Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa
File:                     34352e3232372e36322e302f32332d3234203d3e20323635383731.roa (raw, json)
Hash identifier:          74Vk8eN2JjIgvqKAdxFMn54CKeFSB5GoH566iq7pAWA=
Subject key identifier:   05:16:DF:71:84:4F:C2:30:EA:5A:21:30:0C:90:E9:A7:E7:AE:FD:D2
Certificate issuer:       /CN=C91FC34E769B491806E180E9DFF903C7D1F9B6F9
Certificate serial:       4409647A932959374FFB6526D8DCD8D899C594AB
Authority key identifier: C9:1F:C3:4E:76:9B:49:18:06:E1:80:E9:DF:F9:03:C7:D1:F9:B6:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa
Signing time:             Tue 05 Mar 2024 17:55:47 +0000
ROA not before:           Tue 05 Mar 2024 17:50:47 +0000
ROA not after:            Tue 04 Mar 2025 17:55:47 +0000
asID:                     265871
IP address blocks:        45.227.62.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:09:64:7a:93:29:59:37:4f:fb:65:26:d8:dc:d8:d8:99:c5:94:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C91FC34E769B491806E180E9DFF903C7D1F9B6F9
        Validity
            Not Before: Mar  5 17:50:47 2024 GMT
            Not After : Mar  4 17:55:47 2025 GMT
        Subject: CN=0516DF71844FC230EA5A21300C90E9A7E7AEFDD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:80:14:cf:e6:b6:bc:41:bd:51:2d:20:ae:
                    f4:96:5a:08:49:3e:90:c5:33:73:61:85:5a:ab:d9:
                    d8:ae:89:82:b1:02:4a:ac:e0:dd:4c:5d:ee:2a:09:
                    f2:22:97:e4:24:c9:34:a1:a9:db:78:ed:3e:f2:09:
                    64:16:5e:d4:09:1b:69:51:b4:ab:36:82:a7:e1:5e:
                    d6:cc:2d:8c:87:92:5a:2d:47:77:2b:10:18:74:6f:
                    ad:74:87:f2:06:31:15:4c:05:51:4b:e6:85:fb:17:
                    e9:b7:a6:a1:45:f8:2c:5b:4e:54:69:e1:71:35:34:
                    21:ee:e7:03:7b:aa:ab:67:e2:ee:b6:46:db:c5:78:
                    9e:16:00:16:05:9b:39:b2:7d:a1:a1:69:a8:bf:99:
                    99:cd:5f:36:bd:ee:f0:1b:b3:7a:c8:67:07:26:82:
                    4e:c2:56:23:7b:a5:2f:ec:60:69:2d:97:34:47:ff:
                    39:d9:f4:a0:02:c7:4c:c4:7c:39:71:cf:7b:99:c2:
                    fa:1e:62:f0:b8:54:1c:c1:e1:d8:a1:51:c4:fb:37:
                    0e:b0:d4:f8:b7:ea:89:68:8a:d9:39:0f:09:f8:a5:
                    c6:c1:7b:78:13:16:66:71:37:1e:8b:1e:14:c0:95:
                    68:c6:59:2e:91:d4:58:f9:e9:e8:8b:cd:f9:ce:1c:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:16:DF:71:84:4F:C2:30:EA:5A:21:30:0C:90:E9:A7:E7:AE:FD:D2
            X509v3 Authority Key Identifier:
                keyid:C9:1F:C3:4E:76:9B:49:18:06:E1:80:E9:DF:F9:03:C7:D1:F9:B6:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C91FC34E769B491806E180E9DFF903C7D1F9B6F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0612F29C0E4C9829A709CF8E3416E0D3A6FD9FE81842A821D923ED06630B8D03/0/34352e3232372e36322e302f32332d3234203d3e20323635383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:dd:f6:86:c7:85:ff:d7:e6:ad:4e:cb:37:d2:63:13:72:
         bb:49:2f:5b:86:ee:f6:b3:54:da:99:00:7d:60:59:36:65:f0:
         c0:ba:2e:89:22:a9:21:45:2a:d3:d8:79:0d:d1:17:30:39:84:
         b3:e0:99:c7:1d:74:1e:a4:4f:f7:cb:4b:ee:00:44:12:39:16:
         12:a9:dc:67:90:d4:c3:5f:98:7b:54:a3:b3:86:df:8d:15:7c:
         2f:8d:6c:80:7f:9e:01:d3:ce:05:d1:35:71:c5:0b:83:42:03:
         8c:a4:f2:63:59:e2:0e:d7:f9:f1:ac:9c:c0:f1:09:4c:ef:d4:
         95:94:af:b7:fb:97:de:0f:11:f2:41:e2:61:65:d9:8e:42:c4:
         e1:08:bc:33:51:14:c4:cf:e7:a4:4d:93:68:87:a4:ec:8f:8d:
         ae:16:be:dc:10:ef:c4:21:a8:ff:0a:ed:8a:db:41:a1:e3:37:
         31:e2:22:a4:78:7b:de:eb:50:ff:11:d7:d2:16:3d:b1:4b:44:
         38:d6:d0:e5:d1:b0:fa:de:c4:d7:cc:56:5c:f8:24:d6:ad:4c:
         c3:03:87:e3:53:a6:51:c8:57:24:ac:91:42:5d:cc:f8:06:e1:
         62:72:ee:ab:35:49:f3:fa:ae:ea:0a:fc:c0:86:00:a9:3b:13:
         ff:6b:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org