Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa
File:                     34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa (raw, json)
Hash identifier:          HrP6gTE0mqCqdEmHmkFVRJKYWHt8BnyaFMq9DclxjA8=
Subject key identifier:   FB:D7:BF:27:72:9E:3A:2B:8F:02:81:08:32:29:45:8F:79:80:26:B5
Certificate issuer:       /CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
Certificate serial:       221D3F959FC3B5F8C63949139850A4611738810D
Authority key identifier: 6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa
Signing time:             Tue 05 Mar 2024 18:11:08 +0000
ROA not before:           Tue 05 Mar 2024 18:06:08 +0000
ROA not after:            Tue 04 Mar 2025 18:11:08 +0000
asID:                     267778
IP address blocks:        45.171.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1d:3f:95:9f:c3:b5:f8:c6:39:49:13:98:50:a4:61:17:38:81:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F511F1EFD0D671D1190C938CA5D7F2B6A911071
        Validity
            Not Before: Mar  5 18:06:08 2024 GMT
            Not After : Mar  4 18:11:08 2025 GMT
        Subject: CN=FBD7BF27729E3A2B8F0281083229458F798026B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:9e:8f:4a:64:0b:25:c9:49:47:d3:8a:1e:
                    4e:79:3b:ab:c3:29:05:f9:9a:60:26:42:29:4f:56:
                    23:42:68:1d:d3:ee:02:0f:9b:c1:72:29:ab:ed:e8:
                    fc:79:1d:14:7f:31:42:4c:10:66:da:20:72:a4:f5:
                    83:63:fa:1f:09:14:68:59:47:41:20:fe:40:3d:93:
                    20:9f:8f:ee:cf:67:f9:3d:0e:d6:fa:67:f4:e8:b8:
                    e2:0f:ce:6c:0b:1d:5b:e9:fc:77:85:81:75:56:84:
                    80:82:24:70:64:62:8c:fc:4a:ea:42:5c:19:34:77:
                    67:b7:20:2c:41:2e:8c:c5:0b:ad:74:f9:75:ef:d3:
                    09:8e:90:35:21:b1:3c:5a:68:46:d0:f8:ea:fa:d3:
                    ae:90:fc:d0:65:c3:a5:5d:b0:e2:3f:83:87:e8:ac:
                    34:6d:80:dd:a1:5e:0a:82:46:41:a7:f3:6b:d3:bf:
                    07:a8:f7:9c:73:5c:b3:20:29:9e:71:50:34:c9:f9:
                    6f:5a:71:b4:a3:4e:d3:9c:9f:79:21:27:34:53:f5:
                    e9:dd:02:05:7d:c1:91:73:08:31:4e:43:5e:52:81:
                    e1:79:da:67:42:87:e8:83:ff:c8:28:28:d6:49:fb:
                    9d:e0:d3:10:34:20:b2:eb:fc:83:d8:27:85:d6:5f:
                    23:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:BF:27:72:9E:3A:2B:8F:02:81:08:32:29:45:8F:79:80:26:B5
            X509v3 Authority Key Identifier:
                keyid:6F:51:1F:1E:FD:0D:67:1D:11:90:C9:38:CA:5D:7F:2B:6A:91:10:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F511F1EFD0D671D1190C938CA5D7F2B6A911071.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D964D1E9B8462204668ECB74A188721FD5266E51EBAE6FD2997AE9B09F1E5B05/0/34352e3137312e3130382e302f32322d3234203d3e20323637373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:c8:70:68:b8:e0:2b:8a:c9:42:31:8e:49:fd:a2:75:57:36:
         b2:59:2b:64:22:92:42:c8:52:0e:90:b9:fd:6d:00:75:89:88:
         e1:02:e9:ec:62:e7:5c:8c:01:16:63:22:42:b1:2e:a7:d7:0f:
         9e:21:ca:f7:99:1f:d3:00:d6:da:a1:3a:17:c5:27:06:0a:15:
         e6:8a:3c:07:5c:60:ad:17:7e:ad:84:3d:bd:79:8b:72:6e:9a:
         ba:07:79:07:ab:19:c1:03:1d:c2:36:92:32:d3:3c:87:fc:53:
         4b:81:8e:68:2c:f4:c5:f2:80:f3:4b:21:4c:3f:cf:9c:cb:d6:
         b5:e3:52:d2:8c:6d:99:50:ed:32:19:8b:63:f2:30:03:52:a5:
         80:a9:5e:8c:5a:4d:45:29:03:1e:ce:c9:be:e5:7d:e6:8e:24:
         31:ba:12:b4:1a:d3:9f:8b:6d:84:50:96:68:ee:d9:a4:9c:17:
         2f:e4:48:af:24:53:c6:c4:82:06:ec:43:a4:35:d9:7c:d5:88:
         51:f9:e0:9c:44:34:4f:ec:76:fc:b7:91:ac:dc:1c:17:1e:12:
         08:8c:9e:f5:0f:c9:fa:0e:c8:e3:0e:bf:1e:34:d7:24:da:20:
         66:61:71:52:b6:8b:d5:72:d5:20:45:9b:1d:81:f5:d3:43:bc:
         c5:89:7e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:13 2024 by rpki-client on console-ams.rpki-client.org