Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3234203d3e20323636363832.roa
File:                     34352e3232382e37362e302f32322d3234203d3e20323636363832.roa (raw, json)
Hash identifier:          bRwtYEsB8DTCBUew20IiWMEUKTFqgVp0cqFQophL49w=
Subject key identifier:   A4:F7:55:50:33:0F:9E:5B:F9:06:40:11:F6:1B:D9:09:99:45:6A:00
Certificate issuer:       /CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
Certificate serial:       323C25F6F0E4D07C038656EB5DD9BABADC6E0864
Authority key identifier: 53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3234203d3e20323636363832.roa
Signing time:             Tue 05 Mar 2024 17:40:11 +0000
ROA not before:           Tue 05 Mar 2024 17:35:11 +0000
ROA not after:            Tue 04 Mar 2025 17:40:11 +0000
asID:                     266682
IP address blocks:        45.228.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3c:25:f6:f0:e4:d0:7c:03:86:56:eb:5d:d9:ba:ba:dc:6e:08:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=538C5308A8AF2D420CB9AC8163C606D43D3A8156
        Validity
            Not Before: Mar  5 17:35:11 2024 GMT
            Not After : Mar  4 17:40:11 2025 GMT
        Subject: CN=A4F75550330F9E5BF9064011F61BD90999456A00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:b6:c7:fc:3f:77:41:c9:59:cb:f0:1e:fc:
                    af:47:9b:92:48:4a:b7:dc:b5:72:50:93:c2:92:5a:
                    08:5b:ca:2a:c7:db:e8:4c:92:fb:94:27:71:4a:74:
                    a4:39:87:4e:1d:b8:60:42:89:3d:30:4e:a9:fe:48:
                    ed:b0:98:23:4c:f5:c7:39:8f:2e:0b:2a:61:10:b7:
                    ad:34:84:35:7e:ea:63:d3:1f:45:45:78:c7:d1:1b:
                    e3:5c:42:98:98:3e:34:98:1f:43:27:ce:09:95:08:
                    4d:a0:68:f9:c7:a3:99:4b:a6:5b:67:3e:9a:2e:0b:
                    be:73:ef:5e:48:8f:c1:19:2b:67:f7:05:69:df:b5:
                    0d:81:ba:e6:1b:43:13:07:cf:da:bc:95:8e:41:9b:
                    68:e6:cd:d6:48:0c:73:b7:ee:b8:33:86:09:ae:f0:
                    f8:0a:42:48:84:7f:cd:34:c8:16:a6:45:f5:91:6d:
                    aa:01:5c:d2:4c:aa:4d:e7:bc:ff:ce:29:38:28:6c:
                    f7:f0:69:65:06:71:e9:7a:b8:f5:7a:ee:16:f2:68:
                    72:62:9a:38:ff:8b:57:05:db:69:b0:aa:17:e9:a3:
                    1b:c6:4c:95:c7:21:85:b3:45:98:fe:e6:70:d6:59:
                    33:31:d1:a7:17:03:1a:62:9c:bb:47:f4:3a:8d:cc:
                    3a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F7:55:50:33:0F:9E:5B:F9:06:40:11:F6:1B:D9:09:99:45:6A:00
            X509v3 Authority Key Identifier:
                keyid:53:8C:53:08:A8:AF:2D:42:0C:B9:AC:81:63:C6:06:D4:3D:3A:81:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/538C5308A8AF2D420CB9AC8163C606D43D3A8156.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA11F9305826D36334E44D131363BECE159F5BF052B21D453723D35551A40CB9/0/34352e3232382e37362e302f32322d3234203d3e20323636363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:fd:b2:4a:30:a2:0f:0e:f1:f8:9e:9c:f0:ef:ae:c3:a2:
         5b:44:bc:da:f5:1a:94:5f:48:fc:7a:8b:3f:76:d9:f3:c4:07:
         7b:88:c8:4b:b8:bc:e0:db:11:fc:9a:fc:0e:f7:2a:eb:a3:8e:
         e3:08:13:ee:e9:7e:df:8b:d5:67:18:40:e7:cc:96:8e:27:d3:
         79:49:fc:1d:b9:98:df:92:4c:69:07:c4:76:59:36:9a:d4:38:
         33:06:ec:b3:e2:5b:cd:53:27:53:7f:86:93:3b:44:e1:84:f3:
         23:f8:bc:75:63:23:64:74:48:da:4b:01:47:fd:82:84:b2:fe:
         f6:92:dd:ac:ad:e1:30:11:c0:56:8b:00:46:d4:01:f5:05:37:
         2e:25:1b:3e:95:a1:6d:5a:6b:5f:c0:8c:07:aa:05:74:a1:8e:
         36:8d:42:2a:dd:08:73:78:f2:f9:6f:bf:1d:0c:85:a9:a7:d1:
         e3:e5:ff:9d:35:37:5f:31:58:eb:49:7e:14:10:51:80:2d:ff:
         30:66:67:98:05:89:2f:8f:6c:d2:2a:e7:a9:f7:79:43:44:b9:
         9c:86:43:0f:b4:fe:6a:3d:0c:fb:cb:d2:b9:18:38:16:50:f1:
         b8:d4:60:1e:0d:fd:52:8f:7e:d0:31:b6:14:8c:cd:b8:f0:84:
         e5:71:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:52 2024 by rpki-client on console-ams.rpki-client.org