Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
File:                     34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa (raw, json)
Hash identifier:          3M3vCUHemRMM8OxFSHVuh3dEBA6PKJyUTQQ8BKe5I04=
Subject key identifier:   E1:7B:D7:A4:C5:A8:D8:0B:2F:04:D2:C3:1E:CF:D4:D3:4C:93:B3:8A
Certificate issuer:       /CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
Certificate serial:       07BE5670E47D0D09C2F2DBD0397FA9B29B020352
Authority key identifier: DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa
Signing time:             Tue 05 Mar 2024 17:44:15 +0000
ROA not before:           Tue 05 Mar 2024 17:39:15 +0000
ROA not after:            Tue 04 Mar 2025 17:44:15 +0000
asID:                     266901
IP address blocks:        45.161.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:be:56:70:e4:7d:0d:09:c2:f2:db:d0:39:7f:a9:b2:9b:02:03:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB5A38E075D530ECB516C04071D54A6B1DD78CFC
        Validity
            Not Before: Mar  5 17:39:15 2024 GMT
            Not After : Mar  4 17:44:15 2025 GMT
        Subject: CN=E17BD7A4C5A8D80B2F04D2C31ECFD4D34C93B38A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:10:88:5f:38:83:3e:8b:ed:56:f0:c8:0d:65:
                    1b:f0:90:3b:a1:6a:ab:85:27:18:e8:f5:a3:60:df:
                    b3:0c:a5:e1:91:40:aa:fe:c8:4e:66:25:74:56:5d:
                    82:0a:7f:c6:38:02:0a:5e:2f:07:1f:24:3d:ae:8b:
                    26:e2:92:41:89:5d:63:6d:ee:af:93:75:f4:6b:be:
                    38:81:8e:67:32:b3:2f:85:ae:09:62:fa:ea:9a:7a:
                    27:70:8f:0c:d3:0f:cc:63:c2:de:46:b2:0e:9e:47:
                    56:9e:98:c3:20:94:c7:dc:f3:e6:0f:84:4a:c3:1c:
                    e7:ae:5c:6a:91:01:a6:cd:b6:50:a3:ef:c3:67:53:
                    43:86:6d:bf:3b:be:87:da:9b:93:ac:33:dc:3d:3c:
                    1a:89:e3:20:15:10:d5:43:a2:58:4a:03:81:10:83:
                    ce:c9:e8:e9:16:16:ca:e5:52:e4:ce:63:34:95:2f:
                    77:12:e5:84:50:54:d1:c6:1b:42:38:33:48:4f:dd:
                    eb:b4:10:bb:6b:3e:93:c5:1f:58:5c:c3:51:49:3f:
                    67:6a:1f:e9:94:30:7b:45:7f:49:c9:44:ab:38:80:
                    44:10:b3:18:52:5c:38:0e:51:aa:c5:15:78:ed:d2:
                    b2:22:14:ce:ae:59:61:54:69:6e:17:08:8f:8e:76:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:D7:A4:C5:A8:D8:0B:2F:04:D2:C3:1E:CF:D4:D3:4C:93:B3:8A
            X509v3 Authority Key Identifier:
                keyid:DB:5A:38:E0:75:D5:30:EC:B5:16:C0:40:71:D5:4A:6B:1D:D7:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB5A38E075D530ECB516C04071D54A6B1DD78CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D98343873225DE5E473604713F0307E4120ACE1E9CB51C85D183E2AB4E8F80B9/0/34352e3136312e3130382e302f32322d3232203d3e20323636393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:bf:4e:54:bc:3a:75:28:89:15:f8:96:89:2a:16:7c:62:02:
         d7:b0:6e:64:f0:e7:da:9f:7a:70:d1:30:ad:62:ad:8f:80:63:
         78:ff:05:e4:76:2a:e8:c3:dc:1b:9c:68:25:aa:96:99:ff:e9:
         8d:26:63:f1:f3:5c:61:fa:f8:88:d5:ed:a8:53:74:24:12:c2:
         df:44:5b:9d:15:15:36:5a:b8:b9:14:b5:03:d4:f0:59:66:04:
         32:8b:b0:15:76:1a:68:c7:d9:36:88:a0:34:65:6c:60:b6:9e:
         44:0a:ce:2a:b9:1a:71:a7:04:ab:ef:eb:c7:85:82:b3:10:d8:
         69:63:85:df:d1:db:3d:55:e4:32:ad:d4:d8:f2:60:67:f6:59:
         48:85:1d:53:d1:24:58:9b:58:34:3d:4e:d6:a0:81:95:ee:95:
         4b:fe:8d:e7:e0:fe:42:57:03:c4:0c:8a:09:37:4f:ba:7f:ad:
         2a:f9:c7:45:e4:2f:37:fc:5a:f7:86:59:f9:aa:79:ff:13:52:
         e4:d3:25:e5:a7:a5:2a:31:22:e2:d5:af:6b:39:7f:1b:39:7a:
         01:17:58:da:3f:5d:00:c3:3a:22:48:68:f1:fa:bf:5a:ac:40:
         49:a6:4a:8c:24:5d:95:69:cb:2a:3c:aa:0e:8e:19:82:7a:ab:
         65:ea:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:48 2024 by rpki-client on console-fra.rpki-client.org