Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa
File:                     34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa (raw, json)
Hash identifier:          2d6twK8Z3mJuW2zAQofdlTblPCYnEwQJKYiv9/vgouc=
Subject key identifier:   1D:16:E0:A5:B0:DF:A6:D4:DF:63:69:69:17:C0:9D:A7:13:4A:FB:78
Certificate issuer:       /CN=AF5961CE89F38C3B4D8403327DF504436CE78585
Certificate serial:       3DFA7F3438188D30C15CFDD72399D4D1C2FA8680
Authority key identifier: AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa
Signing time:             Tue 05 Mar 2024 18:12:21 +0000
ROA not before:           Tue 05 Mar 2024 18:07:21 +0000
ROA not after:            Tue 04 Mar 2025 18:12:21 +0000
asID:                     267894
IP address blocks:        45.176.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 16 Dec 2024 01:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fa:7f:34:38:18:8d:30:c1:5c:fd:d7:23:99:d4:d1:c2:fa:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF5961CE89F38C3B4D8403327DF504436CE78585
        Validity
            Not Before: Mar  5 18:07:21 2024 GMT
            Not After : Mar  4 18:12:21 2025 GMT
        Subject: CN=1D16E0A5B0DFA6D4DF63696917C09DA7134AFB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:a0:04:98:b7:23:48:98:3f:56:9d:87:d4:
                    48:75:e6:b2:e7:52:e7:48:ce:f1:dc:20:df:9d:8a:
                    c2:aa:c4:2f:25:24:f6:83:ff:d1:32:f5:6b:63:ee:
                    9e:38:77:89:db:1b:43:52:bf:b8:f0:30:92:61:38:
                    a5:ba:c0:3e:f8:35:2a:40:a7:a5:c6:75:a3:07:1d:
                    ac:65:6b:94:e1:2e:94:1a:17:57:f3:6f:8a:50:58:
                    b0:a2:f6:82:95:2a:93:c6:5f:48:58:7e:ca:22:1d:
                    2d:37:ca:f5:7d:98:6e:18:c5:6b:f0:51:b0:b3:21:
                    ee:f0:81:85:9e:e3:08:cf:f3:65:f2:7b:a3:d1:3f:
                    b9:53:e2:9c:76:64:6d:5f:e2:8c:4d:7f:f0:b6:8a:
                    89:5f:29:de:99:b0:5e:e3:6b:b6:fe:31:9c:d7:81:
                    55:2f:3c:8a:75:5b:ca:2a:d8:e8:e3:49:d2:0d:ab:
                    0a:92:a2:3f:65:95:21:96:ab:5c:76:d3:ec:b8:7f:
                    e0:3c:10:a6:09:21:fa:92:ca:47:e5:d3:46:6b:b8:
                    da:ff:cc:b1:6f:38:05:c6:c0:3e:72:b7:e8:ab:73:
                    b9:c0:9f:82:6d:be:c2:ef:b5:2f:5f:b1:49:99:49:
                    6e:5f:e2:e5:57:03:df:66:1a:90:ec:82:da:72:b8:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:16:E0:A5:B0:DF:A6:D4:DF:63:69:69:17:C0:9D:A7:13:4A:FB:78
            X509v3 Authority Key Identifier:
                keyid:AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/34352e3137362e3136342e302f32342d3234203d3e20323637383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:09:ff:a8:a8:fb:b8:34:0f:72:fb:04:f7:b3:01:3c:d5:da:
         e8:11:87:e1:4b:0d:c4:b6:af:6b:cb:2f:78:be:75:84:1d:38:
         15:12:3e:46:cd:67:6c:15:1f:5b:6b:ec:d2:33:61:3a:38:18:
         80:75:e4:76:88:0b:b8:b0:7c:6b:81:9a:74:71:4a:2c:b3:36:
         e3:84:c4:11:4b:f9:1f:a3:cb:3c:5c:70:89:44:c2:e9:bd:f8:
         86:81:13:66:42:0c:10:27:b7:e2:0c:ef:be:31:8c:d7:a2:a9:
         ab:4f:31:67:b5:5b:68:c9:1e:de:2f:47:8b:bf:ab:66:d7:ec:
         3c:fe:3c:15:7b:e6:ad:bd:11:92:b0:f3:97:f9:f4:a8:4d:c0:
         ca:fb:60:fd:8f:65:03:33:66:d4:40:13:2d:38:ed:bc:00:c0:
         57:b9:d0:cc:10:89:41:24:d5:db:2c:21:f0:2f:99:bc:26:ed:
         9e:f4:12:e2:6a:c7:7f:6c:44:b7:e5:f0:26:80:7c:33:e8:3f:
         3d:31:2d:fe:11:b4:94:ab:4d:cd:4b:f7:22:6d:42:cc:9e:9b:
         08:97:ee:36:fc:78:c9:04:96:07:85:19:63:d4:7b:c3:71:02:
         db:af:cc:cb:e1:24:d0:2d:2e:f5:7c:46:8f:14:9e:43:09:e4:
         1c:dd:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 22:25:04 2024 by rpki-client on console-ams.rpki-client.org