Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/34352e3136332e3230342e302f32322d3234203d3e20323637363834.roa
File:                     34352e3136332e3230342e302f32322d3234203d3e20323637363834.roa (raw, json)
Hash identifier:          dPD7OcnYXLAItQSjoL6MayTg5DE7ksVdH7RKioPAck4=
Subject key identifier:   9D:BB:D0:A3:E0:22:DD:A1:7C:12:E5:E2:E3:8B:26:EF:71:68:1E:05
Certificate issuer:       /CN=FF34EB454923E9D3FEFD8AA5392C42451891D9B4
Certificate serial:       39448536F518AB35468EB2D365AAE368E73EF489
Authority key identifier: FF:34:EB:45:49:23:E9:D3:FE:FD:8A:A5:39:2C:42:45:18:91:D9:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/34352e3136332e3230342e302f32322d3234203d3e20323637363834.roa
Signing time:             Tue 05 Mar 2024 17:47:35 +0000
ROA not before:           Tue 05 Mar 2024 17:42:35 +0000
ROA not after:            Tue 04 Mar 2025 17:47:35 +0000
asID:                     267684
IP address blocks:        45.163.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:44:85:36:f5:18:ab:35:46:8e:b2:d3:65:aa:e3:68:e7:3e:f4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF34EB454923E9D3FEFD8AA5392C42451891D9B4
        Validity
            Not Before: Mar  5 17:42:35 2024 GMT
            Not After : Mar  4 17:47:35 2025 GMT
        Subject: CN=9DBBD0A3E022DDA17C12E5E2E38B26EF71681E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:93:9c:3b:75:c9:f5:87:e9:ec:72:6a:74:a1:
                    42:5d:ca:49:f5:89:12:39:22:d2:35:69:8e:fe:cd:
                    78:d6:7d:65:06:82:7c:b8:bc:9c:06:ce:55:b6:a3:
                    6b:e8:0f:9b:5e:8a:4a:3c:96:b5:ca:cf:28:ad:38:
                    cc:6c:89:bf:08:4f:54:e5:7d:42:f5:99:ba:76:92:
                    d3:32:e8:3e:ab:bf:82:b4:4a:08:0d:45:32:80:fb:
                    25:57:cb:95:11:31:e2:9c:7b:bf:c7:fa:02:a4:fc:
                    a9:f7:27:97:76:43:f5:c6:0f:ab:00:b6:b1:45:d7:
                    92:50:e0:99:81:eb:b3:2b:12:bf:9e:f8:dc:be:ef:
                    71:b4:ae:ad:d8:83:13:d2:a7:95:50:98:ed:e3:11:
                    23:9e:c7:3d:69:9a:ea:6e:3a:f3:d4:dc:ef:f1:4b:
                    da:5f:93:9b:75:76:0d:53:94:e2:4e:20:3f:64:af:
                    5a:1d:8f:36:ab:da:23:9e:be:b2:67:e7:c6:35:c1:
                    6c:22:0e:4f:4b:f5:6d:4e:20:d2:66:f9:2e:16:28:
                    59:ee:0c:dd:ee:30:7c:01:75:fd:ea:4e:64:10:6c:
                    0f:47:9e:ba:25:59:dc:45:18:07:c2:d5:e9:a2:08:
                    b2:df:d3:a6:a0:0e:84:f3:18:32:cf:9d:01:54:32:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BB:D0:A3:E0:22:DD:A1:7C:12:E5:E2:E3:8B:26:EF:71:68:1E:05
            X509v3 Authority Key Identifier:
                keyid:FF:34:EB:45:49:23:E9:D3:FE:FD:8A:A5:39:2C:42:45:18:91:D9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF34EB454923E9D3FEFD8AA5392C42451891D9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E07E3A7E10DDD105314CEE346B7BA7B1AEAD93DC7A3FD16843054C53FA1B0961/0/34352e3136332e3230342e302f32322d3234203d3e20323637363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:3d:9f:e3:c0:f0:39:f2:fd:50:96:a5:b7:ca:7f:e9:3b:93:
         1c:92:42:02:f8:aa:de:49:88:19:77:66:ad:9e:c3:db:5c:dd:
         34:0c:ca:60:55:6e:3f:93:5a:61:e3:1e:47:a0:e9:3e:aa:9c:
         09:6a:47:9f:49:17:7d:84:43:51:6f:01:80:8f:3a:85:ab:d9:
         b3:ce:c9:ee:57:97:f0:79:b8:8b:7e:40:b0:8c:10:4a:a3:39:
         46:6c:59:aa:89:b6:75:0b:f6:0f:bb:b6:c4:ce:4f:c2:d0:e8:
         0f:61:42:89:09:45:6c:4e:31:de:08:eb:77:39:11:b5:93:ac:
         e3:dc:d2:8a:c5:3b:4b:c4:aa:36:3c:d0:43:23:19:8c:2d:c9:
         76:cc:64:bb:1c:27:00:5b:1a:76:99:6c:d5:9a:ce:ff:88:ec:
         ce:4d:b6:5a:1f:77:d8:c2:f7:06:12:0c:42:0b:31:ec:bc:37:
         5d:a8:48:66:ea:ed:59:d6:24:97:ef:ff:4e:1f:75:df:e2:37:
         7c:91:9c:1f:bd:0b:cb:b1:8d:94:03:b0:37:9c:c0:35:cb:3e:
         ee:3d:74:16:5a:8e:10:76:8d:16:a0:a8:92:1a:59:52:bd:24:
         68:3f:2c:9a:ce:e3:72:49:2e:5b:46:9c:86:59:cb:08:8e:6c:
         2c:7b:19:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org