Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/34352e3138382e3136302e302f32322d3234203d3e20323639383339.roa
File:                     34352e3138382e3136302e302f32322d3234203d3e20323639383339.roa (raw, json)
Hash identifier:          1yNaTm1aNBlM/UPyIoH4zmXzadYgyTCimbiXdY6ORtI=
Subject key identifier:   7F:09:21:34:2E:44:35:15:F3:46:BD:7D:14:69:58:44:DA:90:2A:88
Certificate issuer:       /CN=744E6BFD2BB7971EC4A9155DAE899B85AA355F13
Certificate serial:       323B724BC1A42BFB60AE9BCD32D2D207EAD8B180
Authority key identifier: 74:4E:6B:FD:2B:B7:97:1E:C4:A9:15:5D:AE:89:9B:85:AA:35:5F:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/34352e3138382e3136302e302f32322d3234203d3e20323639383339.roa
Signing time:             Tue 05 Mar 2024 17:59:13 +0000
ROA not before:           Tue 05 Mar 2024 17:54:13 +0000
ROA not after:            Tue 04 Mar 2025 17:59:13 +0000
asID:                     269839
IP address blocks:        45.188.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3b:72:4b:c1:a4:2b:fb:60:ae:9b:cd:32:d2:d2:07:ea:d8:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744E6BFD2BB7971EC4A9155DAE899B85AA355F13
        Validity
            Not Before: Mar  5 17:54:13 2024 GMT
            Not After : Mar  4 17:59:13 2025 GMT
        Subject: CN=7F0921342E443515F346BD7D14695844DA902A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:3b:1e:7c:5d:d7:a0:cb:ae:c4:61:07:e7:
                    7f:40:94:9f:0e:5d:4d:66:cd:bc:9a:4b:b1:45:6d:
                    55:3c:d1:5c:8d:a5:26:ea:1a:90:ab:11:26:b3:1e:
                    6a:c7:a9:65:09:cf:d8:91:c2:4d:6d:9c:5c:00:3d:
                    89:2c:dd:2d:c6:7c:85:93:a5:1d:c2:bf:5f:f6:db:
                    1b:66:54:d4:7a:bd:3e:f0:97:3e:65:21:1a:02:e9:
                    2a:41:b2:06:cd:d1:2b:cc:1e:ce:02:10:26:94:f7:
                    67:e1:85:f8:e0:1e:c3:e1:19:f8:27:19:c5:29:e7:
                    48:11:03:05:b4:48:bd:a4:87:fa:c1:79:4f:e7:ca:
                    86:dc:cf:00:55:87:be:8d:d4:8e:9c:e7:55:72:23:
                    40:09:78:2d:df:28:a6:83:68:e7:9b:9a:b8:c7:74:
                    73:69:8c:37:b7:31:13:8c:fd:19:5d:39:17:cb:7b:
                    51:cd:f4:8a:d0:4f:66:93:6b:db:48:58:ed:5f:b7:
                    5c:87:3d:e6:79:8c:e4:6c:4d:8c:5a:c5:e5:9b:2a:
                    99:dc:32:35:98:f5:78:c7:87:11:09:25:1e:8c:7a:
                    c4:80:1f:27:1f:aa:86:c8:1b:ac:9a:41:bf:19:85:
                    be:46:7d:d0:66:5c:1b:6d:e0:3d:fe:30:c5:30:32:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:09:21:34:2E:44:35:15:F3:46:BD:7D:14:69:58:44:DA:90:2A:88
            X509v3 Authority Key Identifier:
                keyid:74:4E:6B:FD:2B:B7:97:1E:C4:A9:15:5D:AE:89:9B:85:AA:35:5F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/744E6BFD2BB7971EC4A9155DAE899B85AA355F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE1C9D7AB390FCFC4A0A593E1811C6D0FA551834A173120CE6D42C1E8D6D78BE/0/34352e3138382e3136302e302f32322d3234203d3e20323639383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:70:c7:c1:43:9e:ef:9d:9a:38:ef:89:59:f2:c4:d1:01:7b:
         ce:54:fa:16:3d:c6:a3:dd:a6:20:c2:bb:26:b0:79:4b:06:1e:
         50:ca:49:7d:54:48:2f:69:1e:d3:67:78:76:fc:c1:45:9e:4c:
         b8:62:bd:2c:26:8d:f1:0b:40:30:b0:90:4c:ce:3d:c0:dc:8c:
         a7:1a:f0:b8:3f:92:3b:70:3c:c7:3f:f2:c4:76:16:44:c1:9d:
         80:0e:35:34:58:0e:0d:f6:4a:97:12:1f:60:e3:3a:a6:5e:12:
         65:42:cd:89:aa:40:f2:3a:c4:2a:a2:42:94:e9:2e:c1:74:cf:
         b5:e7:e9:c1:ca:d8:ea:c9:5b:fd:9f:c7:06:77:28:ba:72:f2:
         b4:89:e5:82:33:c9:da:41:6d:a8:a5:7e:4c:89:93:f7:be:cb:
         fe:28:64:14:b8:2b:f6:a0:15:37:57:e1:58:98:5a:d0:04:ad:
         9c:13:61:2e:78:1a:fa:81:33:e8:14:0f:47:24:8c:e5:98:5f:
         ac:67:fd:df:55:57:a2:55:f1:64:72:17:e1:e3:f1:1a:dc:ad:
         92:53:69:d2:58:db:db:9b:b3:40:2b:0c:e0:c1:bc:f4:6a:19:
         c8:e4:0d:d7:37:0e:7c:62:ac:77:29:3c:a7:5b:50:7d:19:78:
         ef:61:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:20 2024 by rpki-client on console-fra.rpki-client.org