Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3232203d3e20323635383136.roa
File:                     34352e3137352e34302e302f32322d3232203d3e20323635383136.roa (raw, json)
Hash identifier:          /pHjpQECwdYgn4il3VjT8nkE56rrv0RkdpfXSaAFm1M=
Subject key identifier:   D2:3C:D0:ED:4D:21:1B:1E:35:EC:C4:89:FD:23:59:86:21:D7:76:4D
Certificate issuer:       /CN=9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996
Certificate serial:       64F93B67A2E23C3CF463B3ADFE7BFB3070EBBB1F
Authority key identifier: 9F:9A:55:54:E1:BA:C2:CE:4F:27:F7:B2:8B:3D:29:01:6A:1B:99:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3232203d3e20323635383136.roa
Signing time:             Tue 05 Mar 2024 17:51:59 +0000
ROA not before:           Tue 05 Mar 2024 17:46:59 +0000
ROA not after:            Tue 04 Mar 2025 17:51:59 +0000
asID:                     265816
IP address blocks:        45.175.40.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f9:3b:67:a2:e2:3c:3c:f4:63:b3:ad:fe:7b:fb:30:70:eb:bb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996
        Validity
            Not Before: Mar  5 17:46:59 2024 GMT
            Not After : Mar  4 17:51:59 2025 GMT
        Subject: CN=D23CD0ED4D211B1E35ECC489FD23598621D7764D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:b8:7e:88:97:d7:ec:8e:be:40:d2:d9:4e:
                    1d:08:a5:d7:3a:2b:2b:68:32:63:d7:e3:4f:eb:30:
                    1b:09:94:02:79:e7:da:bb:3d:e4:7e:bd:0a:72:d5:
                    40:48:b1:0a:b3:bc:dd:d9:d2:f9:a5:99:72:6c:4b:
                    27:78:8e:3a:fc:7b:d5:d8:86:3e:41:b2:d9:db:cd:
                    8c:ca:30:83:cb:ff:d6:3d:40:7a:da:7c:3e:4e:22:
                    10:60:0b:b7:e9:53:ac:b8:58:d7:4f:f7:cd:3f:d5:
                    8d:ee:e7:b4:f2:57:44:a8:f3:70:f5:29:31:f2:b7:
                    8c:24:ed:2a:25:89:67:5f:c8:a0:fd:30:c5:6e:f3:
                    fc:a7:c7:37:dc:f7:69:50:6f:39:4d:e7:39:3b:0e:
                    7d:af:60:5a:49:dd:f9:32:d6:99:56:a2:90:13:20:
                    3d:0d:f4:05:46:f3:0e:c2:ed:4f:49:9d:78:b6:3c:
                    88:d7:19:34:00:06:1f:4c:99:4c:0f:60:1f:53:b6:
                    3c:88:0c:06:69:f0:de:9d:cb:30:1d:b6:48:50:60:
                    20:43:33:20:60:60:f7:6b:e8:2c:f6:1e:6e:a9:18:
                    c2:93:85:d7:6e:c9:75:65:35:19:01:9f:cf:19:26:
                    0a:02:47:22:61:82:e3:61:bb:39:23:cb:5f:a6:ff:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3C:D0:ED:4D:21:1B:1E:35:EC:C4:89:FD:23:59:86:21:D7:76:4D
            X509v3 Authority Key Identifier:
                keyid:9F:9A:55:54:E1:BA:C2:CE:4F:27:F7:B2:8B:3D:29:01:6A:1B:99:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F9A5554E1BAC2CE4F27F7B28B3D29016A1B9996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91B661B001FEB0B6E63CC4F76376AD5B945A9242E0D025895313E82F6CA21A32/0/34352e3137352e34302e302f32322d3232203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:68:10:41:37:9d:86:c3:5a:25:ab:73:16:46:87:18:53:8d:
         0e:4d:73:f8:16:a6:63:99:45:fe:97:8d:b1:3e:e2:c7:69:eb:
         a5:77:0e:72:bf:49:19:04:00:95:e5:54:a1:5c:0f:77:0d:95:
         f1:97:64:6d:ae:0a:f7:60:86:fb:c2:27:5b:2e:36:3d:97:0a:
         b7:bf:03:d3:bd:14:a4:28:55:9b:e8:dd:ba:36:97:44:37:a2:
         28:a4:a4:ea:e4:22:c4:45:28:e4:1c:36:fc:7d:37:0e:c3:e7:
         e6:20:ac:2f:3e:6b:2d:6e:fa:13:ed:7f:ce:30:58:cd:aa:2f:
         3e:e7:bc:c9:bb:3f:5c:9e:73:a9:02:f9:40:2b:25:b3:91:2c:
         0b:cd:e7:5d:9a:31:dc:e3:bf:1f:d2:85:f7:68:70:dd:25:f1:
         07:1a:ab:62:90:af:28:b9:50:98:63:d6:7a:bf:41:87:ab:0e:
         01:a0:64:93:a3:b8:d7:7f:3c:2f:6d:43:e9:a0:63:c5:c2:40:
         44:9d:3d:fe:b4:f2:99:45:c7:53:a2:ed:ca:18:e3:ed:04:00:
         3d:5b:e8:19:bd:ca:55:b5:17:98:79:6e:81:38:48:33:0d:9d:
         2b:3e:6e:f0:0c:92:0e:17:a8:7f:73:24:a5:39:c7:96:4c:ae:
         56:f3:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:05 2024 by rpki-client on console-ams.rpki-client.org