Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32322d3232203d3e20323636373534.roa
File:                     34352e3233322e302e302f32322d3232203d3e20323636373534.roa (raw, json)
Hash identifier:          i0HAiAIqFi0p7GYKYgLtRdbcf8ex3WXtebDOWxmjSE4=
Subject key identifier:   95:40:C5:50:D7:1B:05:57:F7:5D:47:4D:7B:0E:69:FF:CE:74:1B:BF
Certificate issuer:       /CN=64E2A9B1818F618CC381651138A0484A9CB1B197
Certificate serial:       547BA8C142C10B2F4870E1E5B3B6099C49F3FFC4
Authority key identifier: 64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32322d3232203d3e20323636373534.roa
Signing time:             Wed 14 Aug 2024 20:55:01 +0000
ROA not before:           Wed 14 Aug 2024 20:50:01 +0000
ROA not after:            Wed 13 Aug 2025 20:55:01 +0000
asID:                     266754
IP address blocks:        45.232.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7b:a8:c1:42:c1:0b:2f:48:70:e1:e5:b3:b6:09:9c:49:f3:ff:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64E2A9B1818F618CC381651138A0484A9CB1B197
        Validity
            Not Before: Aug 14 20:50:01 2024 GMT
            Not After : Aug 13 20:55:01 2025 GMT
        Subject: CN=9540C550D71B0557F75D474D7B0E69FFCE741BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:e6:59:87:68:cb:ba:d8:2f:39:03:69:a7:
                    ac:2c:c2:44:1e:dc:f4:a6:3d:93:e1:c7:20:b3:47:
                    f1:64:14:cf:ee:23:72:7b:68:0a:ea:a7:f8:2b:fe:
                    42:04:20:85:58:a2:9a:6e:51:88:6b:96:ae:66:95:
                    5b:a4:f0:84:27:a8:ec:95:dc:92:b7:4e:49:e8:95:
                    37:fc:fa:22:f6:26:a2:75:31:0e:7d:4c:0b:e2:13:
                    5f:1b:42:03:9b:0a:e4:58:88:be:4d:4e:ac:8b:43:
                    3c:da:02:7b:8e:20:a8:af:48:d3:23:24:97:51:25:
                    c2:76:67:5e:b8:0c:fe:05:91:a4:52:48:37:8b:5a:
                    a1:1a:4a:12:56:0b:99:5f:33:0d:0a:b3:36:cc:1f:
                    e3:d5:df:5e:68:66:6f:3b:02:94:e4:ed:b9:7f:52:
                    ea:67:ba:d4:3b:d1:13:39:a6:79:27:bf:ee:0e:57:
                    c4:79:60:5a:03:af:46:80:d8:de:77:a2:ca:cd:94:
                    12:8b:f1:4d:3d:d0:c3:ee:5f:04:e0:24:13:2c:16:
                    b1:aa:13:35:df:5e:ab:bd:db:3a:93:70:71:38:4e:
                    90:68:31:4d:6d:9f:71:bb:a4:67:69:ae:25:ba:87:
                    5d:d1:3e:33:35:44:6c:0d:36:4a:10:f7:dd:20:5a:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:40:C5:50:D7:1B:05:57:F7:5D:47:4D:7B:0E:69:FF:CE:74:1B:BF
            X509v3 Authority Key Identifier:
                keyid:64:E2:A9:B1:81:8F:61:8C:C3:81:65:11:38:A0:48:4A:9C:B1:B1:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/64E2A9B1818F618CC381651138A0484A9CB1B197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64E2A9B1818F618CC381651138A0484A9CB1B197.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968A458107BF92FD21AF8F7BF6BEED9B0EADE1BF1339AFB0BC0EEDEFD4BCFB0B/0/34352e3233322e302e302f32322d3232203d3e20323636373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:7a:20:68:06:b8:c1:8b:63:d8:81:a4:32:b9:78:11:6c:64:
         ce:67:6e:2b:69:61:67:ab:58:13:55:10:0e:49:b4:6c:fa:fd:
         64:05:a4:38:ca:c8:76:6b:66:5e:68:4f:27:5b:d3:d5:f7:ad:
         fd:2f:aa:ab:2d:d1:ac:86:6c:34:2c:b8:8c:1c:f7:5f:d2:0c:
         82:6a:93:53:89:88:eb:db:46:80:c6:da:1d:4f:4b:f9:5c:88:
         11:dc:2b:80:c3:bc:4d:f7:d9:01:de:14:f9:0e:9f:aa:e8:69:
         f2:dc:15:8a:0e:d4:af:c9:e6:09:87:05:17:d2:fe:36:99:87:
         3e:ef:b3:b7:cb:3b:9a:72:c8:16:7b:7f:68:58:88:32:53:21:
         5c:e1:7b:2b:eb:66:94:e4:25:81:73:d6:06:bc:e4:fa:28:b7:
         25:f1:ca:ef:d2:64:85:fd:5b:d0:50:fc:bd:f7:e9:49:f7:38:
         6e:12:d2:b8:5b:d6:c5:47:c2:4b:ee:50:c6:ed:f5:a8:71:05:
         ce:00:c2:ef:89:2f:75:f6:5b:c6:8e:37:53:56:19:08:96:cc:
         5b:f4:22:ab:9b:f4:bc:2c:22:51:dd:89:f2:58:6d:38:fb:f5:
         5e:16:64:c6:5e:c6:50:00:54:7f:f1:03:71:80:c9:ca:80:cc:
         b2:fe:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org