Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e31302e302f32332d3234203d3e20323632353839.roa
File:                     34352e3137332e31302e302f32332d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          H71mFOWCLsXVRoGDt2E7C4TYzk7ROKQ9hczPq7s0qFE=
Subject key identifier:   24:E0:73:D7:67:A6:9B:DC:AF:B0:27:7A:60:9A:21:8C:45:E6:C7:3C
Certificate issuer:       /CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
Certificate serial:       AC58AF02EA4EEDA4F99EABC9AEB8D51A327F40
Authority key identifier: 42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e31302e302f32332d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:43:58 +0000
ROA not before:           Tue 05 Mar 2024 17:38:58 +0000
ROA not after:            Tue 04 Mar 2025 17:43:58 +0000
asID:                     262589
IP address blocks:        45.173.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ac:58:af:02:ea:4e:ed:a4:f9:9e:ab:c9:ae:b8:d5:1a:32:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420B44E3D543CA237CB6BC9020FEC4357D75D278
        Validity
            Not Before: Mar  5 17:38:58 2024 GMT
            Not After : Mar  4 17:43:58 2025 GMT
        Subject: CN=24E073D767A69BDCAFB0277A609A218C45E6C73C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:18:58:52:70:e7:df:e5:90:94:7d:d7:d2:2c:
                    57:3b:b5:b6:f3:c7:f5:aa:8e:ae:50:21:a4:1d:48:
                    96:f9:4c:65:c0:28:57:d5:0c:e1:f4:be:8f:c7:65:
                    f6:d2:b1:33:e5:65:0e:1d:97:6c:72:65:5f:00:3a:
                    82:74:cd:60:7e:0a:b6:b1:28:19:01:7b:85:15:e2:
                    f1:6c:64:01:1a:f0:9a:7f:96:f2:c7:b7:51:09:df:
                    f1:ef:ce:e3:7c:a6:e0:3e:56:79:d4:ac:d8:67:e1:
                    92:7c:ca:fd:86:68:b5:e3:3f:82:60:18:f8:4a:3f:
                    78:c9:73:91:e9:69:67:3b:2b:58:77:8c:5a:db:63:
                    31:b6:d1:2d:61:60:ce:13:d8:51:0e:09:8b:0f:92:
                    e1:a3:90:8e:0f:bd:4d:3e:16:ee:0f:55:d3:71:a8:
                    2e:5c:05:eb:e5:d6:b3:6a:45:e6:94:e3:f7:7d:04:
                    15:96:50:00:7a:2b:f1:91:bd:b3:80:fc:89:05:d6:
                    d7:2e:73:6b:a6:bc:0c:4f:45:f7:87:f4:25:65:cb:
                    71:22:62:e4:d4:ae:28:1e:9b:c6:c1:7c:9f:1e:ce:
                    7e:e9:f8:0f:6f:66:da:c7:15:f8:33:ad:f8:62:0d:
                    03:5e:ae:4f:b2:61:22:61:25:a3:0c:43:01:e3:6e:
                    ce:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:73:D7:67:A6:9B:DC:AF:B0:27:7A:60:9A:21:8C:45:E6:C7:3C
            X509v3 Authority Key Identifier:
                keyid:42:0B:44:E3:D5:43:CA:23:7C:B6:BC:90:20:FE:C4:35:7D:75:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420B44E3D543CA237CB6BC9020FEC4357D75D278.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7B95F1DDB9E3C4242EE36BE0E3B1CE3CCFEB00F89508C1D7E75596D3D112EDE/0/34352e3137332e31302e302f32332d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:31:1b:67:1e:d8:40:d3:95:34:8f:1d:9f:4d:50:b1:7e:
         d9:35:fe:de:b9:5c:e8:a9:ac:03:e2:8b:0d:2b:b4:dd:b3:9e:
         59:4b:98:a7:03:66:0b:bf:8c:cd:04:56:65:93:2e:c3:bc:24:
         4d:12:c4:46:67:3b:bb:5e:73:60:20:b8:30:b1:53:eb:23:28:
         04:bf:3d:e1:32:7d:70:69:24:93:83:e1:6d:40:b3:7b:40:27:
         33:8b:a7:8f:35:21:12:ac:a6:da:70:b6:f6:ef:ab:7d:08:db:
         05:71:19:bf:8d:b6:c9:b5:70:f7:c4:35:51:b2:7d:f3:67:1a:
         b9:cf:5c:2d:32:3c:cb:ee:50:99:85:67:92:bb:ed:51:7c:52:
         f9:66:d0:db:93:14:01:64:6c:03:53:a0:81:c6:6f:4a:f6:f7:
         68:90:5c:e4:f1:c5:5b:27:d9:ff:46:6b:60:9b:c8:ea:8e:9f:
         c9:1f:db:a0:c4:c6:df:51:53:70:fb:b5:d0:21:3c:e7:be:cf:
         62:00:8c:e6:21:6b:4a:48:67:cf:5b:82:6d:67:55:af:98:85:
         b7:d3:52:54:42:98:37:6d:27:63:14:2c:c4:16:e4:00:6d:2a:
         b4:77:b3:47:07:9f:0d:6a:ca:9c:1e:ca:04:bf:84:e1:7d:ec:
         5d:1b:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:01:19 2024 by rpki-client on console-ams.rpki-client.org