be:c5:80:a8:f8:62:55:36:c3:31:b5:2d:fd:
         62:3e:fd:b4:13:0f:b8:ff:9c:01:db:f3:0b:b5:31:99:8a:44:
         78:21:23:c5:39:ea:e6:51:6e:99:35:27:17:07:ac:5e:1c:7d:
         cf:80:51:18:76:6b:ce:6c:62:26:2e:cf:15:dd:74:eb:0f:a7:
         ab:1a:e7:a8:d8:8a:a5:c5:5b:43:ea:9a:46:7d:63:c6:b3:8a:
         78:02:3e:ec:17:05:ca:2e:a4:f3:17:3f:c0:8f:77:eb:85:e2:
         82:c8:d1:a7:dd:c9:85:60:5c:51:1a:5c:4d:91:1b:11:b6:26:
         cb:ca:c0:03:4e:64:c6:fb:89:81:c4:04:65:0d:3f:c9:5a:aa:
         a2:0c:a8:3a:c4:95:84:9f:10:ed:7f:12:89:a4:e8:8e:24:73:
         89:89:e7:30:dc:9d:92:72:9e:b3:39:93:14:cb:b4:69:a1:d5:
         44:98:15:44:ea:fa:11:cd:a0:6a:04:f2:a0:1b:bb:5d:a4:dc:
         cf:18:a1:d0:48:6b:59:5a:05:9f:9f:0a:92:23:65:5c:a4:43:
         b8:0c:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org