Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e20323635353334.roa
File:                     34352e372e34342e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier:          9bqYYUSqvCqu4Dd/hbTJYO3X92sA5A7Xy/89AXXWzHk=
Subject key identifier:   1B:BA:E8:2E:28:6D:98:D4:9B:96:99:3E:9C:53:F5:80:DA:D3:6E:AA
Certificate issuer:       /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial:       18EAC998DBDFBE1A66DE833BCBD6511A1E77295F
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e20323635353334.roa
Signing time:             Tue 05 Mar 2024 17:42:29 +0000
ROA not before:           Tue 05 Mar 2024 17:37:29 +0000
ROA not after:            Tue 04 Mar 2025 17:42:29 +0000
asID:                     265534
IP address blocks:        45.7.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ea:c9:98:db:df:be:1a:66:de:83:3b:cb:d6:51:1a:1e:77:29:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
        Validity
            Not Before: Mar  5 17:37:29 2024 GMT
            Not After : Mar  4 17:42:29 2025 GMT
        Subject: CN=1BBAE82E286D98D49B96993E9C53F580DAD36EAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:34:f2:0e:8c:19:d8:6b:9c:70:35:1a:c2:
                    66:4c:1e:23:d4:67:e9:a6:cd:7d:46:13:0e:04:10:
                    11:99:c7:f1:61:c4:d2:9b:95:50:55:be:b1:6c:c9:
                    0a:ee:d9:53:64:50:a8:74:2a:5a:61:5f:ea:b9:2b:
                    f4:74:5c:96:53:6b:03:af:26:c8:0e:bc:05:ca:1c:
                    44:72:f1:70:4e:3e:7a:c9:03:6b:ab:03:a3:15:06:
                    50:46:d5:8e:17:50:54:83:50:19:aa:56:e7:1c:46:
                    c9:22:b4:77:0f:4a:8e:c6:27:05:4b:52:eb:21:27:
                    54:75:3b:78:fb:cf:1a:55:62:06:66:8c:c7:04:b8:
                    65:62:6e:b0:50:f2:51:d7:57:b1:a1:54:59:24:7e:
                    85:11:d6:d0:3e:ae:01:ef:22:b5:fa:a9:7a:12:e3:
                    c7:c1:26:bc:38:af:bd:ff:bd:27:41:ff:0e:9e:68:
                    e0:b1:0b:db:df:4d:49:ca:bb:a7:dc:de:0e:75:0c:
                    28:7f:3e:28:e7:19:73:de:e6:55:c4:d5:ba:df:06:
                    18:a8:c2:51:3d:bb:26:03:48:b9:8c:8b:d8:78:66:
                    b3:7c:90:31:dc:97:8b:2f:07:44:d8:ae:ac:88:50:
                    85:a7:5e:a0:0d:60:f8:3f:e2:a6:71:c9:c8:55:3c:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:E8:2E:28:6D:98:D4:9B:96:99:3E:9C:53:F5:80:DA:D3:6E:AA
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:b2:03:72:a2:6e:91:b0:5e:96:96:af:24:46:cf:f4:6b:7e:
         4c:fc:c6:7a:ac:99:a4:54:02:32:89:2e:18:b1:86:c6:c3:90:
         ec:53:0a:74:2a:9a:76:9f:b0:59:a0:cd:41:37:74:80:42:7f:
         fa:c4:55:50:48:1f:bb:83:99:aa:f7:e4:ca:7b:08:49:4e:09:
         a5:35:30:19:07:cf:04:0a:73:47:90:08:86:ea:6c:ec:9b:66:
         d1:17:bf:5a:f0:b7:7d:3e:55:ce:87:34:e0:33:b6:8f:39:60:
         f1:54:f1:0a:76:9a:85:77:28:3e:d7:2b:03:39:23:c5:4d:4f:
         9d:ee:64:5f:81:a5:d4:fe:6d:28:0b:13:b5:53:c5:21:9f:94:
         0c:ec:1e:d8:51:cf:87:74:57:5a:5f:5b:9a:91:91:9b:b2:a2:
         6c:d5:f4:c1:31:fc:c5:7f:e3:90:85:54:8d:b9:19:a1:b4:d8:
         8c:cb:38:85:b0:35:8b:bf:6b:ad:95:49:0a:48:53:83:9e:f5:
         07:49:e9:06:94:0a:3d:15:b5:28:6e:24:63:5b:17:7a:0a:72:
         56:bf:ca:6c:a7:1c:67:6d:fe:6e:48:db:c6:04:17:50:d5:98:
         3c:17:d7:23:04:1d:c3:ea:98:24:00:55:c5:a0:8b:bd:df:55:
         28:de:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org