Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e203133393539.roa
File:                     34352e372e34342e302f32322d3234203d3e203133393539.roa (raw, json)
Hash identifier:          Zij2/GNjckT2wBkbc8NmmsV77IDYfsaEKnz1eXEsYvk=
Subject key identifier:   CE:AF:3B:B0:6B:EC:DB:43:F9:B6:C5:9F:BF:C9:D8:58:B1:7A:0D:F5
Certificate issuer:       /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial:       3D651F25FCF7BF1A477F489071F3740C8A6C5500
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e203133393539.roa
Signing time:             Tue 05 Mar 2024 17:42:29 +0000
ROA not before:           Tue 05 Mar 2024 17:37:29 +0000
ROA not after:            Tue 04 Mar 2025 17:42:29 +0000
asID:                     13959
IP address blocks:        45.7.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Sep 2024 10:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:65:1f:25:fc:f7:bf:1a:47:7f:48:90:71:f3:74:0c:8a:6c:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
        Validity
            Not Before: Mar  5 17:37:29 2024 GMT
            Not After : Mar  4 17:42:29 2025 GMT
        Subject: CN=CEAF3BB06BECDB43F9B6C59FBFC9D858B17A0DF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d2:cc:10:ce:96:e1:cb:69:88:0d:d8:cd:e5:
                    86:2a:c8:cb:78:c6:d3:77:2e:a8:ec:a6:6c:46:e0:
                    6b:cc:0e:bf:9e:0b:a7:46:04:77:fc:f0:91:fa:17:
                    08:8f:de:a7:6d:30:39:e5:c4:e5:9f:bf:ef:d0:6e:
                    28:87:49:23:2a:54:26:dd:1e:72:8b:10:8d:f9:8c:
                    f1:1a:1d:98:3a:39:f9:fa:0c:fa:c7:de:aa:6d:ba:
                    e3:64:09:cc:f2:2f:3a:2c:9b:da:75:a0:d9:01:d0:
                    a1:54:6a:57:d3:86:1f:25:9b:e1:82:1a:d7:87:37:
                    bc:85:00:d7:c0:9f:f2:f2:15:b0:e2:d5:1c:eb:4c:
                    31:32:3c:00:c4:4c:7b:ab:f4:f9:cb:e6:62:e4:d9:
                    71:54:55:97:20:69:25:e7:be:f5:9b:02:fc:4a:87:
                    06:1f:dd:91:12:c1:1c:fc:e5:b0:95:c3:2f:4c:99:
                    b9:c2:64:2a:68:83:47:20:e0:b9:4f:6d:39:41:23:
                    fa:d0:59:e1:66:04:9a:68:cc:c3:8b:c6:8c:af:b6:
                    9f:01:aa:8c:3d:07:07:9d:11:b1:10:9d:0c:49:1c:
                    f9:44:d5:ff:20:90:48:7b:09:21:a6:eb:ca:50:78:
                    c5:b8:a1:59:f6:52:96:0d:30:bf:79:f8:86:43:9e:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AF:3B:B0:6B:EC:DB:43:F9:B6:C5:9F:BF:C9:D8:58:B1:7A:0D:F5
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:7c:8d:f3:61:64:16:0c:bc:47:03:bf:3d:68:b7:9b:d1:e1:
         6b:a7:2e:e0:77:e4:86:f0:3e:d9:26:4a:fa:6a:c5:bc:a1:d5:
         25:76:d9:13:61:7f:37:51:29:5c:d8:68:50:6c:b7:20:6b:50:
         f7:76:45:4d:62:4d:57:cb:51:1d:b9:f8:d0:f1:fd:10:de:37:
         6c:93:b0:91:a2:07:69:25:13:45:67:b1:e3:b4:13:5a:42:12:
         02:32:77:6b:4b:90:be:fb:95:ab:71:7d:86:d5:7e:8a:d2:08:
         e6:ec:77:25:9f:b5:9f:76:db:2e:33:95:6a:29:8b:ea:ad:7f:
         6d:32:e5:05:f9:fa:bc:c8:ee:99:66:a8:3d:c8:ce:2e:69:af:
         53:24:98:02:02:7e:43:a2:f7:ad:74:b1:9a:74:ac:99:a6:d1:
         e3:0c:bb:5d:02:13:ac:b9:34:b6:fd:a8:1f:1a:ea:36:33:ac:
         0a:e0:ec:37:38:94:10:fa:f3:8a:6e:42:c5:40:d3:be:08:ce:
         e0:f4:97:5d:dc:1c:be:5f:ad:d8:18:b2:f7:7c:c2:be:64:ea:
         8f:86:56:a0:ed:6f:9a:39:9d:cf:e8:42:8d:e3:6e:2e:67:1f:
         e1:74:06:4a:ae:02:d8:42:62:a3:7d:85:75:85:63:22:fd:9e:
         b1:73:9d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 22:40:08 2024 by rpki-client on console-ams.rpki-client.org