Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa
File:                     34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa (raw, json)
Hash identifier:          cVYjJBr+Ytt8/7eEcbr2+fUDddrVH/uaQ4iSwT5y6PQ=
Subject key identifier:   29:F2:63:69:D8:F0:33:68:79:51:E3:77:BC:14:5E:DB:31:EB:5D:1E
Certificate issuer:       /CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
Certificate serial:       389C08E049C25D5D5901431E3A6D5EA15C6DE0CB
Authority key identifier: A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa
Signing time:             Tue 05 Mar 2024 17:57:10 +0000
ROA not before:           Tue 05 Mar 2024 17:52:10 +0000
ROA not after:            Tue 04 Mar 2025 17:57:10 +0000
asID:                     265703
IP address blocks:        45.162.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:9c:08:e0:49:c2:5d:5d:59:01:43:1e:3a:6d:5e:a1:5c:6d:e0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
        Validity
            Not Before: Mar  5 17:52:10 2024 GMT
            Not After : Mar  4 17:57:10 2025 GMT
        Subject: CN=29F26369D8F033687951E377BC145EDB31EB5D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:13:19:4b:20:a7:e1:8b:b6:9e:04:db:39:29:
                    9b:2e:7b:a2:f7:72:7d:ea:26:50:ee:e1:6a:b9:81:
                    f2:0d:77:d4:e5:ec:64:9e:0d:77:6a:a2:ba:11:07:
                    a0:a0:e6:95:1e:f1:1d:ab:31:9f:27:00:60:9f:92:
                    b7:91:19:23:25:81:cf:da:28:ca:04:b9:6b:71:ce:
                    eb:d2:bc:98:73:79:d5:97:22:0d:e3:d8:5f:51:6c:
                    15:3a:20:b1:23:0f:be:b0:d5:79:4a:72:83:11:27:
                    1c:ef:2c:c7:84:6d:3b:07:fc:cf:bf:6b:49:ab:ea:
                    44:c1:82:74:86:13:00:a9:c0:d6:14:76:a9:da:99:
                    cd:2f:c5:c1:f9:94:0e:fc:c7:b5:ca:0c:12:aa:4e:
                    7d:bf:1c:76:9c:a8:14:2c:f9:09:19:ac:b3:7a:c9:
                    44:29:cd:9d:88:30:fc:2c:fa:20:31:96:1a:3b:60:
                    2c:09:33:5a:4e:37:ad:56:9f:f2:3c:39:ad:90:2a:
                    c3:75:8a:ac:a6:c0:2e:37:f4:7f:11:68:51:8a:59:
                    ef:f2:54:ac:48:73:ad:91:5d:a4:e3:f3:83:e3:f6:
                    73:16:aa:67:21:4c:df:c7:08:87:cf:e0:d9:78:bc:
                    2b:c6:a9:bc:4d:b3:c0:e9:49:91:03:40:7e:d8:7c:
                    14:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F2:63:69:D8:F0:33:68:79:51:E3:77:BC:14:5E:DB:31:EB:5D:1E
            X509v3 Authority Key Identifier:
                keyid:A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323635373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:1e:1b:49:02:31:e7:81:a6:d4:d0:1c:31:82:9b:bb:05:1c:
         07:fd:a1:51:55:3a:75:5d:67:1f:1c:30:a1:b0:4e:e5:b0:3f:
         8a:1d:54:f9:68:50:01:7f:7e:52:5a:d7:53:ca:60:12:82:7d:
         fb:39:16:35:7d:fc:94:e5:24:d3:2d:94:5e:00:ed:be:07:03:
         16:a4:43:a4:63:56:55:75:54:11:76:5f:df:98:a3:de:f8:6a:
         24:a2:e6:0f:f3:b5:6e:8e:14:e8:5f:9e:0a:41:85:72:8f:09:
         73:dd:55:26:55:a2:ef:a2:83:c2:75:ce:4a:4d:e7:46:1b:96:
         1b:b5:1c:b7:02:a0:af:cb:be:e8:e2:57:5e:24:96:5b:01:75:
         4f:02:fe:bf:67:21:a5:e1:6d:87:3b:f0:f4:4b:26:4c:dd:f5:
         a2:43:71:71:54:c9:c0:c4:cf:b5:84:2c:70:84:4a:08:6c:2f:
         ef:89:be:6a:fd:4c:e6:db:49:f0:61:d5:1e:0c:0c:07:2a:57:
         24:f4:57:d9:9b:32:d5:5c:1e:37:e6:38:31:aa:6f:67:23:6c:
         cc:cf:1e:ba:df:61:7a:25:92:79:ab:e0:5d:10:e3:84:00:dc:
         9b:d5:91:91:13:64:c1:15:1b:1d:d8:62:dc:40:fb:aa:75:1b:
         30:e0:4e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:04:19 2024 by rpki-client on console-fra.rpki-client.org