Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3232203d3e20323636363737.roa
File:                     34352e3232382e36302e302f32322d3232203d3e20323636363737.roa (raw, json)
Hash identifier:          8NYg97OJNMW61xcm+JNULMtIPwC9pXIjQ6lilIiu/TI=
Subject key identifier:   94:A9:EA:9C:68:CC:1C:5B:14:E6:C8:FF:63:2B:5D:16:19:DF:9A:0A
Certificate issuer:       /CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
Certificate serial:       7A7C8F0DF1477D9549D0803915FFAA7FEC174D8B
Authority key identifier: 3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3232203d3e20323636363737.roa
Signing time:             Thu 27 Jun 2024 20:30:01 +0000
ROA not before:           Thu 27 Jun 2024 20:25:01 +0000
ROA not after:            Thu 26 Jun 2025 20:30:01 +0000
asID:                     266677
IP address blocks:        45.228.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7c:8f:0d:f1:47:7d:95:49:d0:80:39:15:ff:aa:7f:ec:17:4d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ADE8F28C8077395C8518736031DE38C090CDF1B
        Validity
            Not Before: Jun 27 20:25:01 2024 GMT
            Not After : Jun 26 20:30:01 2025 GMT
        Subject: CN=94A9EA9C68CC1C5B14E6C8FF632B5D1619DF9A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:22:f5:50:57:9d:23:70:1c:cd:ab:46:b4:
                    a2:aa:25:47:f5:1b:2b:48:60:18:74:21:1c:a4:4c:
                    cd:9f:f6:83:c6:2c:3d:40:0e:84:3d:21:72:04:10:
                    08:35:69:d0:cb:ec:99:55:81:2b:1e:97:e7:75:22:
                    fe:94:b8:88:81:3e:41:3c:55:48:7d:20:69:7a:7d:
                    d2:87:7c:15:9a:60:bb:36:38:73:12:3f:e1:9c:a5:
                    16:85:bb:d0:f5:c5:2a:99:82:1d:42:ac:47:55:ac:
                    3f:88:84:ee:a9:1e:33:15:19:a9:82:8d:f8:e1:87:
                    99:4f:ac:f9:c8:e4:48:93:4d:39:e5:da:88:9b:cc:
                    94:59:71:ae:a4:3c:59:59:b6:04:bc:39:81:19:8b:
                    51:d4:f6:6d:be:08:9f:eb:2a:de:5f:14:19:e3:7c:
                    7f:51:45:be:89:be:9a:07:ad:fa:c5:30:ed:00:e7:
                    43:de:db:68:9a:4a:b4:bc:7e:4d:fd:7f:ce:ee:89:
                    4f:ba:72:c0:97:9f:0f:f8:71:d4:d3:bf:5c:e6:d7:
                    e2:0b:1c:f5:f9:bd:1f:70:1e:8e:0a:dd:d7:1f:2d:
                    98:83:82:35:0f:41:82:1f:15:59:2e:54:80:62:46:
                    83:d5:08:d1:56:19:46:c7:4b:fb:9b:7a:30:c6:97:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A9:EA:9C:68:CC:1C:5B:14:E6:C8:FF:63:2B:5D:16:19:DF:9A:0A
            X509v3 Authority Key Identifier:
                keyid:3A:DE:8F:28:C8:07:73:95:C8:51:87:36:03:1D:E3:8C:09:0C:DF:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3ADE8F28C8077395C8518736031DE38C090CDF1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD0FA28DC00E9D600C500A451E10177FF7018414612F5B3BD1131221D32F45E0/0/34352e3232382e36302e302f32322d3232203d3e20323636363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:27:bf:19:ef:c7:eb:02:05:8b:88:53:d5:be:c8:75:04:
         9a:3b:4b:f8:fc:f7:b6:67:1a:92:ef:58:e3:14:dd:3f:1f:ea:
         e1:f8:04:36:e6:c4:9d:88:35:4c:06:09:65:9e:41:b4:fc:49:
         2b:63:f2:c7:53:25:70:a7:94:8f:54:24:69:6e:53:10:98:27:
         e7:b4:dc:c7:4e:e0:15:12:2f:18:42:53:64:00:5b:9f:1b:56:
         36:c0:98:69:e3:17:d3:4d:17:c5:b1:ef:bf:d4:5b:56:cc:24:
         fb:96:5d:d2:59:c4:ea:6c:db:26:fe:2b:0d:59:cd:b7:30:24:
         68:b0:79:c1:3b:e6:54:30:8d:b1:00:43:05:c0:94:a9:0a:a4:
         1e:4c:b0:88:fd:0e:ed:77:e5:93:01:77:88:17:6e:1a:3a:27:
         d6:60:6b:24:c1:fd:81:d8:a7:19:39:7b:56:e2:f8:83:50:a1:
         94:df:3e:cd:d5:3d:d4:aa:85:c6:c6:97:d8:a4:e0:da:f1:92:
         d4:09:ea:d1:f3:d4:0d:04:9d:46:92:5f:90:29:51:88:d3:49:
         aa:57:38:94:6f:dd:3a:4a:98:42:35:d3:be:26:58:18:f7:e1:
         a8:9d:1b:ba:05:5a:1c:18:2e:06:3f:a1:76:19:f5:af:17:f7:
         60:52:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:43 2024 by rpki-client on console-fra.rpki-client.org