Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/34352e3137382e39362e302f32322d3234203d3e20323637383939.roa
File:                     34352e3137382e39362e302f32322d3234203d3e20323637383939.roa (raw, json)
Hash identifier:          vrc8BObLdqQOCsJnWj8KHDwhXQCZl/9h0T88mb95EyQ=
Subject key identifier:   21:80:67:75:35:03:88:C3:F0:CC:70:4C:26:B6:AC:47:E4:02:26:F3
Certificate issuer:       /CN=D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6
Certificate serial:       51D6BFC7F9E01392C107F45DD60057EF9761B351
Authority key identifier: D6:D3:46:E7:A0:32:8B:10:9B:B9:BE:DE:D6:DF:3B:C8:A4:D6:21:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/34352e3137382e39362e302f32322d3234203d3e20323637383939.roa
Signing time:             Mon 29 Jul 2024 21:10:00 +0000
ROA not before:           Mon 29 Jul 2024 21:05:00 +0000
ROA not after:            Mon 28 Jul 2025 21:10:00 +0000
asID:                     267899
IP address blocks:        45.178.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d6:bf:c7:f9:e0:13:92:c1:07:f4:5d:d6:00:57:ef:97:61:b3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6
        Validity
            Not Before: Jul 29 21:05:00 2024 GMT
            Not After : Jul 28 21:10:00 2025 GMT
        Subject: CN=21806775350388C3F0CC704C26B6AC47E40226F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:65:49:11:dc:2f:3f:11:85:1f:68:fd:ef:2a:
                    f7:cb:db:87:31:c2:46:90:3d:3f:cf:3e:3d:19:78:
                    65:97:13:02:8a:69:99:bf:cb:94:74:a7:de:d2:85:
                    83:e8:5a:92:b8:bd:a4:38:e1:b5:f1:92:fe:2b:05:
                    65:ef:55:b4:af:79:7e:44:25:7a:f9:53:ac:f1:40:
                    c1:46:20:fa:09:6f:e9:b9:4f:ff:33:c5:61:1a:8a:
                    8c:d6:4a:62:eb:65:b0:e2:29:99:6b:2a:ba:dc:c8:
                    01:a2:c2:37:4f:a1:57:78:94:79:30:c7:42:d0:be:
                    34:1d:c8:8c:16:ee:e4:cb:69:2c:0a:dc:45:7b:19:
                    48:a5:59:d1:06:f2:2d:b2:5c:03:78:23:98:70:9d:
                    fd:de:7f:73:e0:3d:4c:e2:4d:58:54:3b:18:fb:aa:
                    7d:26:0c:1d:42:aa:92:36:01:78:80:ec:60:4e:d4:
                    06:12:2a:1b:74:ac:d5:8f:87:06:97:70:78:ee:2a:
                    ca:33:7b:e1:9b:ad:f1:5f:56:99:78:63:10:1b:a7:
                    86:19:95:5c:77:aa:df:cb:3a:3a:2a:ef:1c:1c:19:
                    50:c7:ce:39:95:fc:12:d2:14:3d:f2:5d:8f:16:38:
                    25:bb:53:e8:5e:73:01:9a:c5:18:66:2f:a7:8a:be:
                    a4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:67:75:35:03:88:C3:F0:CC:70:4C:26:B6:AC:47:E4:02:26:F3
            X509v3 Authority Key Identifier:
                keyid:D6:D3:46:E7:A0:32:8B:10:9B:B9:BE:DE:D6:DF:3B:C8:A4:D6:21:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6D346E7A0328B109BB9BEDED6DF3BC8A4D621D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E6032EFF91EF9821D8B047971265ED0BD8DF1E8F573CC27351AC0E0AB320CC2F/0/34352e3137382e39362e302f32322d3234203d3e20323637383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:6e:57:7f:dd:17:61:44:73:4f:46:54:78:f3:dc:f3:60:91:
         02:43:7e:f8:86:3f:a3:c7:13:2d:a1:c6:eb:2b:eb:bc:73:b8:
         c0:f0:21:5a:fb:8a:2b:de:a0:8c:f1:57:ec:42:c9:1b:54:c5:
         bf:6c:5b:b9:4b:07:dd:82:2a:50:a2:52:f9:79:ea:df:41:42:
         fd:65:67:52:1f:30:2b:14:da:27:0d:c7:e6:86:74:a0:07:2b:
         99:eb:70:ed:30:27:36:a4:01:6e:c6:2c:72:e0:04:1b:53:52:
         b8:bd:bb:8d:00:c4:20:e0:36:51:4c:83:12:f0:47:e7:17:4a:
         2c:fa:5f:ea:12:f4:27:9d:44:c4:95:fe:41:9b:11:a0:3b:e6:
         a9:f5:4e:df:04:dd:8f:0a:05:ba:14:f8:3d:40:d4:60:a3:e8:
         3d:b4:62:9c:d3:85:c2:8a:c5:a1:07:82:09:05:4d:69:43:ec:
         50:fa:c7:8a:50:1d:ad:2f:87:d0:3f:e5:0b:17:24:14:c4:e3:
         d4:48:95:6c:8a:02:1a:a3:69:e5:56:da:81:40:14:b6:48:f0:
         4d:24:21:54:b3:3d:37:a3:2b:fb:3f:0b:18:23:7e:78:4d:73:
         98:b7:ab:e0:73:bd:5f:9e:90:f7:d3:9b:86:fc:52:2a:08:fc:
         a3:44:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:53 2024 by rpki-client on console-fra.rpki-client.org