Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/34352e3138382e3138382e302f32322d3234203d3e203532343936.roa
File:                     34352e3138382e3138382e302f32322d3234203d3e203532343936.roa (raw, json)
Hash identifier:          OgCNwMkVI4mOatHzQ+li0lY0nnVIhEIzCGPLrTMr0uM=
Subject key identifier:   45:99:4E:7C:B6:B3:4F:53:BF:CF:6C:48:1B:2A:89:C3:71:02:8F:60
Certificate issuer:       /CN=52644702D94F3D876A774ED4C8509A38B1587D80
Certificate serial:       1C417603D3C3F0BDB22DAAA45B08FF49568DDC3D
Authority key identifier: 52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/34352e3138382e3138382e302f32322d3234203d3e203532343936.roa
Signing time:             Tue 05 Mar 2024 17:57:31 +0000
ROA not before:           Tue 05 Mar 2024 17:52:31 +0000
ROA not after:            Tue 04 Mar 2025 17:57:31 +0000
asID:                     52496
IP address blocks:        45.188.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:41:76:03:d3:c3:f0:bd:b2:2d:aa:a4:5b:08:ff:49:56:8d:dc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52644702D94F3D876A774ED4C8509A38B1587D80
        Validity
            Not Before: Mar  5 17:52:31 2024 GMT
            Not After : Mar  4 17:57:31 2025 GMT
        Subject: CN=45994E7CB6B34F53BFCF6C481B2A89C371028F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:d7:d5:6c:0f:b3:5f:84:ef:1e:d1:7f:cc:
                    0f:65:f3:5c:30:39:4c:96:6d:37:c3:cb:5f:1c:89:
                    a3:77:d9:5f:46:0a:ad:12:3f:72:04:13:bf:ae:3d:
                    88:50:47:48:98:50:5b:14:39:dc:cf:a5:33:8e:b3:
                    1f:96:80:dd:f2:df:32:91:7b:fe:95:12:f7:29:8c:
                    ce:a5:c3:ee:ce:fb:43:ec:14:9d:fd:4c:0f:af:6b:
                    51:e5:9a:89:7d:9e:ee:c1:61:26:c8:50:dd:c9:c0:
                    bc:64:56:d7:f0:21:e3:14:e4:4c:a3:89:24:e9:a5:
                    df:10:04:7b:44:9d:a4:e5:63:53:29:0b:fa:a7:df:
                    67:3b:21:6e:e8:00:09:25:12:5e:2e:24:08:82:2e:
                    bc:ea:c6:8c:b7:0e:6a:ba:43:1e:5f:6b:40:63:8b:
                    6d:80:9f:21:e2:3e:c1:99:06:70:31:ef:e0:43:b5:
                    d5:e2:ed:24:c4:fb:f7:19:3c:d2:46:4e:3c:ba:c8:
                    a7:dc:88:7b:47:53:37:e2:91:4c:ab:0f:b4:00:da:
                    73:ae:e7:05:a1:b9:c0:97:a0:78:ca:64:0d:bb:94:
                    42:65:c6:b8:b2:16:04:45:9f:19:4b:db:74:2a:3d:
                    f0:b2:98:fc:90:a9:26:6c:4f:2c:33:93:73:7d:24:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:99:4E:7C:B6:B3:4F:53:BF:CF:6C:48:1B:2A:89:C3:71:02:8F:60
            X509v3 Authority Key Identifier:
                keyid:52:64:47:02:D9:4F:3D:87:6A:77:4E:D4:C8:50:9A:38:B1:58:7D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/52644702D94F3D876A774ED4C8509A38B1587D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52644702D94F3D876A774ED4C8509A38B1587D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FFAC3D1461776E5156EDA3F2C1226043952CC80AE714A9EA5BAA835A149E7E1E/0/34352e3138382e3138382e302f32322d3234203d3e203532343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:01:a6:16:8b:4a:c1:93:fe:e3:9f:d7:d3:1a:65:2f:83:23:
         61:91:e3:3c:ae:8a:c5:c3:ea:24:a1:b6:29:5c:31:40:0b:08:
         8e:47:ce:71:55:d2:85:63:86:07:30:0d:92:5d:df:75:df:43:
         c4:bb:43:41:20:f4:f1:30:b1:37:11:f5:20:8a:53:d4:55:13:
         1f:c4:1e:52:91:cc:53:d2:70:61:0c:e1:87:89:d0:62:a6:97:
         89:06:a4:81:7e:e3:11:e9:4f:5c:65:8e:d2:d8:9c:56:d0:ab:
         7b:71:37:ee:49:5a:ec:15:50:4f:bb:7d:0d:02:08:db:f7:39:
         67:5f:95:9b:59:8c:fd:b5:cb:e6:b6:c1:bc:12:a2:ae:c8:c1:
         47:02:29:61:7f:76:0a:ae:8e:68:04:9d:a8:fa:15:ab:51:82:
         b5:69:c4:48:21:25:be:5d:f4:be:03:fe:20:49:b8:d6:0d:89:
         df:36:6a:30:1a:bc:57:fa:67:e1:b1:09:05:25:66:70:cb:bf:
         9a:2a:12:7f:05:8e:db:99:de:dc:20:a6:f2:b3:f9:83:e1:cc:
         aa:9b:21:eb:c2:2d:ad:a8:c8:7d:75:8f:de:78:7c:b0:50:2f:
         5b:41:c3:aa:be:28:65:80:53:16:53:8e:7a:97:21:52:d4:ee:
         0a:df:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:54:49 2024 by rpki-client on console-fra.rpki-client.org