Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e372e302f32342d3234203d3e20323632313931.roa
File:                     34352e3137332e372e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          ZMxt6qOWDHyfWJ7bMf4ZBEhYrXbLn9mlwuetz+ITmhI=
Subject key identifier:   7B:E5:C2:C3:60:87:95:E6:9A:57:AE:CA:59:CA:FB:4F:5D:DA:F2:9E
Certificate issuer:       /CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
Certificate serial:       017CF6EE8499B6D20DB32911251BC5E975ABD19D
Authority key identifier: 43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e372e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:00 +0000
ROA not before:           Tue 05 Mar 2024 18:11:00 +0000
ROA not after:            Tue 04 Mar 2025 18:16:00 +0000
asID:                     262191
IP address blocks:        45.173.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7c:f6:ee:84:99:b6:d2:0d:b3:29:11:25:1b:c5:e9:75:ab:d1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8
        Validity
            Not Before: Mar  5 18:11:00 2024 GMT
            Not After : Mar  4 18:16:00 2025 GMT
        Subject: CN=7BE5C2C3608795E69A57AECA59CAFB4F5DDAF29E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:b2:df:0e:4e:76:f4:8c:e1:77:d1:41:cc:
                    a9:17:c9:64:6c:8f:db:60:a1:49:f9:ec:b7:e1:98:
                    5c:40:9b:ce:6a:b8:90:04:9b:03:c0:92:c6:36:0c:
                    e0:28:4c:64:a9:b0:25:ed:d8:38:dd:47:1f:c8:34:
                    09:1f:9c:fc:32:ac:7f:38:1c:39:5b:1f:de:fd:2f:
                    ac:0b:1b:bc:fc:64:3b:07:d4:4a:c1:ee:70:5a:df:
                    cc:fa:53:2b:c6:ce:30:26:61:e7:fc:dd:ee:bf:ba:
                    8a:87:65:c4:cf:e9:7e:fa:ff:3c:00:aa:46:29:86:
                    1c:38:6d:83:da:3e:27:19:a3:5a:9a:be:92:5f:77:
                    42:44:73:c9:87:13:7b:71:be:b7:59:28:43:5f:4b:
                    ba:f1:a1:55:aa:1e:78:a6:b1:ef:01:89:86:d1:2c:
                    fc:37:10:ca:97:85:cb:33:33:d6:91:71:dd:cb:19:
                    77:77:ad:83:95:45:5d:03:3e:0b:1a:70:30:2c:a7:
                    b8:4b:1d:4e:5c:bd:98:1c:d9:8f:27:69:f9:44:e3:
                    cf:90:bb:bd:be:e6:26:4c:76:30:f3:38:8e:b0:18:
                    ac:61:e5:de:83:3e:0f:53:76:e5:8d:11:94:6d:ef:
                    ef:5b:9b:1c:48:47:77:0c:42:e9:77:1c:fb:e0:5c:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:C2:C3:60:87:95:E6:9A:57:AE:CA:59:CA:FB:4F:5D:DA:F2:9E
            X509v3 Authority Key Identifier:
                keyid:43:DD:90:FB:D3:6B:CA:09:CE:09:DC:8B:32:72:A6:9B:0F:97:D5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43DD90FBD36BCA09CE09DC8B3272A69B0F97D5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F41F6B566D658E37C2BE9CDF35422CCE2ABE79948367C450EAB25731EC595924/0/34352e3137332e372e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:5d:9f:72:af:7a:a6:cd:a1:70:b2:37:89:46:04:4d:cc:8e:
         7f:fd:2a:17:3a:08:90:f0:2f:10:ea:15:72:6b:29:d2:d9:b2:
         c8:35:3a:03:b4:af:56:48:c2:e2:5e:06:8a:c8:3c:90:77:48:
         99:9e:9f:9a:dd:ed:9b:bb:86:a3:7e:29:1d:8c:3f:11:ca:53:
         8d:18:92:51:ae:f8:5d:bc:c9:48:ab:6c:f3:1c:70:d6:cc:f4:
         a8:26:46:0c:6b:f3:5d:f4:06:87:89:5d:b9:b6:87:5d:19:e2:
         cc:91:2c:5b:5a:18:72:6f:91:d7:42:21:8f:21:d1:e1:99:86:
         e1:82:cf:0b:ad:b0:f2:07:9f:14:dc:ac:4e:ea:d2:c3:f2:fb:
         a6:26:13:66:9b:f4:80:6c:e5:00:dc:a2:4d:3a:70:2e:c1:09:
         76:f4:c8:76:c2:f6:e8:5c:16:f3:ca:04:21:d0:49:3c:87:00:
         f8:43:bd:99:08:b0:ba:14:28:f4:5f:f9:a2:d4:1d:63:90:d8:
         66:63:c7:76:6e:d6:54:6b:ca:0e:d9:83:4f:0c:9e:f1:60:3f:
         c7:f1:9c:bd:14:1d:bf:38:65:0f:53:0f:0a:5e:92:f5:ae:87:
         e7:d9:c5:7e:a5:f4:e4:04:46:98:0c:5c:16:ee:2a:39:e2:78:
         f4:fe:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:47 2024 by rpki-client on console-fra.rpki-client.org