Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/34352e342e38382e302f32322d3234203d3e203532343638.roa
File:                     34352e342e38382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          ElotauJEQJ/Xh1GgxKXtyN77+CC7ipe8eSCRA30E90o=
Subject key identifier:   00:93:75:DC:3E:72:F7:B1:CB:99:6A:3A:F0:48:25:A2:A9:19:DC:7C
Certificate issuer:       /CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
Certificate serial:       71601AFBBC6F76388DDE9381CF4B5C56C639DAD5
Authority key identifier: F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/34352e342e38382e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:12:30 +0000
ROA not before:           Tue 05 Mar 2024 18:07:30 +0000
ROA not after:            Tue 04 Mar 2025 18:12:30 +0000
asID:                     52468
IP address blocks:        45.4.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:60:1a:fb:bc:6f:76:38:8d:de:93:81:cf:4b:5c:56:c6:39:da:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518
        Validity
            Not Before: Mar  5 18:07:30 2024 GMT
            Not After : Mar  4 18:12:30 2025 GMT
        Subject: CN=009375DC3E72F7B1CB996A3AF04825A2A919DC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:5f:61:5c:9e:00:ec:38:3a:ae:b7:31:8b:
                    bc:de:5f:f1:57:af:69:a4:15:a7:49:b5:83:f0:80:
                    b1:5f:24:d4:4f:3c:00:b9:ed:f7:76:58:2a:98:6f:
                    55:29:90:e2:ac:d5:ec:92:90:d1:ce:16:4c:08:33:
                    ad:4c:74:1b:89:18:c9:d4:c2:5a:f1:32:60:17:d9:
                    a2:fd:cf:d5:55:6c:bb:0e:82:55:00:62:30:49:12:
                    b5:35:76:36:c4:4e:47:8d:a6:ba:fb:7b:5e:60:1c:
                    e9:ef:b5:4c:36:73:71:ef:37:32:0a:c8:91:56:0b:
                    32:79:eb:f2:d6:c2:90:49:5e:63:b8:b3:80:25:ad:
                    2e:35:60:05:f6:da:9d:3e:93:85:e2:3e:7d:a3:46:
                    30:50:55:73:cd:36:fb:8a:0f:13:c6:56:9a:de:96:
                    94:36:b6:4f:0b:8f:3e:44:6a:77:b5:69:d1:9b:6e:
                    e8:eb:c1:eb:01:64:87:44:5f:cc:16:0c:f9:d6:84:
                    b4:95:d5:aa:31:ea:0e:ea:e6:9f:ee:85:a4:70:31:
                    4a:8e:a4:46:3e:35:8e:af:34:93:9e:af:3b:66:78:
                    3a:0b:2b:07:db:d7:50:a7:2a:af:c0:7f:d8:41:07:
                    0e:92:f4:6a:eb:95:51:43:08:90:fc:48:bc:61:25:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:93:75:DC:3E:72:F7:B1:CB:99:6A:3A:F0:48:25:A2:A9:19:DC:7C
            X509v3 Authority Key Identifier:
                keyid:F1:BC:5A:3A:F8:D7:7F:60:38:55:EA:8F:CD:43:EA:B6:19:B5:F5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1BC5A3AF8D77F603855EA8FCD43EAB619B5F518.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD4A8420D0926D97FB3843697FC4B592D7C823D66995F3C00000CFA2C5E4502B/0/34352e342e38382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:26:5b:0c:25:56:fa:64:58:aa:b0:7c:0a:fd:36:9c:14:
         e8:45:78:02:06:88:68:c8:55:f6:57:20:dd:f3:93:04:8d:a8:
         ed:d1:00:02:1a:95:c9:8a:91:c0:37:28:18:db:76:98:ac:aa:
         3c:98:8f:7c:dd:5c:37:d9:82:62:9f:d9:37:ba:56:d9:05:1a:
         51:5f:0a:4d:7d:d4:c6:d1:50:44:18:89:86:5a:25:e8:10:78:
         59:bc:af:3d:c6:a0:34:2f:f4:de:68:d4:11:a3:0a:94:f4:da:
         07:61:63:b5:8b:51:a7:65:ad:ce:c4:d8:ac:0e:85:41:25:46:
         da:30:9b:fd:db:35:31:80:29:e4:1c:07:a8:21:ae:ec:a4:cd:
         08:47:2d:3c:26:11:b1:8b:e5:b6:b7:53:67:7f:c3:8c:a9:a1:
         17:d2:6e:5e:65:93:d0:1c:8c:23:fd:ad:5c:0a:4a:80:bd:fd:
         67:6f:4a:62:a4:2d:30:87:a4:39:50:76:8d:d6:a2:2a:fc:45:
         54:1e:d7:c1:c7:04:4a:77:ed:cc:be:d0:dd:e8:74:43:63:be:
         9c:ec:07:4b:e2:1e:86:7e:6d:50:aa:e2:df:8d:e5:74:d7:95:
         0f:cd:e8:0e:de:ff:bb:03:0f:d7:79:0d:46:f8:06:61:06:4b:
         e4:80:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:09 2024 by rpki-client on console-fra.rpki-client.org