Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e203233343730.roa
File:                     34352e3137302e3235332e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          TyM3fpv845dEjgZvU+l4/nXZ4IG2hrTid0myT+YlRvA=
Subject key identifier:   4A:32:50:1B:05:F2:C0:B5:B8:50:BB:FA:3C:10:22:11:4C:B5:4C:69
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       86DF9E4B58605DC4440A71A70C416DE0F1453B
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Mar 2024 18:18:23 +0000
ROA not before:           Tue 05 Mar 2024 18:13:23 +0000
ROA not after:            Tue 04 Mar 2025 18:18:23 +0000
asID:                     23470
IP address blocks:        45.170.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            86:df:9e:4b:58:60:5d:c4:44:0a:71:a7:0c:41:6d:e0:f1:45:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: Mar  5 18:13:23 2024 GMT
            Not After : Mar  4 18:18:23 2025 GMT
        Subject: CN=4A32501B05F2C0B5B850BBFA3C1022114CB54C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:80:1e:c8:0a:d3:1c:af:97:9c:47:e0:fe:
                    0e:49:6c:b8:2d:da:df:ca:14:b8:2b:33:97:53:59:
                    11:94:77:21:62:1c:01:b2:38:54:a7:fb:5e:57:79:
                    2c:39:85:f2:99:fa:a3:d0:18:24:ce:1f:ef:a1:54:
                    09:f7:2a:9b:60:36:f1:36:91:8b:be:a5:02:98:6d:
                    57:2d:19:8b:0e:01:e0:b1:46:c5:c3:d2:a3:e5:fb:
                    9c:c1:b7:9c:24:78:a7:2b:aa:f8:d6:b0:6d:5e:01:
                    c0:b8:22:f7:e6:23:84:6b:d7:59:fd:cf:b2:a1:3d:
                    d4:31:1e:bc:d2:72:cc:1e:4f:e0:3f:76:79:56:d4:
                    86:8b:bd:e9:19:c1:a1:db:8f:bd:04:ff:4c:ac:9d:
                    14:f7:5d:fb:99:7a:a0:33:1e:38:c6:31:ab:97:4c:
                    3f:e6:d0:bb:8a:28:66:a1:56:c5:e5:c1:48:f2:57:
                    71:43:98:b6:2a:d3:50:b5:88:cb:28:0b:ef:87:74:
                    23:aa:25:79:62:39:e6:3b:82:f0:46:e8:15:a4:a8:
                    63:51:15:a1:ec:ee:02:1c:ec:66:42:d1:3c:02:ae:
                    52:58:cb:ed:20:2a:08:4a:69:69:35:47:97:b3:f4:
                    c7:4e:96:76:49:5f:5c:ea:8d:93:de:1f:13:8a:5f:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:32:50:1B:05:F2:C0:B5:B8:50:BB:FA:3C:10:22:11:4C:B5:4C:69
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235332e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:48:60:57:95:e0:a6:82:53:33:65:dc:d1:00:81:d4:64:e4:
         20:0b:33:a5:3f:d6:15:17:c4:dc:43:6a:4f:d4:a7:7f:e4:8b:
         fb:24:bb:f5:f8:e4:7e:a7:0a:7f:0b:6a:76:da:50:c4:ed:1b:
         d0:34:7c:27:60:cb:18:8b:39:0b:c2:22:99:cc:75:da:90:a4:
         12:38:fc:78:b5:31:c9:8b:8a:8a:f3:3d:f7:c8:64:b2:3d:02:
         0d:41:38:c3:18:6e:1a:5f:12:e9:05:55:a4:be:57:10:d1:f9:
         94:73:f1:48:8e:be:58:2e:3e:6d:2d:a5:98:ec:bb:90:74:eb:
         8b:4e:4d:c9:b6:36:2a:2b:66:2f:28:aa:44:24:c4:49:54:08:
         ea:cd:fc:e3:42:3d:25:b2:ff:4a:e7:14:55:69:ac:b0:d4:d8:
         9f:d2:f7:88:5e:0c:42:b3:83:1d:32:b2:93:4d:13:1b:6d:21:
         a1:19:cb:d0:6c:ad:79:d1:4f:1e:76:ca:83:15:68:8d:6d:35:
         72:ab:ea:6e:bd:ca:29:9f:2b:6e:fb:ac:32:96:cf:a0:10:7f:
         a2:3c:ef:d7:f4:9d:02:a6:2c:72:6c:33:6e:76:82:6c:91:70:
         0c:b6:52:10:60:86:3b:2c:c5:e8:25:26:84:b4:b3:7d:2c:37:
         9e:a1:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 19:11:29 2024 by rpki-client on console-fra.rpki-client.org