Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/34352e352e32382e302f32322d3234203d3e20323635373036.roa
File:                     34352e352e32382e302f32322d3234203d3e20323635373036.roa (raw, json)
Hash identifier:          fjdEWTvZs/JaGjK9oW9rROeI0OIHa0tz8wwpv/8r9cw=
Subject key identifier:   2D:13:6C:6E:EA:F2:EF:15:BD:4B:BB:51:40:8E:02:EB:AC:3B:59:BD
Certificate issuer:       /CN=73F5635860CFCD6D03F2A4CDFFCA79190AAE6915
Certificate serial:       6C16B273F372E12BC2E427916B786706CBAFA831
Authority key identifier: 73:F5:63:58:60:CF:CD:6D:03:F2:A4:CD:FF:CA:79:19:0A:AE:69:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/34352e352e32382e302f32322d3234203d3e20323635373036.roa
Signing time:             Tue 05 Mar 2024 18:13:40 +0000
ROA not before:           Tue 05 Mar 2024 18:08:40 +0000
ROA not after:            Tue 04 Mar 2025 18:13:40 +0000
asID:                     265706
IP address blocks:        45.5.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:16:b2:73:f3:72:e1:2b:c2:e4:27:91:6b:78:67:06:cb:af:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73F5635860CFCD6D03F2A4CDFFCA79190AAE6915
        Validity
            Not Before: Mar  5 18:08:40 2024 GMT
            Not After : Mar  4 18:13:40 2025 GMT
        Subject: CN=2D136C6EEAF2EF15BD4BBB51408E02EBAC3B59BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:ab:5c:63:21:98:53:db:0c:a4:29:77:60:
                    58:9e:43:26:17:70:18:43:e9:38:23:24:65:b1:a0:
                    9f:6d:b9:be:29:26:21:2d:7c:1c:97:c5:f1:63:a5:
                    fe:25:d7:95:30:4d:86:13:d1:86:b7:9c:5e:f1:ad:
                    82:b4:86:b5:91:73:e6:fc:11:5e:12:ea:f7:72:4b:
                    ba:82:e6:3b:d0:79:3f:27:9c:06:9f:49:e6:f4:85:
                    19:ba:c8:4e:21:f2:ac:40:4f:9f:83:37:4c:c3:7a:
                    3c:3f:f1:34:a8:90:1e:db:26:cc:9e:c7:36:f0:71:
                    54:92:a8:23:d4:3a:d6:72:1e:9b:08:aa:19:e3:7f:
                    cb:d6:67:79:ed:d6:b0:c7:dd:9e:9e:fb:7b:d0:43:
                    c4:bb:2c:ff:2a:ba:dc:57:65:c9:73:6a:53:4a:69:
                    08:c8:5d:5a:80:5a:bf:56:e2:0a:f1:8d:f0:2c:b2:
                    81:06:f6:6a:9b:cb:ac:42:84:66:cd:b1:e5:27:93:
                    ab:ea:1d:de:69:59:e9:d2:44:d5:3f:aa:13:79:79:
                    0b:9e:e4:53:0f:75:18:78:a4:3a:a2:18:16:65:5a:
                    1c:b9:48:19:6c:e8:ac:61:ff:92:92:0b:51:0e:e3:
                    82:70:61:50:93:77:4c:91:90:04:fa:e9:1a:54:02:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:13:6C:6E:EA:F2:EF:15:BD:4B:BB:51:40:8E:02:EB:AC:3B:59:BD
            X509v3 Authority Key Identifier:
                keyid:73:F5:63:58:60:CF:CD:6D:03:F2:A4:CD:FF:CA:79:19:0A:AE:69:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73F5635860CFCD6D03F2A4CDFFCA79190AAE6915.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E60FC7975894A40582CFF1B2E3F82B21EFBBC0EACB829B1927E7F06596733E57/0/34352e352e32382e302f32322d3234203d3e20323635373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:d5:a5:bf:e5:eb:cb:6c:68:69:71:0d:11:1f:7a:60:82:c6:
         90:5e:42:7a:ef:9f:41:c5:8e:51:4b:13:e3:f1:f1:06:f1:bf:
         d4:e4:3d:da:8e:b6:21:0d:f0:47:44:a4:7e:a5:6f:82:35:f5:
         3f:fb:e2:c8:93:8a:fc:5a:95:01:e4:40:26:dc:2f:14:95:d1:
         fc:8d:dd:25:28:b3:20:24:13:35:1f:48:c0:28:e8:9f:83:d8:
         15:ab:69:d7:f7:f7:88:37:fb:96:a5:2a:d9:88:ff:45:4c:a7:
         ae:0b:c3:88:4f:c0:e4:5a:40:1e:53:fc:9e:3f:36:14:e7:ef:
         ea:51:0c:17:ff:17:70:b0:6a:d8:6d:5f:90:d0:08:43:92:2e:
         7b:c7:8e:1d:f4:1a:7a:14:76:cc:68:c5:9f:00:a8:2e:4d:2e:
         d9:49:bc:40:4c:65:50:25:94:5c:b4:5f:2e:6f:c8:6f:91:3b:
         0c:00:7c:cb:5c:7e:d8:a9:91:a0:44:fb:fb:fe:4e:42:a6:38:
         ce:c4:ff:b4:56:f0:7c:a0:39:55:b4:85:7a:d6:9f:d6:f8:40:
         62:34:aa:ba:c2:2d:4c:2f:21:4f:45:6b:64:fd:b6:3c:55:57:
         d4:1b:32:45:48:4e:4f:c9:66:10:4d:48:0d:97:4d:ff:20:07:
         95:78:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org