Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3132332e3230302e3233322e302f32322d3234203d3e20323731373935.roa
File:                     3132332e3230302e3233322e302f32322d3234203d3e20323731373935.roa (raw, json)
Hash identifier:          0cwAave0CGMCTlPnn4rzil1FIVMdZl25HCiSIRDljXU=
Subject key identifier:   A2:31:EA:C3:A2:84:2D:40:DA:62:9A:91:4F:A7:9A:D6:18:64:9A:C8
Certificate issuer:       /CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
Certificate serial:       44531019F31FDBF4A158E72511CE9E146DFA11F2
Authority key identifier: 45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3132332e3230302e3233322e302f32322d3234203d3e20323731373935.roa
Signing time:             Thu 31 Oct 2024 20:30:00 +0000
ROA not before:           Thu 31 Oct 2024 20:25:00 +0000
ROA not after:            Thu 30 Oct 2025 20:30:00 +0000
asID:                     271795
IP address blocks:        123.200.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:53:10:19:f3:1f:db:f4:a1:58:e7:25:11:ce:9e:14:6d:fa:11:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
        Validity
            Not Before: Oct 31 20:25:00 2024 GMT
            Not After : Oct 30 20:30:00 2025 GMT
        Subject: CN=A231EAC3A2842D40DA629A914FA79AD618649AC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:07:26:51:80:02:69:5c:41:b2:c6:8b:52:
                    bc:3b:70:2d:d3:a9:6f:18:08:08:78:4b:1e:8f:db:
                    63:f8:4b:68:b1:d2:cc:b2:d2:0d:12:30:e7:12:24:
                    82:61:6e:b5:93:34:aa:d5:9e:c1:da:5b:9e:96:cb:
                    e4:fa:e3:0c:86:72:db:dc:39:fb:33:aa:c3:3f:40:
                    d1:a6:86:6a:fe:c2:05:1a:3c:d2:f8:9b:55:60:43:
                    5f:33:cc:d9:a3:14:8b:21:fd:86:23:5c:71:88:f4:
                    61:fe:4d:f0:a4:9b:28:0a:cb:8b:7f:8d:1b:c6:92:
                    7d:ef:40:ea:0c:a1:76:08:49:69:2c:1e:9b:ec:dc:
                    2a:0f:c7:37:32:c0:f2:bb:7b:9e:31:a9:63:de:7f:
                    52:28:38:71:bf:a7:16:0e:cc:5c:7c:9c:20:51:53:
                    bc:f6:2d:b6:d9:26:fd:2d:de:a7:ae:e5:c2:62:be:
                    34:cb:47:1f:de:6e:3c:75:63:8c:fb:0b:d5:07:1d:
                    c5:d8:9b:4b:55:ac:60:3c:3a:f1:e8:cf:0c:25:12:
                    46:46:ad:90:80:6a:d3:28:0e:96:74:37:bf:ae:52:
                    c9:9d:7d:9d:53:f8:6a:fd:3f:6b:88:19:58:da:b7:
                    3a:15:18:cb:a2:87:d3:7d:26:2d:2a:7e:d7:d2:97:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:31:EA:C3:A2:84:2D:40:DA:62:9A:91:4F:A7:9A:D6:18:64:9A:C8
            X509v3 Authority Key Identifier:
                keyid:45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3132332e3230302e3233322e302f32322d3234203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.200.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:cd:34:cd:f9:e3:b3:05:45:fc:0d:41:fd:0f:41:08:44:10:
         14:50:b8:1d:8e:8f:f9:2e:11:6b:5a:37:70:d5:88:7c:9d:ca:
         98:e3:8b:00:93:9c:13:39:f0:0d:e7:c4:15:3e:f1:c4:18:18:
         f4:35:56:83:81:3b:07:8d:20:ce:0b:6f:be:df:75:a3:27:5d:
         67:5b:64:86:cd:b1:aa:de:84:2b:86:21:90:3a:e2:4f:53:09:
         8e:41:cf:4a:4b:87:e5:1e:41:f9:42:ee:5e:27:5a:74:30:8d:
         c6:b6:9f:c8:dc:f5:2a:be:3e:ad:4e:ed:41:37:0e:e0:35:1f:
         b2:c0:3f:f0:6c:8f:81:2c:89:63:06:86:68:42:d9:5d:4a:d4:
         10:6f:28:f1:83:f0:a8:ce:e9:ba:6b:ed:86:ac:34:2d:f2:ec:
         df:87:d4:79:0b:c9:32:c2:2c:de:69:f8:59:4e:1e:a6:e8:bf:
         71:2c:7c:37:6f:18:27:45:8b:81:ea:fb:04:de:de:17:da:13:
         e7:db:b3:65:42:e4:28:ae:0c:81:d4:e3:50:be:88:06:33:5f:
         d7:fd:db:f8:a8:78:f5:07:13:ef:93:43:50:d8:bb:3a:97:58:
         f7:cd:e5:fa:0a:2b:06:63:55:5e:4c:3d:5a:5e:22:93:af:6c:
         7e:49:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:21 2024 by rpki-client on console-fra.rpki-client.org