Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/34352e3137302e3132382e302f32322d3234203d3e203631353132.roa
File:                     34352e3137302e3132382e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          Y5cgKoj2lz3ZRol9Tu/J6Ed4C0seP6PSFGXWNaXSXdQ=
Subject key identifier:   D7:63:A2:41:0B:5E:32:30:58:24:6B:39:A5:D1:37:E4:A4:85:F8:F3
Certificate issuer:       /CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7
Certificate serial:       351DC28078F1CCFB15A51E290EF72ACC61180038
Authority key identifier: 34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/34352e3137302e3132382e302f32322d3234203d3e203631353132.roa
Signing time:             Tue 05 Mar 2024 18:07:26 +0000
ROA not before:           Tue 05 Mar 2024 18:02:26 +0000
ROA not after:            Tue 04 Mar 2025 18:07:26 +0000
asID:                     61512
IP address blocks:        45.170.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:c2:80:78:f1:cc:fb:15:a5:1e:29:0e:f7:2a:cc:61:18:00:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7
        Validity
            Not Before: Mar  5 18:02:26 2024 GMT
            Not After : Mar  4 18:07:26 2025 GMT
        Subject: CN=D763A2410B5E323058246B39A5D137E4A485F8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:f9:34:7c:b8:22:57:47:4c:ce:b9:49:98:
                    8a:72:a7:fd:3b:32:5f:a9:92:0f:2c:e7:22:01:49:
                    28:02:fe:85:29:77:81:46:2b:56:3b:0b:8c:6f:18:
                    4e:62:10:7b:5a:dc:bf:43:30:ad:06:2a:94:69:ee:
                    03:a0:72:75:a9:43:43:2c:cf:f2:55:33:4a:76:26:
                    02:3c:29:89:dc:ba:83:85:00:df:06:18:b5:80:2b:
                    73:0f:32:5b:47:b6:3f:50:34:4c:43:f0:9f:6f:ab:
                    45:17:44:35:20:0d:b4:94:3b:8f:5c:5e:f8:3a:e2:
                    c9:75:22:83:e7:72:26:8f:c7:f8:6f:65:41:e8:1e:
                    81:7a:4f:8a:99:cc:95:17:67:fc:51:ab:fb:04:aa:
                    18:6d:74:e2:55:1b:bb:81:52:07:9b:4c:af:70:5b:
                    c4:ac:58:49:ed:5a:dc:c0:f1:4c:ec:aa:5a:69:e5:
                    cd:9f:52:66:67:c2:d6:48:6d:2e:f7:df:f6:29:52:
                    7e:11:d5:13:4e:2e:8c:2b:e0:05:9a:a5:23:14:6d:
                    4c:cc:9f:05:f7:d7:9c:45:38:9b:47:04:ba:ef:1f:
                    2c:20:47:62:42:5b:b2:68:73:42:ab:81:e2:d9:9f:
                    4e:40:56:37:7a:a0:67:1e:04:dc:a4:05:83:ba:df:
                    1c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:63:A2:41:0B:5E:32:30:58:24:6B:39:A5:D1:37:E4:A4:85:F8:F3
            X509v3 Authority Key Identifier:
                keyid:34:72:E1:FF:18:18:96:2A:FB:9D:AD:44:8D:EB:6B:4F:02:BD:FB:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3472E1FF1818962AFB9DAD448DEB6B4F02BDFBC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87D59CE00172146B0C116A84500F63FE7511ADA650DC16D57EBBFBDF799200BB/0/34352e3137302e3132382e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:75:eb:27:40:72:db:93:bf:ae:48:d3:7e:34:41:f2:cd:
         e7:6b:7e:00:94:9f:b6:1b:ac:62:55:ab:88:c3:ce:b3:3f:6f:
         69:d6:a2:6d:4d:3d:fa:bc:12:73:6b:1b:6f:a9:86:fa:8c:1f:
         64:94:64:8d:ac:1b:e9:28:2c:66:18:b6:c4:dd:90:e4:6a:22:
         63:c9:3a:b5:f2:d8:d9:16:41:3d:42:b8:35:a5:14:d2:5d:9a:
         c0:cd:cf:99:d3:9f:47:cb:f4:3d:60:4c:c8:84:d0:0a:9d:f4:
         aa:60:55:1b:02:0b:54:35:c5:ea:34:ee:09:19:c2:7f:34:ec:
         e0:0e:dc:9f:c3:c1:73:1e:8d:48:4d:9f:64:b5:28:35:ed:c3:
         10:31:3b:58:c6:c7:80:df:c2:58:55:2a:43:93:e4:2a:48:c4:
         4f:92:73:ee:c8:63:2d:0c:1e:43:10:64:e6:3a:df:45:0f:fe:
         44:b0:47:ca:3c:a4:07:3a:6b:f3:71:13:fa:05:b8:90:47:23:
         a8:15:91:c9:15:c3:49:8a:24:cb:61:45:bb:ed:51:51:c4:c5:
         c8:31:e6:28:00:bf:9f:3f:a0:29:a4:57:1d:71:7f:44:9b:a2:
         6a:e5:04:f2:e3:75:32:a8:47:2e:17:7d:54:af:53:29:4e:0a:
         d0:92:a0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:17 2024 by rpki-client on console-fra.rpki-client.org