Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/34352e3137382e3138342e302f32322d3234203d3e203237363930.roa
File:                     34352e3137382e3138342e302f32322d3234203d3e203237363930.roa (raw, json)
Hash identifier:          fwWVCH8X0mh5POJ14LKFjekZ84KJaA21KJumvfAYo+c=
Subject key identifier:   10:BD:81:9E:36:D7:73:38:08:CA:B9:EE:75:54:5A:25:D8:1E:CF:EE
Certificate issuer:       /CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
Certificate serial:       06CF3AD37719047C691B59C819B76CA1D6143825
Authority key identifier: 1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/34352e3137382e3138342e302f32322d3234203d3e203237363930.roa
Signing time:             Tue 05 Mar 2024 18:13:16 +0000
ROA not before:           Tue 05 Mar 2024 18:08:16 +0000
ROA not after:            Tue 04 Mar 2025 18:13:16 +0000
asID:                     27690
IP address blocks:        45.178.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cf:3a:d3:77:19:04:7c:69:1b:59:c8:19:b7:6c:a1:d6:14:38:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4
        Validity
            Not Before: Mar  5 18:08:16 2024 GMT
            Not After : Mar  4 18:13:16 2025 GMT
        Subject: CN=10BD819E36D7733808CAB9EE75545A25D81ECFEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:ea:4f:0b:a9:8d:79:e1:f7:31:af:5c:30:
                    99:86:ad:39:0e:b6:90:48:64:d1:1f:68:fa:fb:3a:
                    61:66:1e:62:04:d4:9a:5e:eb:1a:87:b5:f8:d2:54:
                    1c:2f:02:01:60:a6:21:a0:7f:25:7d:d3:12:15:d2:
                    f2:a1:77:b3:d4:06:1e:02:44:dd:60:b3:02:ec:63:
                    29:07:84:df:e0:26:a5:df:11:f0:d3:c2:0c:ac:b6:
                    8c:18:d6:ae:7c:2b:42:92:a2:37:93:f4:71:93:a8:
                    aa:d3:7c:82:70:89:e4:72:3f:12:6c:0a:87:27:74:
                    2d:a6:c7:31:6c:a4:01:c0:fe:79:a2:35:c5:eb:ef:
                    66:2b:2a:bb:76:a2:46:a6:f5:00:6e:1a:94:58:5d:
                    6e:25:f8:dc:58:e2:2b:bb:5e:20:39:0f:91:a1:d4:
                    51:73:f0:8e:48:99:9d:ef:25:1d:0c:fa:3e:2c:e5:
                    0a:d2:dc:1c:0a:b5:33:00:90:bb:24:63:d3:ae:c3:
                    3c:44:3d:a1:1a:fd:25:57:0d:7e:32:82:ae:62:08:
                    9d:f6:50:44:14:fa:26:7e:61:9a:22:ad:30:15:47:
                    ad:d1:ce:a5:ae:c0:df:ef:22:94:aa:9d:b8:00:2d:
                    e8:b2:e2:af:af:c7:e4:2e:fe:e5:9a:71:f4:b5:57:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BD:81:9E:36:D7:73:38:08:CA:B9:EE:75:54:5A:25:D8:1E:CF:EE
            X509v3 Authority Key Identifier:
                keyid:1E:E3:7C:2D:AC:75:5F:08:D0:FA:EB:B8:2A:BC:33:D2:30:F2:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EE37C2DAC755F08D0FAEBB82ABC33D230F2C7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A53488770D6BD9ACBB07019A7B73802FDD148059D5E4CE5D460F5AE7E42DBE4B/0/34352e3137382e3138342e302f32322d3234203d3e203237363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:11:d2:db:64:d6:b2:c3:07:10:f2:c1:91:74:80:a7:11:
         04:8c:9e:d7:32:f4:36:39:7c:ea:99:09:e4:fb:92:a0:76:30:
         b5:29:a7:50:2a:06:a2:3c:9d:36:53:80:de:7c:45:d1:72:71:
         76:a7:3a:a1:69:28:08:16:55:35:cd:22:cf:a8:ed:03:3c:b4:
         d6:f4:38:17:df:00:25:fb:89:78:98:d7:26:6f:b2:4c:3d:30:
         92:43:0b:f3:f6:d2:8a:7f:74:65:7b:8f:0f:62:d7:47:63:a5:
         2b:f1:36:c6:8b:b3:0e:73:00:db:42:51:d4:5d:4f:da:c8:34:
         10:00:03:0a:4c:d6:84:14:bd:1c:55:0e:b7:d1:64:45:17:57:
         d1:06:30:cb:23:e3:b5:d1:57:c0:24:cc:ba:50:c2:b4:60:a5:
         5c:b1:37:f2:7e:4a:7a:a7:86:99:f3:68:cc:fa:06:89:4d:3b:
         3d:8e:ba:bc:08:92:f6:fe:6b:92:49:77:4b:4b:0a:c6:60:4a:
         ca:b5:f2:77:f3:51:71:cb:95:14:cf:84:07:67:02:9c:1d:a4:
         a5:07:43:48:80:4c:4a:12:87:48:d2:6b:ab:a1:35:a1:12:44:
         86:73:92:ef:e9:e9:2e:94:cd:71:e0:a3:fe:7e:d5:a5:e0:85:
         2b:e1:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org