Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa
File:                     34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa (raw, json)
Hash identifier:          NMGOpz23DX08ABGxbMPlglM2zy+p/9MF9iRq/8oiNZY=
Subject key identifier:   52:EC:23:43:0B:BD:60:82:3F:61:1F:C7:83:F5:9E:01:F2:58:50:48
Certificate issuer:       /CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
Certificate serial:       4CD83FD7A6800AF8F765F6DEE54053CD23533CCB
Authority key identifier: C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa
Signing time:             Tue 05 Mar 2024 17:57:45 +0000
ROA not before:           Tue 05 Mar 2024 17:52:45 +0000
ROA not after:            Tue 04 Mar 2025 17:57:45 +0000
asID:                     265606
IP address blocks:        45.188.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d8:3f:d7:a6:80:0a:f8:f7:65:f6:de:e5:40:53:cd:23:53:3c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5224A5C17DD521C4B7F494B6AD71E9971D34ABE
        Validity
            Not Before: Mar  5 17:52:45 2024 GMT
            Not After : Mar  4 17:57:45 2025 GMT
        Subject: CN=52EC23430BBD60823F611FC783F59E01F2585048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:b7:04:61:8c:c3:d7:0c:7b:4b:bf:c7:0f:
                    db:6f:89:99:39:82:1f:eb:49:27:8e:f0:26:87:b1:
                    31:b4:0d:a2:cc:f2:7e:dd:c4:49:0c:91:2c:85:c1:
                    25:1e:83:c6:bd:d8:b3:47:aa:ea:df:54:36:ec:15:
                    c0:ef:fa:da:1b:62:4c:2d:57:78:0a:99:9d:ee:ba:
                    b7:c1:b4:2a:66:eb:08:5a:1b:d5:70:52:ca:ec:97:
                    9e:e8:3c:fc:67:6b:79:f8:42:b2:d1:71:98:60:05:
                    f0:72:5c:00:ab:c3:54:17:36:a0:4a:d4:77:ac:ba:
                    1d:eb:bb:ce:6d:b7:28:08:89:5c:08:7f:f9:48:a7:
                    34:1a:83:b3:d2:3c:7d:5a:a3:06:6a:a8:f0:b0:ac:
                    0d:4b:5f:54:61:78:dd:0c:5f:aa:f0:a1:64:3c:96:
                    28:a7:5f:ec:46:98:1b:1a:68:8a:47:dd:0b:79:23:
                    fb:9a:ec:cb:5b:bf:53:d5:cf:cc:f0:ef:96:a5:bf:
                    e9:f1:7f:52:49:63:56:75:99:ad:43:57:21:97:c6:
                    bf:b0:1d:11:e1:c1:b2:67:e9:ec:15:6f:e1:6c:66:
                    90:f8:3c:e3:75:f6:13:ba:7c:ab:d7:f3:de:f2:76:
                    6f:b9:1e:ca:b6:de:6b:2c:44:f3:f0:3e:aa:92:ac:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EC:23:43:0B:BD:60:82:3F:61:1F:C7:83:F5:9E:01:F2:58:50:48
            X509v3 Authority Key Identifier:
                keyid:C5:22:4A:5C:17:DD:52:1C:4B:7F:49:4B:6A:D7:1E:99:71:D3:4A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5224A5C17DD521C4B7F494B6AD71E9971D34ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0821F006A6682534ECFF0F10A34841518316DADC0DC25018049001208666F4E7/0/34352e3138382e3132342e302f32322d3234203d3e20323635363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:29:37:20:a6:a2:48:ea:68:9e:69:58:93:e8:4e:f5:8f:20:
         05:c4:ee:c0:a8:e5:1f:bd:06:a7:c4:06:7a:01:5d:76:45:ee:
         a0:46:0c:97:e5:fe:da:d7:26:49:40:ad:d5:c9:a0:68:34:85:
         d9:cf:43:08:27:ab:93:a8:8b:1f:97:df:34:58:7a:a7:5d:3e:
         da:5c:a0:77:4c:dd:58:10:4b:01:13:34:dc:03:ef:4f:b9:cf:
         3a:21:4b:fd:67:ab:d3:1b:fc:ea:db:7c:85:39:bf:3b:6c:94:
         b8:df:6a:b8:c0:d5:42:96:de:68:35:5c:45:f2:51:fa:e4:44:
         7a:16:30:2c:9e:64:dd:3e:61:cd:9b:15:23:bf:97:d8:91:b8:
         4a:e8:cf:3f:67:1f:c5:91:16:b7:0a:79:e8:47:ca:e3:a7:06:
         17:ae:37:ce:b6:83:63:1a:1e:d8:e8:29:9d:a3:87:c9:ac:98:
         34:e4:13:97:0f:6d:5e:45:0e:76:e4:cc:e5:f7:92:63:c7:14:
         b9:55:23:f7:d5:ce:15:06:26:31:24:4e:96:e0:8d:d1:90:2b:
         25:b4:05:0b:b6:de:fd:4d:05:07:d1:e2:2f:84:34:5d:97:a8:
         12:c7:09:d4:85:69:82:68:48:20:55:2b:8f:81:32:00:9a:a0:
         34:b4:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org