Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/34352e342e3133362e302f32322d3234203d3e203237383834.roa
File:                     34352e342e3133362e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          YnT09TsFZz8oMO7wbl0t79wlRw5+CInE5g6kQK2wa50=
Subject key identifier:   07:3F:08:B8:A2:F6:FE:38:EC:BA:AF:D7:FE:A9:C0:A8:20:2D:2D:08
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       06EA16D1D92002ED38965F3265C29119A98F0993
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/34352e342e3133362e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:12:36 +0000
ROA not before:           Tue 05 Mar 2024 18:07:36 +0000
ROA not after:            Tue 04 Mar 2025 18:12:36 +0000
asID:                     27884
IP address blocks:        45.4.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ea:16:d1:d9:20:02:ed:38:96:5f:32:65:c2:91:19:a9:8f:09:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Mar  5 18:07:36 2024 GMT
            Not After : Mar  4 18:12:36 2025 GMT
        Subject: CN=073F08B8A2F6FE38ECBAAFD7FEA9C0A8202D2D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:6b:19:b6:63:54:60:a0:04:4c:1f:92:b3:
                    bb:a2:74:d1:fb:5c:08:4a:e0:42:40:1f:fe:03:08:
                    8e:bf:b7:01:bb:b8:28:1e:9b:e0:1f:a4:0a:08:cb:
                    b6:68:6e:be:6a:7e:57:aa:e5:48:a2:e5:2d:c3:e0:
                    69:6b:fd:6f:1b:55:d8:67:e7:c6:9e:a1:77:83:e9:
                    fd:52:ab:c4:0e:d1:3f:bf:cd:14:41:10:c1:31:5d:
                    09:8a:d0:af:3f:c7:d6:4b:45:2e:15:cb:3f:1b:29:
                    a4:52:0e:5a:cb:15:e5:ba:a5:0f:c3:9f:36:a2:98:
                    be:85:3b:11:6d:a7:00:1a:42:e2:c7:5c:f0:6f:e3:
                    ff:9c:7e:bb:0e:c0:56:4d:16:6c:0f:e0:19:83:43:
                    e6:9c:75:67:9c:e7:03:4b:52:95:9f:6d:8a:a6:37:
                    d7:04:d3:59:57:f2:9f:ca:2c:3e:39:cf:a0:fc:d4:
                    0e:b2:52:3b:1b:27:23:67:d7:9e:f3:1c:c0:77:ee:
                    94:99:dc:94:f6:8c:43:9f:24:c4:ac:4a:76:45:ed:
                    6f:d8:1c:2a:09:2b:02:53:7a:db:7f:6d:9a:6a:9b:
                    f8:b6:e6:4c:9a:4f:5d:45:89:cd:ae:4c:5a:c7:b7:
                    6a:bc:2a:cd:8a:ec:92:23:7b:a7:64:82:f6:6d:b4:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3F:08:B8:A2:F6:FE:38:EC:BA:AF:D7:FE:A9:C0:A8:20:2D:2D:08
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/34352e342e3133362e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:5f:96:81:5f:c5:1c:a5:bb:8d:de:af:e9:ca:e1:19:dc:6e:
         01:7b:34:7c:e6:a0:84:ad:81:38:8e:3b:bd:96:aa:13:56:2e:
         2f:ba:65:9d:40:db:90:89:a2:96:80:76:62:34:16:60:f8:86:
         60:a0:54:13:6b:c7:c7:71:fb:3c:d5:2c:a3:fb:e8:e6:3d:91:
         39:08:9a:85:3a:87:ce:41:15:4e:a3:e6:c4:c3:53:62:19:bb:
         d9:f0:24:8e:2a:38:0e:54:76:b6:3a:ed:65:90:ea:6f:f7:02:
         50:9c:23:32:78:47:e8:6f:9f:be:40:97:3e:3d:0f:47:9f:3c:
         56:19:c9:f3:37:83:96:29:e8:05:74:42:22:60:9e:14:f4:5e:
         3e:6f:ed:0c:47:ad:3f:8f:0a:ba:a6:b0:9a:46:21:30:e7:a0:
         cb:e8:88:50:ee:75:7d:cf:a1:28:ba:bc:c0:d2:30:97:ab:c5:
         9d:88:8e:f4:4e:f2:ef:25:55:bb:65:90:e5:43:af:a6:9d:31:
         6c:e1:f4:67:18:bf:87:8f:4d:60:89:1f:a1:bf:0d:cf:26:ca:
         7a:bc:73:a7:72:09:5b:6a:b6:ef:10:35:4b:2d:9f:15:03:c1:
         7a:cf:be:3b:e5:5f:fb:27:77:02:6f:65:ee:8b:80:c6:3d:66:
         cd:57:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 08:19:51 2024 by rpki-client on console-ams.rpki-client.org