Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
File:                     34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa (raw, json)
Hash identifier:          RD9kfMAbm7a8IhFOoL5BOV99mhVK85+oX1YkjFAtiVY=
Subject key identifier:   07:83:C2:D9:6E:A0:80:87:54:3C:F1:05:98:CD:C5:79:82:AE:9D:D4
Certificate issuer:       /CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
Certificate serial:       21B18FEBB84404CC1BC80B5B9E8ACCF739D15838
Authority key identifier: 91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa
Signing time:             Tue 05 Mar 2024 17:52:08 +0000
ROA not before:           Tue 05 Mar 2024 17:47:08 +0000
ROA not after:            Tue 04 Mar 2025 17:52:08 +0000
asID:                     265853
IP address blocks:        45.224.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b1:8f:eb:b8:44:04:cc:1b:c8:0b:5b:9e:8a:cc:f7:39:d1:58:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6
        Validity
            Not Before: Mar  5 17:47:08 2024 GMT
            Not After : Mar  4 17:52:08 2025 GMT
        Subject: CN=0783C2D96EA08087543CF10598CDC57982AE9DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:59:91:04:df:9c:21:73:a2:d4:f0:78:40:54:
                    75:f1:76:14:27:b5:5b:03:0e:3f:8b:22:d7:50:fc:
                    e5:a7:63:f8:1b:09:bc:7f:61:55:fe:87:72:9c:c3:
                    0d:9b:ed:ca:36:f2:b6:16:a6:82:6e:19:e8:96:73:
                    f6:3f:19:7f:9e:23:e4:4d:8e:78:02:ee:11:d5:e4:
                    dd:53:6b:79:c7:c4:f3:06:92:1d:80:e6:51:f3:a1:
                    4a:86:4d:9f:a5:2f:58:a6:21:01:12:4c:44:56:4f:
                    e3:6d:48:cb:d0:aa:f0:94:2d:dd:5e:c4:ac:7e:c8:
                    a3:71:24:1b:07:d6:47:70:c3:76:ab:5e:c8:99:95:
                    29:85:39:b6:f0:c8:46:7c:f5:f1:3e:2b:50:b3:d0:
                    e7:d8:ff:0f:cb:14:6f:31:91:55:23:24:48:74:73:
                    4f:ff:7f:c2:20:d4:e0:46:b6:f2:01:6a:57:b3:24:
                    44:33:8c:08:70:15:ba:10:ec:92:ba:6d:94:bf:ca:
                    8d:6d:4f:90:3a:ad:e8:f5:c1:bd:1b:ea:ca:3d:7f:
                    f9:bf:a4:37:9a:f4:54:dc:d0:d9:13:c7:49:68:a8:
                    35:ce:51:38:cf:68:76:dc:e5:94:db:76:26:fa:0d:
                    2b:7f:28:74:67:22:b6:99:d5:df:c5:f3:9b:d8:63:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:C2:D9:6E:A0:80:87:54:3C:F1:05:98:CD:C5:79:82:AE:9D:D4
            X509v3 Authority Key Identifier:
                keyid:91:DB:B2:B4:BA:25:E4:71:DB:FD:1A:B6:84:91:63:BE:A0:77:E1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91DBB2B4BA25E471DBFD1AB6849163BEA077E1A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0FB08AD1CC3CF28E449F4B551589B1C823288F290AF57FCF3D78F89B82D3CC9/0/34352e3232342e3138382e302f32322d3234203d3e20323635383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:a5:b8:c4:77:95:a7:47:fe:cd:00:fe:93:51:80:41:d3:03:
         63:46:c7:ec:2c:a1:2b:aa:5b:0f:16:52:82:96:3a:06:8d:cd:
         c8:00:b3:27:ba:60:47:39:75:3a:72:54:14:f3:0b:37:c9:20:
         0d:58:15:90:17:5b:04:23:5c:c4:03:ab:28:6e:53:19:fe:f7:
         9c:f4:bb:9e:a0:15:8b:40:87:67:65:7d:36:54:9d:da:b1:de:
         7c:35:9f:bc:5f:a1:4a:73:d8:1c:4e:24:b3:7d:27:9f:45:73:
         51:ed:1b:d6:98:c7:b5:fa:5b:13:03:78:88:34:2c:e2:3b:f3:
         34:2e:bb:a7:63:1b:58:bb:df:b3:f5:0b:54:9a:8e:33:61:6c:
         56:cf:4a:d2:f9:7c:db:68:4f:cd:1c:e2:5f:40:18:64:9f:12:
         9c:23:9c:2f:59:49:3f:07:f6:b5:54:0d:a4:52:ea:fd:e9:fd:
         da:5c:9a:3c:1a:4f:6b:00:c3:8a:d0:3d:21:19:d9:c9:43:c3:
         4b:e4:d2:c5:e4:ed:93:3c:d3:03:03:0d:47:b5:20:0a:02:7c:
         84:5c:95:9c:4c:5a:3a:6e:2e:7c:47:dc:f9:bc:c2:c8:7e:8a:
         3b:b5:6f:86:d7:0c:66:d6:77:6f:a6:66:27:21:00:96:10:63:
         15:9b:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 12:23:57 2024 by rpki-client on console-fra.rpki-client.org