Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa
File:                     34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa (raw, json)
Hash identifier:          5n/3zc4fS3j6A0LxwSuq6uWfa1UyKtL9YJ1SS7I5Ias=
Subject key identifier:   CD:43:95:06:45:CB:27:6F:29:0C:AA:96:93:50:5C:B5:B1:2D:46:1A
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       7A9B3D4B02B7E13227495DC1631F3692A08A5D04
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa
Signing time:             Wed 28 Aug 2024 20:30:02 +0000
ROA not before:           Wed 28 Aug 2024 20:25:02 +0000
ROA not after:            Wed 27 Aug 2025 20:30:02 +0000
asID:                     267914
IP address blocks:        45.179.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Oct 2024 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9b:3d:4b:02:b7:e1:32:27:49:5d:c1:63:1f:36:92:a0:8a:5d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Aug 28 20:25:02 2024 GMT
            Not After : Aug 27 20:30:02 2025 GMT
        Subject: CN=CD43950645CB276F290CAA9693505CB5B12D461A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:3e:ab:67:d5:21:ba:cf:9c:00:b5:18:59:
                    be:12:d0:44:4a:c0:53:66:de:2c:10:0e:1b:c0:7f:
                    71:7d:af:45:34:6a:68:3f:ea:20:ac:e0:5c:5f:f0:
                    23:65:44:4c:ce:41:87:b9:49:1b:1f:5f:59:a3:af:
                    6e:d5:e8:32:48:59:80:2c:9d:4e:38:bd:07:4d:e7:
                    98:f0:61:d7:2a:19:33:4b:c7:0c:48:3f:40:b3:9e:
                    0e:a4:c5:35:92:b1:94:ea:d7:02:38:dd:d4:92:1b:
                    2c:e3:77:da:9a:b3:f8:89:41:72:c8:79:31:6a:51:
                    39:1c:9f:98:29:77:fc:18:0a:37:5c:9c:2d:a0:23:
                    4b:5f:11:12:b2:5a:8e:13:d1:0b:15:2d:60:bb:d3:
                    66:ba:a5:15:6b:d8:7b:05:09:ab:29:99:d8:28:23:
                    4d:eb:42:ef:f5:6a:f0:d8:e0:76:86:e6:20:e3:be:
                    69:22:e3:27:e3:61:8f:7b:92:13:5a:7c:89:32:a5:
                    55:c7:26:5b:7e:d2:05:ef:da:7d:38:7b:c9:87:b4:
                    fb:3c:72:b3:5d:ba:7b:d5:f8:0b:58:f7:21:8b:4e:
                    ea:da:ff:29:8a:f0:e5:a2:e5:ad:8f:8a:b3:58:a8:
                    ab:9b:9a:9d:8f:83:3d:72:ac:fd:70:8f:16:e4:62:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:43:95:06:45:CB:27:6F:29:0C:AA:96:93:50:5C:B5:B1:2D:46:1A
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32342d3234203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:c9:ea:b9:73:a7:18:8d:ac:de:29:86:3c:8d:5d:1b:47:
         73:8e:ce:eb:6a:1a:7e:a1:da:53:28:ac:1f:9f:98:6d:ae:35:
         34:7b:00:4a:8b:21:ef:03:d3:7f:f1:59:a4:08:ec:8f:2d:3c:
         62:a4:b9:84:4f:34:2a:96:21:9c:bf:51:6d:32:67:10:8b:ed:
         79:b1:51:e3:48:29:18:bd:99:f1:bd:c5:a9:0a:a2:87:9f:7b:
         29:72:6a:e8:e7:e4:08:09:f6:24:9c:39:6e:46:08:0d:fb:d6:
         84:93:46:43:70:32:b0:b9:32:43:9b:c1:cb:b1:85:8f:54:38:
         14:fa:40:d6:bc:05:e2:15:ae:4c:0e:c3:8a:29:b4:48:ca:83:
         00:51:9f:b0:a8:aa:83:9e:9d:bb:1d:d5:b5:d5:19:84:db:f7:
         f7:07:f8:80:09:43:f1:ea:10:d1:89:d9:52:11:7a:64:94:46:
         85:52:6f:4f:d9:93:6c:bc:97:6b:b2:93:df:b3:83:96:c9:55:
         2c:79:6f:58:d3:9e:20:d7:d4:49:70:81:7a:2c:ab:0c:28:1e:
         2e:3d:54:57:07:30:f5:76:d3:05:12:bb:c7:2e:2f:1c:96:9f:
         07:2f:5c:3b:1a:3d:b5:8d:2b:fd:12:5b:f1:ed:d5:e3:a2:e8:
         a0:f8:fd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:50:41 2024 by rpki-client on console-fra.rpki-client.org