Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32322d3232203d3e20323635363633.roa
File:                     34352e3137352e3134302e302f32322d3232203d3e20323635363633.roa (raw, json)
Hash identifier:          fQDEHncA3yz1ELULEGZXiJ6q6vCjMUMv+6U34dYlQ6c=
Subject key identifier:   D8:8F:88:78:A1:53:E3:25:43:08:60:8D:D8:BF:F6:FE:AC:CB:F7:60
Certificate issuer:       /CN=029141245BD9F1CE31BEF7964E181E44F17CE901
Certificate serial:       518EBA02958B9CE376B6ED22B497A18C8252D9DC
Authority key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32322d3232203d3e20323635363633.roa
Signing time:             Wed 04 Sep 2024 20:00:01 +0000
ROA not before:           Wed 04 Sep 2024 19:55:01 +0000
ROA not after:            Wed 03 Sep 2025 20:00:01 +0000
asID:                     265663
IP address blocks:        45.175.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8e:ba:02:95:8b:9c:e3:76:b6:ed:22:b4:97:a1:8c:82:52:d9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029141245BD9F1CE31BEF7964E181E44F17CE901
        Validity
            Not Before: Sep  4 19:55:01 2024 GMT
            Not After : Sep  3 20:00:01 2025 GMT
        Subject: CN=D88F8878A153E3254308608DD8BFF6FEACCBF760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:4f:44:f3:3c:a6:89:ca:c0:f4:c2:f0:ba:
                    94:18:fa:45:38:8e:c9:e3:09:b5:f5:fd:91:57:b0:
                    30:8f:47:18:cc:e9:bf:e7:f8:90:8b:bc:c0:b7:79:
                    13:09:c8:04:76:8e:e6:fe:1d:63:7c:b2:43:fe:25:
                    86:64:50:89:75:e6:4e:50:40:77:af:31:fc:2c:0c:
                    62:8d:b8:23:db:d0:02:7d:8e:fb:d2:25:c4:41:59:
                    3f:a1:c8:5d:26:7e:89:a4:76:8d:ef:c5:74:3f:4c:
                    06:c4:00:b3:8d:5f:51:a8:88:91:03:49:87:89:59:
                    be:ca:68:0d:d6:21:c2:8c:9c:c0:94:e8:cc:0b:e6:
                    38:01:f7:1d:0c:0f:e0:10:7f:5a:df:53:d0:8e:e0:
                    49:53:be:6f:27:23:59:e7:5c:f3:7b:52:91:97:c8:
                    fb:7f:d4:5f:c0:ad:2c:3e:64:ce:c6:ab:8f:f9:3c:
                    1c:95:2f:0c:7d:84:52:64:ec:45:6b:cb:b1:c2:ca:
                    d9:00:83:f1:52:e7:a2:34:b9:03:34:1c:e2:6d:61:
                    b0:7a:a2:2b:5a:d1:15:54:11:f7:ee:6c:ba:59:f7:
                    73:9a:0d:f5:7a:9f:9a:f3:82:84:9b:00:46:29:e5:
                    41:b7:3c:57:b6:96:4b:3b:61:74:d4:7c:f1:e4:85:
                    19:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8F:88:78:A1:53:E3:25:43:08:60:8D:D8:BF:F6:FE:AC:CB:F7:60
            X509v3 Authority Key Identifier:
                keyid:02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/34352e3137352e3134302e302f32322d3232203d3e20323635363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:54:0d:d8:0d:b7:dc:cd:61:78:d6:a1:81:e5:68:92:a8:
         c1:0b:cf:31:02:f8:49:0f:fd:00:03:4f:5c:8d:02:cd:7e:c6:
         ca:5a:b1:25:08:62:0a:e8:8c:71:df:ab:d1:2d:bd:5a:73:04:
         16:30:be:ad:87:b5:97:2f:79:dc:5f:84:57:5a:5a:d4:25:6c:
         d7:fd:49:65:fd:1a:c9:c1:f2:7e:3c:73:8f:9d:c3:c9:41:b1:
         98:70:d2:e9:57:71:53:6b:f6:6c:ec:6c:1a:b8:c5:8a:54:66:
         16:6e:77:f0:58:50:94:85:94:0c:17:57:8e:97:50:cf:4c:85:
         4b:ae:05:c4:8d:ca:22:38:31:d0:9c:ed:09:57:32:18:ff:63:
         90:f3:2d:44:7e:63:8f:7d:7f:0d:77:27:f5:8f:19:91:69:9b:
         39:2b:e5:58:a4:36:78:6a:99:d1:fb:0b:87:fb:e3:6c:41:3c:
         55:73:49:00:24:16:54:f3:1b:43:3a:cf:6a:18:48:c5:f9:94:
         e4:cf:57:e7:f7:87:15:72:19:24:18:e6:db:1a:f9:20:31:f9:
         3b:b2:e4:89:7a:90:85:81:39:04:3d:f0:80:7d:9e:5e:00:86:
         01:0b:51:53:fe:39:14:af:11:4f:06:22:ae:a2:63:a6:f1:26:
         52:55:96:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org