Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32332d3233203d3e20323637383537.roa
File:                     34352e3137332e342e302f32332d3233203d3e20323637383537.roa (raw, json)
Hash identifier:          2rCqSNoi0VBKKCW+CzZX7CRf3TptVnDvIxVkudsspyo=
Subject key identifier:   C1:6D:A0:31:31:02:32:50:C9:6F:1F:DE:90:63:D5:28:48:5D:20:A5
Certificate issuer:       /CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
Certificate serial:       673112A9BE5705AA351F200B5F403B0DAA4A7E65
Authority key identifier: 43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32332d3233203d3e20323637383537.roa
Signing time:             Tue 05 Mar 2024 18:16:00 +0000
ROA not before:           Tue 05 Mar 2024 18:11:00 +0000
ROA not after:            Tue 04 Mar 2025 18:16:00 +0000
asID:                     267857
IP address blocks:        45.173.4.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:31:12:a9:be:57:05:aa:35:1f:20:0b:5f:40:3b:0d:aa:4a:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
        Validity
            Not Before: Mar  5 18:11:00 2024 GMT
            Not After : Mar  4 18:16:00 2025 GMT
        Subject: CN=C16DA03131023250C96F1FDE9063D528485D20A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:53:7d:2c:11:2d:f9:ca:28:6f:5c:7e:13:
                    6c:09:4c:dd:46:f6:e6:1f:b9:fb:77:fc:64:c6:4b:
                    a7:ff:49:af:d3:e2:c6:b5:82:7b:3a:c4:0c:12:34:
                    cb:12:fc:33:cb:42:11:b3:7f:bc:78:6a:84:07:30:
                    83:05:4c:a4:3d:ee:7d:0a:19:44:a4:89:da:c7:48:
                    3c:14:b8:65:35:ae:72:19:32:66:f9:7b:b9:2c:ed:
                    4e:ee:df:b1:d6:b6:41:60:d0:1e:69:41:37:f9:27:
                    22:d0:09:57:7c:df:0e:95:00:0a:9a:7f:8a:4a:25:
                    11:3b:ed:1c:e2:8b:2f:21:bd:a0:2c:16:e4:50:ce:
                    8e:01:85:c0:2b:f9:04:40:05:7d:0d:1d:69:fd:27:
                    ab:ed:db:d5:ab:61:cb:b7:0d:aa:25:af:7d:3a:3c:
                    7e:17:02:4c:4f:43:ff:88:00:03:22:a0:a3:1c:4b:
                    ce:ce:7c:d5:34:15:e9:9c:b7:26:a5:e5:34:5d:54:
                    10:21:d1:de:cd:9f:4f:1b:84:58:36:34:bd:8b:78:
                    c7:89:e3:27:13:af:87:49:f9:0a:9e:d2:d6:9b:0b:
                    d6:72:aa:4f:e4:76:29:51:ed:10:67:74:e7:0f:9c:
                    61:2f:df:21:d3:3d:35:24:b0:89:8e:25:4f:7f:6a:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:A0:31:31:02:32:50:C9:6F:1F:DE:90:63:D5:28:48:5D:20:A5
            X509v3 Authority Key Identifier:
                keyid:43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e342e302f32332d3233203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:fc:85:c5:e5:6a:0d:bd:91:37:98:e7:3a:c9:1e:4c:52:
         37:ba:24:01:ce:f0:26:0d:6f:6d:bd:94:ca:2b:b1:e9:38:e3:
         7e:12:49:fc:e9:1b:4f:e9:e8:15:cc:88:47:2f:61:3c:11:3c:
         65:6c:e4:fc:93:bf:39:10:77:07:af:98:ca:1f:1a:04:72:a5:
         3c:4f:93:60:f8:1d:a4:77:e4:7e:d0:9c:a5:e9:c2:c9:5a:7f:
         b1:17:1f:09:45:67:a2:a2:e2:fa:05:4d:61:9b:83:b8:d1:a9:
         0e:da:18:a0:fd:86:b8:df:b1:08:d6:1e:30:d6:48:24:48:55:
         e1:2c:54:88:20:da:3b:fe:25:d3:70:0d:8d:24:a3:c0:57:d0:
         83:0e:f3:45:80:fa:e6:ed:a1:49:a6:04:f1:41:e6:6b:37:e1:
         90:28:f0:c9:9a:80:63:14:01:dc:44:ae:8a:4d:82:c1:10:9f:
         3e:82:d4:46:10:ca:7e:6c:27:44:f8:d6:f2:9e:e0:ce:52:e8:
         be:ce:82:d1:9e:05:ef:a4:26:6f:37:91:a1:68:d7:ca:31:9d:
         dc:a2:cb:e4:a5:04:24:c4:d4:7c:96:ce:65:8c:a0:05:38:33:
         be:e6:5e:3d:d7:2d:87:4e:e3:79:52:c5:fa:80:a1:8e:45:50:
         c0:87:2a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org