Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/34352e3138362e3132382e302f32322d3234203d3e20323639383032.roa
File:                     34352e3138362e3132382e302f32322d3234203d3e20323639383032.roa (raw, json)
Hash identifier:          hVMwNB/mchjjyn0ecbJQmGpzcjr1VX9OpyqKgPqB45c=
Subject key identifier:   E8:DF:C0:8F:57:4C:0B:96:2F:92:8D:08:2C:AC:D8:48:9C:20:E7:8A
Certificate issuer:       /CN=12EAB871531A1CD1B15330264A27410F2408296F
Certificate serial:       41858C45C413AFF1EE733CDE0A67FEA7859F2EFE
Authority key identifier: 12:EA:B8:71:53:1A:1C:D1:B1:53:30:26:4A:27:41:0F:24:08:29:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12EAB871531A1CD1B15330264A27410F2408296F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/34352e3138362e3132382e302f32322d3234203d3e20323639383032.roa
Signing time:             Tue 05 Mar 2024 17:50:28 +0000
ROA not before:           Tue 05 Mar 2024 17:45:28 +0000
ROA not after:            Tue 04 Mar 2025 17:50:28 +0000
asID:                     269802
IP address blocks:        45.186.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/12EAB871531A1CD1B15330264A27410F2408296F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/12EAB871531A1CD1B15330264A27410F2408296F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12EAB871531A1CD1B15330264A27410F2408296F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:85:8c:45:c4:13:af:f1:ee:73:3c:de:0a:67:fe:a7:85:9f:2e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12EAB871531A1CD1B15330264A27410F2408296F
        Validity
            Not Before: Mar  5 17:45:28 2024 GMT
            Not After : Mar  4 17:50:28 2025 GMT
        Subject: CN=E8DFC08F574C0B962F928D082CACD8489C20E78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:e1:ab:32:ab:c9:4f:52:72:ee:9b:8e:9d:
                    13:70:98:5b:f5:9f:e1:be:df:fa:36:cb:48:19:81:
                    a3:e8:2e:7a:9b:16:fc:4a:b0:4a:a4:3d:70:70:9f:
                    51:17:71:38:dc:cd:1a:7c:5c:55:40:0c:30:6f:98:
                    fa:a9:7a:ca:b9:23:ec:48:1c:48:74:ba:4d:b0:9c:
                    8e:9b:23:49:15:36:44:a4:12:b1:d2:92:3d:cb:2f:
                    93:fd:98:de:ab:e1:7a:52:21:c1:73:45:f3:b4:8a:
                    0b:ad:98:c9:e6:36:b5:27:1d:4d:95:1c:53:12:62:
                    03:5b:eb:01:b1:1a:62:0b:06:32:b4:11:5d:b1:bc:
                    a3:59:d2:67:98:5e:c9:73:e6:a1:2c:e7:f5:1f:fa:
                    e1:66:59:46:fe:cf:1a:f7:11:10:89:c4:09:4f:7e:
                    43:20:84:67:56:cf:06:17:ff:ff:cd:95:ed:46:7c:
                    e6:05:d2:14:18:b9:47:b4:d6:66:81:15:ae:62:5e:
                    49:3b:24:7a:d2:e6:ba:15:22:54:af:1f:cb:7d:9d:
                    8b:68:e9:11:08:aa:52:86:b6:d7:58:a8:05:77:2f:
                    6d:34:65:68:41:7f:63:70:35:cd:7c:92:96:42:29:
                    51:93:07:fb:e5:46:2d:00:6e:1f:6c:d0:77:4c:7b:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DF:C0:8F:57:4C:0B:96:2F:92:8D:08:2C:AC:D8:48:9C:20:E7:8A
            X509v3 Authority Key Identifier:
                keyid:12:EA:B8:71:53:1A:1C:D1:B1:53:30:26:4A:27:41:0F:24:08:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/12EAB871531A1CD1B15330264A27410F2408296F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12EAB871531A1CD1B15330264A27410F2408296F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00AA6E6C39BB0A5EA5CF7180A4654907636FBC09537D9E7891CC5E98D8B6B8AF/0/34352e3138362e3132382e302f32322d3234203d3e20323639383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:14:89:73:e7:e4:05:dd:1d:36:ca:e3:05:77:02:3d:a7:2f:
         6a:bd:23:53:2e:5d:21:03:c7:21:3a:60:23:ad:98:59:3c:ed:
         01:30:58:87:fc:91:fe:2b:aa:ce:0c:66:20:fb:23:71:f0:c8:
         6c:23:2b:39:a5:67:59:6a:e2:bd:3b:98:f2:8b:b6:28:14:3b:
         78:8a:da:09:34:3d:f9:e8:9c:3a:ed:11:a1:4a:90:1d:ea:36:
         53:c5:b0:df:81:d3:db:7f:90:c7:d7:d3:22:94:f4:f0:ca:f9:
         93:38:90:d1:80:1d:15:b5:68:bf:e1:31:71:f9:9a:64:44:1d:
         52:a2:54:24:29:ab:26:a6:a9:f9:60:c9:ab:13:36:7e:c7:46:
         a4:fb:9b:a1:60:f8:2b:88:b4:96:b5:45:96:b2:d3:bb:8d:c8:
         16:1a:00:90:2a:e4:4a:6f:d2:ef:50:c8:ff:84:bd:27:02:a3:
         e1:55:90:c2:dc:93:37:36:c8:c1:0b:26:58:05:37:48:46:e3:
         ad:f1:49:01:5c:b7:f9:52:60:74:27:bc:c4:c4:1b:82:fd:b1:
         11:e3:6c:92:f7:ed:3c:f6:26:d4:63:57:75:ea:06:26:5e:f9:
         52:de:e9:ea:b8:b2:3d:6a:c5:47:62:1c:fd:29:83:f7:09:fc:
         07:02:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:07:25 2024 by rpki-client on console-fra.rpki-client.org