Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa
File:                     34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa (raw, json)
Hash identifier:          KPP1LsjNMbibbcbqbX/d1PR/9bC/jhb7X9BLeJBmBM4=
Subject key identifier:   54:3F:EC:23:C8:37:82:0D:6B:25:9C:1D:AC:B4:A9:99:7F:5D:8F:31
Certificate issuer:       /CN=C73F4086487CA38B0D5EEE670B20804A270AA478
Certificate serial:       04D3452513DBF5B09708F0507EBACD7B92FFB35E
Authority key identifier: C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa
Signing time:             Tue 05 Mar 2024 17:45:06 +0000
ROA not before:           Tue 05 Mar 2024 17:40:06 +0000
ROA not after:            Tue 04 Mar 2025 17:45:06 +0000
asID:                     269785
IP address blocks:        45.182.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d3:45:25:13:db:f5:b0:97:08:f0:50:7e:ba:cd:7b:92:ff:b3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73F4086487CA38B0D5EEE670B20804A270AA478
        Validity
            Not Before: Mar  5 17:40:06 2024 GMT
            Not After : Mar  4 17:45:06 2025 GMT
        Subject: CN=543FEC23C837820D6B259C1DACB4A9997F5D8F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f2:56:37:92:e9:11:76:08:31:04:d5:93:33:
                    5c:51:d9:c7:1e:6e:58:37:3e:3f:d7:ef:a0:95:d6:
                    11:fe:3c:b1:1b:84:49:8a:68:5f:4d:75:50:0d:19:
                    fa:c9:b3:fc:e2:77:c7:6e:59:71:39:8c:92:4e:bd:
                    02:75:c6:e9:68:fa:65:0d:39:ef:98:55:3e:c9:eb:
                    55:4f:6a:17:b9:df:41:be:22:37:e8:70:14:fd:53:
                    90:66:9a:64:b2:b0:2a:36:83:13:be:a5:1a:35:79:
                    65:52:42:ad:e3:0f:cb:30:fc:57:16:7f:fa:bc:f7:
                    a3:e3:e7:0b:71:ce:68:73:3f:de:50:8f:1b:b8:2e:
                    f6:6b:41:80:9b:d7:99:6b:23:3d:e9:93:71:9d:3b:
                    2d:74:17:a4:cd:12:d7:fb:49:ea:2c:93:12:f4:cf:
                    7f:60:1c:f5:13:b1:23:88:8f:0f:e0:d2:10:a4:be:
                    43:47:f1:75:19:67:36:5f:f3:4d:93:be:19:43:76:
                    f3:e5:51:36:78:71:0f:e0:d2:2d:df:4b:b5:c8:e0:
                    bd:49:9e:81:01:57:8a:0c:9c:dd:0d:37:98:59:7f:
                    54:8b:4b:cf:5e:45:35:ee:31:13:a9:95:51:45:ba:
                    a0:60:01:82:d2:27:ae:3e:c6:23:df:a3:a6:cc:e6:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:EC:23:C8:37:82:0D:6B:25:9C:1D:AC:B4:A9:99:7F:5D:8F:31
            X509v3 Authority Key Identifier:
                keyid:C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323639373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:a1:f1:97:01:d2:89:4e:31:f0:98:c5:fe:74:72:0c:dc:32:
         55:6a:4f:d2:04:b1:f2:49:d6:c6:10:39:da:49:93:61:b8:cb:
         86:78:fc:a9:cc:89:cd:dc:d4:66:a7:14:ec:cb:b3:3a:26:59:
         d3:09:0a:92:dc:a3:31:0a:08:6e:b8:69:7c:53:e3:18:3e:32:
         4a:99:9b:c8:ee:2c:d4:35:ac:fa:05:ff:c5:a6:31:f2:a5:cf:
         b4:e3:7a:fc:5c:24:f5:3f:6d:85:94:56:fb:56:a0:43:c7:60:
         55:8b:e7:60:3c:bc:b0:37:74:cf:01:20:78:0b:a1:2d:07:84:
         84:6b:32:58:fc:61:58:b7:b4:5b:ca:00:3a:7d:7c:ce:dc:a6:
         23:1f:85:b1:0e:c2:f7:25:d5:2d:50:6f:a8:57:37:f6:19:69:
         80:85:b7:0d:53:1c:30:b4:d3:35:74:6f:9f:d6:aa:2c:1e:4d:
         5d:93:e6:43:97:39:da:b8:13:36:31:ce:c0:25:75:45:fc:39:
         31:3c:3a:13:b7:15:91:d8:1b:a7:bc:ba:a9:73:98:c7:95:3b:
         7c:f9:68:b8:62:02:f1:d2:1e:96:2d:20:ab:6c:98:76:93:8d:
         79:7c:d8:97:4b:6a:d7:b0:a7:c4:52:48:9a:38:f8:03:b0:d2:
         a8:20:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:28:51 2024 by rpki-client on console-fra.rpki-client.org