Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa
File:                     34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa (raw, json)
Hash identifier:          54cq0wz+cEAXXtshVVMkNAj+LwGZgXSfHk0fO2DuOsE=
Subject key identifier:   B9:6A:FF:90:57:79:F5:40:F4:F6:34:1E:F8:49:20:58:98:84:19:30
Certificate issuer:       /CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
Certificate serial:       6CA0A268D0EFADB252783BAE0BBA94754B3E7ABD
Authority key identifier: C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa
Signing time:             Tue 05 Mar 2024 17:43:21 +0000
ROA not before:           Tue 05 Mar 2024 17:38:21 +0000
ROA not after:            Tue 04 Mar 2025 17:43:21 +0000
asID:                     265607
IP address blocks:        45.188.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a0:a2:68:d0:ef:ad:b2:52:78:3b:ae:0b:ba:94:75:4b:3e:7a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9A3C9150051311C0AD5626033AB0DA33F1BEF9B
        Validity
            Not Before: Mar  5 17:38:21 2024 GMT
            Not After : Mar  4 17:43:21 2025 GMT
        Subject: CN=B96AFF905779F540F4F6341EF849205898841930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:f5:90:cf:4e:77:7b:87:00:34:c0:ec:37:
                    1b:20:72:e3:69:d4:54:34:c1:a4:01:bf:9d:40:88:
                    54:de:60:27:12:7a:ca:80:ae:74:78:31:03:7d:50:
                    30:ea:69:68:c5:f6:a0:d6:e0:93:07:e5:ce:77:d9:
                    05:cf:33:2f:fe:b7:c8:8a:ed:a8:23:9d:b8:62:ae:
                    21:9a:29:73:4d:43:d7:ba:8c:73:32:9d:7e:e0:5b:
                    a5:3e:5b:30:6a:7b:05:5f:49:93:f5:14:31:b0:a8:
                    ae:ea:8f:5e:f8:0d:07:9b:48:9a:ff:9e:1c:41:78:
                    1f:c3:87:62:9d:e7:0d:58:1b:76:a9:65:82:9a:31:
                    83:00:0b:79:9a:09:a2:94:58:16:34:57:0f:d7:19:
                    1b:93:de:79:1f:30:71:65:20:21:61:f1:ea:11:17:
                    29:a5:de:95:dd:e2:dd:a7:c9:6e:11:10:51:0a:96:
                    71:f8:de:b2:3b:59:d6:f1:b7:8a:71:0d:36:84:8d:
                    a5:a5:03:55:95:98:36:17:c8:41:54:e5:d6:ee:5a:
                    ab:bf:73:e8:90:ae:c4:3e:a2:87:b5:dd:81:dc:4a:
                    96:42:bc:6f:d7:88:dc:76:22:e8:61:cd:81:7e:d1:
                    11:31:5c:c6:ba:0e:45:fe:c2:22:fc:92:d6:06:9b:
                    20:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6A:FF:90:57:79:F5:40:F4:F6:34:1E:F8:49:20:58:98:84:19:30
            X509v3 Authority Key Identifier:
                keyid:C9:A3:C9:15:00:51:31:1C:0A:D5:62:60:33:AB:0D:A3:3F:1B:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9A3C9150051311C0AD5626033AB0DA33F1BEF9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D5346F16D7A7427F45DC0978C04A5924D561BA10BB19BC628BB465BB0578DCF/0/34352e3138382e3130382e302f32322d3234203d3e20323635363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:ec:e3:6c:ea:02:a4:21:56:aa:a9:f3:65:0d:9b:40:7b:cc:
         4b:c7:49:e9:b0:77:db:ab:1f:26:40:9f:03:1b:2f:93:17:90:
         92:57:0a:30:e6:d6:5e:08:ab:2b:7c:85:0b:6d:e7:8f:a0:01:
         be:46:10:c7:90:ce:73:57:cf:d7:e7:a9:4b:5b:ea:18:29:d1:
         83:1a:0b:69:b5:ef:90:c4:31:8b:9c:10:46:43:66:28:64:e8:
         f9:1e:5b:bf:23:78:c5:38:85:6b:20:ac:4d:f6:ef:a5:ec:cf:
         b0:e4:58:8a:86:9c:b0:26:63:24:34:12:bf:52:f1:70:b0:64:
         b7:ba:ad:08:3d:5e:1a:7c:5a:26:3e:2a:58:8b:51:3d:19:eb:
         44:34:5a:7e:76:db:f1:87:82:1a:3f:c4:f9:7d:96:c8:aa:47:
         8a:34:48:6d:1a:4c:47:af:af:70:71:dc:f5:4d:71:e8:31:f8:
         f1:7e:3f:b2:05:c5:d4:b4:d2:69:9b:05:0a:a8:82:db:ca:78:
         c4:77:af:18:a8:2b:98:7f:5f:d2:46:10:4c:08:76:a9:54:02:
         43:de:b7:77:a6:89:57:36:02:3c:00:54:46:4c:1c:7b:2e:5c:
         ff:01:16:f3:27:23:f0:ee:84:7f:03:91:ed:3b:15:c5:f8:24:
         b7:13:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org