Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/34352e3137302e34342e302f32322d3236203d3e20323637373536.roa
File:                     34352e3137302e34342e302f32322d3236203d3e20323637373536.roa (raw, json)
Hash identifier:          J9/+I8n1bJSx1g1ixEw8l9aoyqidQDmmpKPj4TVLKJU=
Subject key identifier:   C2:FA:CD:B9:E8:FC:A0:19:61:10:0E:B0:69:D8:47:9B:62:D1:BD:74
Certificate issuer:       /CN=26357EEDCBC3F2015A201607E75DEDF2C576CFF7
Certificate serial:       0EE23C49A89A5FB9DC7B6608C4668D2ED81B54FC
Authority key identifier: 26:35:7E:ED:CB:C3:F2:01:5A:20:16:07:E7:5D:ED:F2:C5:76:CF:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/34352e3137302e34342e302f32322d3236203d3e20323637373536.roa
Signing time:             Tue 05 Mar 2024 18:07:21 +0000
ROA not before:           Tue 05 Mar 2024 18:02:21 +0000
ROA not after:            Tue 04 Mar 2025 18:07:21 +0000
asID:                     267756
IP address blocks:        45.170.44.0/22 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:3c:49:a8:9a:5f:b9:dc:7b:66:08:c4:66:8d:2e:d8:1b:54:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26357EEDCBC3F2015A201607E75DEDF2C576CFF7
        Validity
            Not Before: Mar  5 18:02:21 2024 GMT
            Not After : Mar  4 18:07:21 2025 GMT
        Subject: CN=C2FACDB9E8FCA01961100EB069D8479B62D1BD74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3a:bd:96:2a:42:f4:78:e1:3f:59:cf:fe:5b:
                    d0:95:97:a7:38:a0:dc:5d:56:9c:f8:c8:15:45:08:
                    69:1f:95:f7:0a:03:96:cd:d2:4d:6a:08:bf:ad:66:
                    b2:a9:a6:d7:0d:94:3e:a9:e1:1e:79:d5:68:76:45:
                    06:3b:bd:f9:ac:dc:c8:c4:bf:f9:52:50:a2:04:aa:
                    91:06:7d:37:4a:c5:81:8d:f1:df:21:b9:ca:2f:2a:
                    cb:a8:46:91:e4:2a:ba:69:6d:1c:72:2a:41:09:18:
                    ff:3e:cc:d7:27:e7:d9:92:7a:76:29:b6:5e:e8:84:
                    69:cc:37:6a:4b:6d:e2:51:57:65:22:f2:0f:ef:82:
                    33:5e:9b:9b:a6:1b:57:ec:09:97:29:0f:8e:48:8a:
                    af:53:9a:9e:71:a4:68:9b:78:43:53:2e:30:5f:98:
                    44:31:59:8c:42:7b:c9:8c:5c:34:e0:7a:67:f9:ed:
                    fb:5b:6b:42:53:8a:36:c8:e7:be:45:04:b7:3d:7b:
                    9a:af:c5:66:24:3e:bd:31:cb:5d:e3:fc:26:25:a0:
                    c2:cd:96:f3:52:1f:93:ff:21:1b:4c:5b:7c:e8:26:
                    a6:c2:72:5b:75:ac:42:3d:c9:a4:ab:aa:a4:66:f9:
                    dd:17:ae:ee:a9:d9:f6:da:6e:cc:a7:55:c4:7e:aa:
                    06:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:CD:B9:E8:FC:A0:19:61:10:0E:B0:69:D8:47:9B:62:D1:BD:74
            X509v3 Authority Key Identifier:
                keyid:26:35:7E:ED:CB:C3:F2:01:5A:20:16:07:E7:5D:ED:F2:C5:76:CF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26357EEDCBC3F2015A201607E75DEDF2C576CFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3A5679B193661D5FB8B792EF99A837BEC00538ACCB42C2665C5552062A70AE4/0/34352e3137302e34342e302f32322d3236203d3e20323637373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:cd:f7:60:37:0a:58:99:ec:8c:43:59:33:59:3c:48:82:81:
         3a:39:71:5d:9e:8d:5b:b6:f7:de:0c:e6:67:3c:62:07:3d:7d:
         cc:94:c2:87:f2:4e:77:07:9b:36:66:4d:13:ce:15:49:93:aa:
         cf:2d:e4:c7:b0:a0:58:ac:f8:90:63:3d:80:01:70:17:e1:2f:
         ce:e0:be:a7:26:8e:28:df:5a:2c:96:72:99:90:00:cc:b6:1c:
         07:61:56:2a:b1:22:6f:7e:08:32:73:aa:96:54:b4:c4:7b:fa:
         1b:4a:2f:fb:69:f5:63:6d:49:8e:5e:cf:d5:a9:62:6d:3d:3e:
         20:ef:0a:ce:06:4f:e9:3e:d4:93:5d:06:0e:6c:65:09:92:4b:
         ef:cd:a9:a2:c1:7e:ff:3a:c0:c3:5e:f0:29:ab:c2:a7:53:c9:
         02:68:88:6f:54:4a:43:53:89:bd:5d:f7:73:58:46:1e:98:63:
         6a:10:9a:36:43:de:bd:24:67:2e:16:ae:a0:28:97:71:03:d4:
         b0:75:09:e4:9b:37:91:f3:58:03:0e:55:67:06:35:d4:5e:1b:
         19:93:8d:48:b3:f1:a7:22:18:d5:3b:ce:55:5b:bc:13:5c:88:
         66:94:5e:fa:d5:50:81:1f:d5:90:a8:0a:01:e1:e2:b0:c6:8b:
         3f:18:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:28:26 2024 by rpki-client on console-fra.rpki-client.org