Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/34352e3136352e33362e302f32322d3234203d3e20323637373130.roa
File:                     34352e3136352e33362e302f32322d3234203d3e20323637373130.roa (raw, json)
Hash identifier:          dU3sc7S9JD/9k3E/s5OiGVpE7GyxHqXMINF5C4vWg60=
Subject key identifier:   C5:ED:22:3D:25:49:2C:CC:06:B6:07:09:D4:9F:30:ED:4E:B2:C0:B5
Certificate issuer:       /CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
Certificate serial:       7434ECA34D8125C5F46EF598918E86C04AC8040E
Authority key identifier: 2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/34352e3136352e33362e302f32322d3234203d3e20323637373130.roa
Signing time:             Tue 05 Mar 2024 17:55:41 +0000
ROA not before:           Tue 05 Mar 2024 17:50:41 +0000
ROA not after:            Tue 04 Mar 2025 17:55:41 +0000
asID:                     267710
IP address blocks:        45.165.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:34:ec:a3:4d:81:25:c5:f4:6e:f5:98:91:8e:86:c0:4a:c8:04:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A71760D473705CDBB004AFB079B76EBD8CC5513
        Validity
            Not Before: Mar  5 17:50:41 2024 GMT
            Not After : Mar  4 17:55:41 2025 GMT
        Subject: CN=C5ED223D25492CCC06B60709D49F30ED4EB2C0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:90:99:d7:87:3e:2d:45:88:41:00:32:63:
                    79:27:7a:89:a1:bd:07:40:44:6e:2c:5e:1b:32:96:
                    5c:99:9d:e0:e5:e7:45:37:42:2b:f6:49:83:84:d5:
                    40:a1:d9:d1:72:84:fa:cc:80:fa:92:a5:79:d1:77:
                    e9:60:d2:0c:ec:b3:27:e7:04:4d:50:eb:9e:78:b7:
                    58:62:6c:6c:12:09:5f:7f:b7:05:25:fb:7b:d7:24:
                    be:f4:41:27:3c:07:fa:94:02:f0:fe:41:39:0a:0c:
                    34:9d:29:dd:4e:c4:d8:37:4f:e0:18:ee:7e:60:18:
                    ae:67:55:59:27:9d:95:0a:c5:15:99:c1:46:02:2c:
                    ef:af:b2:93:02:05:df:77:4b:09:8f:e2:15:04:5d:
                    44:53:87:a4:ce:7c:db:0a:84:4c:c5:ed:6b:6e:f0:
                    82:09:04:da:e7:69:00:d5:17:e0:08:5d:cf:4f:8e:
                    cf:44:34:df:e7:40:96:d0:3c:20:a2:91:49:f2:f1:
                    b6:50:d6:42:8d:00:13:ce:99:80:0f:5d:18:99:a6:
                    4c:97:45:35:a3:66:fe:a5:94:4e:53:44:1d:ad:d6:
                    a4:5d:cb:67:60:d9:e4:6c:de:5c:64:50:8a:48:e1:
                    fe:23:fa:4a:e9:6b:93:77:6d:73:3e:3f:b2:b6:35:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:ED:22:3D:25:49:2C:CC:06:B6:07:09:D4:9F:30:ED:4E:B2:C0:B5
            X509v3 Authority Key Identifier:
                keyid:2A:71:76:0D:47:37:05:CD:BB:00:4A:FB:07:9B:76:EB:D8:CC:55:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A71760D473705CDBB004AFB079B76EBD8CC5513.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A8474A840B530235C1E5909B8579FA71E0DF8669964E4281DB7050437E6A6B7/0/34352e3136352e33362e302f32322d3234203d3e20323637373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:24:ac:ef:83:0a:f9:00:7d:2f:09:4f:31:ad:b2:26:78:f7:
         b6:73:b4:01:01:d9:e2:f0:0e:7e:ce:80:47:bb:24:8b:3c:38:
         84:5f:50:71:27:77:32:dc:d3:56:f0:fd:af:b2:ab:42:75:cc:
         36:2a:5e:a3:e7:80:95:2a:93:57:42:cf:85:eb:99:d8:33:3f:
         4a:92:e2:19:68:c7:3e:b4:c8:33:0a:b4:d8:00:97:88:29:4d:
         1b:a1:8b:fe:92:00:2d:52:16:57:18:8d:68:00:ea:ce:b6:90:
         a9:7b:84:23:92:a7:44:27:93:db:9d:e0:77:4d:e3:1f:f6:87:
         df:88:ca:40:17:a4:81:59:da:b7:4a:e9:0a:c6:60:85:ea:5c:
         ab:69:ea:e6:45:60:59:23:b8:a6:db:50:8e:6e:e5:67:d5:67:
         d6:0b:a7:2f:d6:b8:89:63:9b:00:65:6c:5d:b4:fb:76:e6:98:
         f4:32:6b:21:d7:45:92:da:57:3b:22:f9:b7:4d:e8:b5:51:78:
         58:a2:b1:11:31:ea:51:70:b9:3b:78:7f:0f:c5:bd:dd:74:71:
         0e:7c:38:d9:d8:23:f5:e9:8b:2c:b4:f0:b7:d9:1d:a7:e1:90:
         2b:6e:ce:72:6c:e3:8a:f6:f2:39:39:f3:fb:34:78:70:99:d1:
         68:b9:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:35 2024 by rpki-client on console-ams.rpki-client.org