Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa
File:                     409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa (raw, json)
Hash identifier:          eb7EBKJxniFzc1rYO5Cj6MIXRlKSIADH+Icua9iv4aE=
Subject key identifier:   B8:1F:52:70:AF:7C:C9:DA:24:07:58:04:3B:7E:EB:4B:C5:E6:A8:56
Certificate issuer:       /CN=52c92f5118962db5a899e9bac9cd1d931aba8f4d
Certificate serial:       1CE593
Authority key identifier: 5B:BD:B3:E1:5B:11:33:CA:60:D5:51:94:0B:65:E4:BC:C0:91:77:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c92f5118962db5a899e9bac9cd1d931aba8f4d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa
Signing time:             Tue 24 Jan 2023 14:08:09 +0000
ROA not before:           Mon 23 Jan 2023 14:07:11 +0000
ROA not after:            Fri 24 Jan 2025 14:07:11 +0000
asID:                     264716
IP address blocks:        45.173.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/52c92f5118962db5a899e9bac9cd1d931aba8f4d.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/52c92f5118962db5a899e9bac9cd1d931aba8f4d.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c92f5118962db5a899e9bac9cd1d931aba8f4d.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Feb 2024 16:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893779 (0x1ce593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52c92f5118962db5a899e9bac9cd1d931aba8f4d
        Validity
            Not Before: Jan 23 14:07:11 2023 GMT
            Not After : Jan 24 14:07:11 2025 GMT
        Subject: CN=409dd7f86ca76154315fb44c4f3d05d3dcc32bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:a7:3b:00:c1:33:92:e1:dc:21:49:00:a3:
                    bb:fb:33:bd:5b:a8:1a:50:68:5e:2e:a3:9f:52:29:
                    14:cd:5b:c9:09:81:2a:3b:b0:07:93:57:87:c0:8d:
                    74:f5:1f:5c:56:ce:9a:06:3d:c6:85:b6:66:1d:9e:
                    81:74:80:e1:ef:78:b1:b1:97:da:0f:e5:34:bd:8b:
                    91:2e:22:2b:d2:a0:c5:f8:b9:a6:63:1c:01:99:13:
                    00:99:f4:f6:d4:f9:4d:98:dc:94:c2:f1:e9:da:c2:
                    8d:63:1d:da:0a:65:f8:16:4c:d4:91:b6:b8:a9:5a:
                    85:26:8e:84:ce:14:f8:e6:72:6b:b8:a5:89:bd:01:
                    5f:47:01:70:fd:30:74:73:a2:8f:c1:ff:d7:79:8d:
                    0f:cf:03:6a:68:c8:81:0b:80:b3:ea:95:89:c5:df:
                    62:b7:a9:9f:9c:3a:b8:40:8a:d3:71:04:a1:ff:c3:
                    1a:c0:87:26:03:0d:f0:56:ea:d3:e2:09:53:4c:f0:
                    8f:f4:8d:c5:67:67:85:cc:4d:2c:33:f8:44:94:e5:
                    39:fd:75:66:23:c8:64:fb:9f:00:1d:3a:cf:86:eb:
                    be:ac:4c:5f:78:b6:a6:0b:74:31:dd:d6:ef:4d:42:
                    c0:cc:f5:4e:7f:16:ae:91:1a:66:be:d7:21:28:35:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:52:70:AF:7C:C9:DA:24:07:58:04:3B:7E:EB:4B:C5:E6:A8:56
            X509v3 Authority Key Identifier:
                keyid:5B:BD:B3:E1:5B:11:33:CA:60:D5:51:94:0B:65:E4:BC:C0:91:77:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52c92f5118962db5a899e9bac9cd1d931aba8f4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/409dd7f86ca76154315fb44c4f3d05d3dcc32bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0043f52c-eeee-4d62-97e6-44c83c8beb9f/52c92f5118962db5a899e9bac9cd1d931aba8f4d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:ff:2b:37:9c:5c:3e:85:a2:83:ed:04:1c:af:5a:2c:74:bb:
         a3:4a:12:b8:bc:91:5c:b4:60:33:b8:e1:01:08:59:b6:c8:8a:
         e7:40:8e:42:45:84:78:ad:30:e4:9b:c5:cd:f3:41:52:f8:13:
         28:46:82:7c:04:33:2d:8d:4f:1c:55:f3:3a:aa:ae:cd:bd:7f:
         27:4c:78:db:0f:8c:45:55:e4:bf:f7:50:79:a6:19:4f:1b:d9:
         29:7a:10:31:13:d4:d6:be:27:5d:5f:ed:98:2c:41:b4:d3:b7:
         6c:6d:13:4f:b4:cc:92:7d:05:fe:e3:4b:00:26:a8:41:25:bb:
         5a:ba:7e:6f:0e:1c:11:6b:09:f9:11:aa:d2:17:db:5c:ba:03:
         d6:9b:fc:4c:97:ea:1e:39:0d:a4:d5:aa:82:39:74:42:62:b3:
         5d:92:62:f8:83:73:4c:5a:d0:6c:93:12:e4:86:a6:80:40:84:
         dc:d5:ac:6c:df:1e:5f:e2:1c:01:f5:76:70:6e:2b:11:b6:ed:
         44:43:d2:ac:af:5d:cd:0a:ec:db:b9:16:09:8f:70:3a:e6:70:
         bf:59:83:9a:f7:16:38:ad:34:f3:fc:83:fa:09:14:61:1b:a3:
         ab:16:aa:87:27:9c:5b:cf:02:2b:68:4d:bc:55:21:ce:09:7d:
         0c:fe:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 20:01:08 2024 by rpki-client on console-fra.rpki-client.org