Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa
File:                     34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa (raw, json)
Hash identifier:          PfGx/dQ+hZzRPe5m++6+WIKhOwvSmQNaq47DZHD8A3g=
Subject key identifier:   67:B2:99:D7:18:0F:11:31:B3:11:7F:00:DB:23:CD:5A:5E:8A:DF:DC
Certificate issuer:       /CN=5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4
Certificate serial:       78E7BEFF5B47653AB167D816D2EFC5D269570624
Authority key identifier: 5D:F5:63:A0:C9:5D:89:DB:EC:34:5C:65:29:CB:C9:A6:ED:43:CF:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa
Signing time:             Tue 05 Mar 2024 17:43:24 +0000
ROA not before:           Tue 05 Mar 2024 17:38:24 +0000
ROA not after:            Tue 04 Mar 2025 17:43:24 +0000
asID:                     269781
IP address blocks:        45.183.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e7:be:ff:5b:47:65:3a:b1:67:d8:16:d2:ef:c5:d2:69:57:06:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4
        Validity
            Not Before: Mar  5 17:38:24 2024 GMT
            Not After : Mar  4 17:43:24 2025 GMT
        Subject: CN=67B299D7180F1131B3117F00DB23CD5A5E8ADFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:57:67:3a:1d:a6:7c:cc:30:20:bf:41:73:04:
                    3b:22:37:4b:a7:1c:fd:65:19:db:98:53:2f:7f:6e:
                    64:08:9e:3e:70:1c:ce:aa:f5:b3:00:bd:e8:4b:42:
                    0c:d2:ce:75:a9:0f:6f:d4:10:ab:8a:41:96:6c:33:
                    62:dc:5b:9b:22:56:bd:4a:32:2f:b8:0f:a1:af:f3:
                    78:79:f0:34:69:46:53:3d:c3:6b:48:33:e3:66:39:
                    47:68:79:ef:5b:7d:7c:1c:cf:fd:e9:6b:43:f6:56:
                    a6:8e:df:58:1a:ed:c5:a8:e1:6f:18:76:0a:45:c5:
                    d2:5f:2f:77:82:89:f4:97:43:c6:aa:87:22:ba:ae:
                    37:87:ca:f3:24:e6:fb:f3:7d:9f:28:d4:5b:56:6b:
                    8a:b3:be:06:8c:66:6e:fa:38:25:87:20:49:72:f7:
                    42:13:d6:99:51:72:89:10:78:83:3e:24:65:29:0d:
                    ba:39:e9:40:22:df:ca:9a:9c:a5:4c:63:b0:0e:0f:
                    22:4c:0c:c9:93:a2:35:d1:af:3c:c1:33:0a:28:e6:
                    23:d8:c9:32:eb:e6:31:96:f2:cc:a4:5e:65:fd:09:
                    08:3d:c7:7b:50:2e:92:56:86:22:3f:5c:32:90:e9:
                    f2:91:e0:7e:59:f6:7c:1c:f3:5f:40:81:69:43:bc:
                    f3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B2:99:D7:18:0F:11:31:B3:11:7F:00:DB:23:CD:5A:5E:8A:DF:DC
            X509v3 Authority Key Identifier:
                keyid:5D:F5:63:A0:C9:5D:89:DB:EC:34:5C:65:29:CB:C9:A6:ED:43:CF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5DF563A0C95D89DBEC345C6529CBC9A6ED43CFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5706200BCD6F64F8CC5C4E9FC0B44D47308EAB1D36981DE85B9D838B38BB886/0/34352e3138332e3135362e302f32322d3234203d3e20323639373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:b4:18:a0:6a:20:ac:ad:77:f7:6a:d1:5c:f4:b3:7a:a3:
         9e:9d:2c:45:73:6c:aa:ae:d6:13:e5:95:54:bb:67:1c:6f:2f:
         ee:a2:57:eb:08:98:3f:74:d5:ff:cb:9d:e3:1d:82:aa:ca:ae:
         87:25:1a:d7:3c:fa:47:b8:6a:00:4b:d4:c8:f1:19:70:35:54:
         9d:1a:29:7e:93:03:25:96:8a:e0:36:e6:c9:02:ab:ab:41:bf:
         41:6c:ad:04:c5:c8:bc:75:c7:2b:43:ad:fd:05:cb:d4:d7:da:
         de:6a:43:9b:fd:d0:aa:e4:18:f7:fc:2a:c5:af:79:e5:51:51:
         27:b6:b6:f9:ea:38:b4:2d:ae:56:9a:63:56:d9:19:28:55:14:
         d8:28:a6:9d:69:5d:60:49:55:28:0e:a4:3c:b6:8b:f8:bf:f2:
         75:b2:3f:78:50:4a:67:fa:04:76:0c:04:e9:c5:d1:99:b2:a6:
         60:fb:28:1d:7b:af:93:73:7f:ea:3b:fa:c3:fb:6e:ca:c8:d7:
         3f:5c:82:20:08:5e:bb:1a:d0:25:69:9f:26:6f:cc:5d:27:3a:
         f7:63:86:57:83:f8:35:fa:1c:70:83:eb:a7:af:3b:41:15:a0:
         d9:1d:d7:62:52:64:a6:8b:d0:06:77:e6:b6:fd:7f:d4:5e:62:
         00:4d:cb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:24 2024 by rpki-client on console-fra.rpki-client.org