Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/34352e3138322e38302e302f32322d3234203d3e20323639373636.roa
File:                     34352e3138322e38302e302f32322d3234203d3e20323639373636.roa (raw, json)
Hash identifier:          +0fiOYWvSZzjl2/d4ZuIupaS+4fzYWfPbKQBfXGTFXw=
Subject key identifier:   91:F9:83:98:23:81:E8:2C:3C:C0:77:8D:B7:FD:B6:D4:83:DA:21:2E
Certificate issuer:       /CN=D83FF1918FEA10CB5809945319D399F4E6EEFB96
Certificate serial:       58EC77C53409A58526E48E3C0D1677A3AA7A0F6C
Authority key identifier: D8:3F:F1:91:8F:EA:10:CB:58:09:94:53:19:D3:99:F4:E6:EE:FB:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/34352e3138322e38302e302f32322d3234203d3e20323639373636.roa
Signing time:             Tue 05 Mar 2024 17:41:28 +0000
ROA not before:           Tue 05 Mar 2024 17:36:28 +0000
ROA not after:            Tue 04 Mar 2025 17:41:28 +0000
asID:                     269766
IP address blocks:        45.182.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ec:77:c5:34:09:a5:85:26:e4:8e:3c:0d:16:77:a3:aa:7a:0f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83FF1918FEA10CB5809945319D399F4E6EEFB96
        Validity
            Not Before: Mar  5 17:36:28 2024 GMT
            Not After : Mar  4 17:41:28 2025 GMT
        Subject: CN=91F983982381E82C3CC0778DB7FDB6D483DA212E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:fe:01:4e:9a:48:1d:d0:34:a3:ce:36:9b:
                    b9:69:73:a8:0f:01:67:f2:9d:4f:ef:4a:bc:45:b2:
                    c2:43:2e:14:2b:d4:60:20:6e:73:84:a3:ed:90:80:
                    74:f1:a8:5a:06:63:30:c2:f9:22:c5:64:1a:75:50:
                    dc:8a:8c:67:06:79:bc:92:96:d1:a2:70:aa:bf:59:
                    e9:30:32:9a:0e:d5:69:38:47:18:58:97:62:2d:39:
                    af:9c:5b:a6:4a:c0:2f:5b:c8:24:12:03:17:f0:6e:
                    e1:46:67:64:9e:5f:c4:9c:ec:0f:5c:78:6d:52:ba:
                    db:86:be:01:15:8c:7d:db:ef:a5:da:ad:9d:85:94:
                    a0:87:84:55:3b:2b:22:da:81:47:81:c5:8f:dc:1f:
                    41:02:7b:7a:6a:64:05:92:ef:42:4f:f0:af:57:61:
                    39:b0:e1:2b:cd:7f:4f:5c:04:43:2e:25:36:5a:12:
                    30:7c:35:e3:0a:2e:12:05:a3:7c:88:59:5f:ed:a1:
                    48:ca:af:2e:ea:02:7a:55:6e:62:a3:25:72:68:07:
                    de:09:c3:28:4c:51:1e:37:ba:6d:2c:17:50:cf:8c:
                    89:12:ea:30:83:0d:45:9a:e8:4c:df:d0:3e:f4:88:
                    8f:08:78:dc:f5:18:b3:2c:91:da:78:78:06:82:49:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F9:83:98:23:81:E8:2C:3C:C0:77:8D:B7:FD:B6:D4:83:DA:21:2E
            X509v3 Authority Key Identifier:
                keyid:D8:3F:F1:91:8F:EA:10:CB:58:09:94:53:19:D3:99:F4:E6:EE:FB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D83FF1918FEA10CB5809945319D399F4E6EEFB96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D602B188567C4CDDA1A5234A0D85B1FE54496C8F02437673C803E282055C30F9/0/34352e3138322e38302e302f32322d3234203d3e20323639373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:19:e2:c8:ed:3e:34:e2:77:82:e4:ba:bc:bf:b0:d1:f8:23:
         57:8f:8f:23:d0:df:bf:5b:d6:27:28:a5:66:b8:e1:f3:fd:30:
         e3:07:ed:9e:e9:21:db:5d:1c:7e:52:14:1b:88:d4:f0:74:f2:
         c5:78:d3:d7:ba:b0:36:5d:d6:d3:d5:33:76:30:ae:db:3a:63:
         78:cc:55:8e:5c:3f:ba:4d:f3:61:95:c0:4a:22:77:b9:c3:c1:
         28:42:f3:89:49:f4:04:44:2b:ba:de:15:19:a6:de:16:cb:fa:
         e7:ed:ea:f4:d8:6a:5b:bd:ed:b1:1c:58:8d:e5:d9:12:a4:5b:
         48:63:38:e5:b0:d5:b5:02:24:47:6e:b1:7d:18:17:b8:d8:0c:
         64:27:49:c2:18:dd:6a:91:b7:1a:04:a0:fd:b8:dd:63:6e:42:
         3b:4b:6c:05:42:71:21:da:b6:d8:95:e1:54:59:01:82:13:35:
         1e:ca:86:98:87:66:22:4b:43:28:48:47:16:5d:39:fb:7e:0b:
         66:75:48:dc:84:a5:c3:d2:b1:ee:47:72:78:bf:bf:ef:b3:d5:
         5e:e8:f3:0a:49:fb:73:be:22:ec:ac:34:8b:a6:8f:7c:87:90:
         ae:c0:b8:17:98:53:5c:89:27:3e:91:47:61:88:99:b8:2a:23:
         b2:38:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:19:04 2024 by rpki-client on console-ams.rpki-client.org