Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
File:                     34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier:          V1nrmpmoPYJPe4GU314LF2RG6PTpR/uF5k2bd1SMg3Q=
Subject key identifier:   62:A1:E7:5A:30:DC:08:44:D5:92:55:3C:FD:47:D0:9F:2C:F7:95:E3
Certificate issuer:       /CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
Certificate serial:       28A9BCC8C669280F4DBEF10FE1DB05F3A4ACEC1B
Authority key identifier: 57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa
Signing time:             Tue 05 Mar 2024 18:20:12 +0000
ROA not before:           Tue 05 Mar 2024 18:15:12 +0000
ROA not after:            Tue 04 Mar 2025 18:20:12 +0000
asID:                     265534
IP address blocks:        45.174.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a9:bc:c8:c6:69:28:0f:4d:be:f1:0f:e1:db:05:f3:a4:ac:ec:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41
        Validity
            Not Before: Mar  5 18:15:12 2024 GMT
            Not After : Mar  4 18:20:12 2025 GMT
        Subject: CN=62A1E75A30DC0844D592553CFD47D09F2CF795E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:24:b5:e1:46:2c:8b:9e:89:34:97:27:58:80:
                    33:93:90:74:de:05:cc:a9:e0:62:95:3d:93:80:99:
                    b5:0c:b0:5d:38:7b:f1:5b:70:14:7f:00:20:c5:89:
                    d6:45:26:b5:1b:8b:06:73:93:cd:e2:87:f3:d7:b6:
                    68:20:2f:1d:1d:1c:6e:30:e1:f0:8d:b2:b9:07:3c:
                    02:6c:26:37:24:e9:e9:08:5d:95:8e:40:f2:0d:68:
                    fd:ee:6d:a5:37:2c:7a:b2:cc:08:82:01:8e:ac:c4:
                    91:86:6a:9f:f2:47:ba:f6:ba:84:5b:78:e7:7b:7c:
                    5a:fd:d0:e3:12:c1:96:45:c6:b3:69:11:82:f9:9d:
                    89:dd:2b:65:7a:9a:80:69:94:e5:78:2f:73:57:a6:
                    cb:e4:9d:2e:2e:e5:ac:ca:20:61:b5:7b:c6:6d:5b:
                    92:65:8f:bb:79:7a:ad:05:1a:9c:07:81:8f:0b:d7:
                    39:95:41:1c:4c:05:32:45:94:19:e9:0a:3d:d1:7e:
                    39:36:32:30:5f:b0:06:8a:a0:60:46:bb:a5:21:f9:
                    1e:4b:c4:dd:9c:06:be:98:eb:72:ba:fa:4c:50:04:
                    5e:90:c7:4d:47:d1:80:fc:69:af:fa:6f:a8:c4:55:
                    aa:d1:e4:49:ab:bb:78:86:62:61:48:2b:19:fe:c5:
                    26:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A1:E7:5A:30:DC:08:44:D5:92:55:3C:FD:47:D0:9F:2C:F7:95:E3
            X509v3 Authority Key Identifier:
                keyid:57:B2:0D:3E:C2:19:61:A6:50:5D:CA:0A:D0:B3:3D:C3:3C:5C:CD:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57B20D3EC21961A6505DCA0AD0B33DC33C5CCD41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3825A7AEBBD78E1348C3C07BBBA3D1DBE040B1549B2B71139E6B8108B9F2382/0/34352e3137342e3232382e302f32322d3234203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         da:1f:bf:f3:70:89:fa:49:1e:b0:de:16:1e:b9:04:c3:2f:8f:
         43:a5:cc:58:20:7e:05:0a:47:0b:dd:1e:9a:55:be:10:c3:26:
         c3:9e:e4:a8:8e:9b:1f:bb:51:a9:f8:4f:ed:0a:8c:c3:61:ef:
         d5:a7:a7:ec:c6:8a:4d:14:03:cd:0f:54:67:b2:35:f0:0c:37:
         61:71:d5:3c:40:50:cc:09:7e:43:a2:dc:13:9a:f3:d2:0f:2a:
         b5:30:d2:ed:b6:56:50:b8:45:11:9c:60:bb:0c:d1:2b:15:0c:
         9d:61:9c:5a:9a:54:fe:a2:5a:a2:86:67:1b:72:bf:0e:ca:d5:
         67:7b:7d:de:71:9b:e3:7c:7f:99:d4:c3:1d:4e:72:eb:73:e0:
         29:3d:fc:c0:1e:05:99:7e:ff:da:4c:09:00:20:cc:09:0e:b9:
         9a:47:b6:fa:ba:42:db:40:bb:7e:29:9b:15:57:1b:1f:24:87:
         89:56:34:5c:de:ec:33:b7:99:a4:48:a6:d8:28:c6:83:0f:61:
         1b:2f:6c:02:a0:1d:3c:1a:0a:0d:0b:f4:ee:dd:8b:c1:e7:a2:
         bd:cd:e8:89:6a:2d:60:d0:60:db:ef:4e:99:3c:94:ba:a1:30:
         83:a2:0f:00:db:93:30:09:63:50:de:83:a4:b7:e6:2e:9b:ee:
         a6:14:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org