Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136392e302f32342d3234203d3e20323636363934.roa
File:                     34352e3232392e3136392e302f32342d3234203d3e20323636363934.roa (raw, json)
Hash identifier:          P/7jZnqEzQlbWZGlRoU+ldK/LZA9obZE3ODvl+0BwtM=
Subject key identifier:   A9:54:53:EF:5C:1E:4C:AA:C8:E4:5E:09:E1:40:32:DF:61:A3:C4:90
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       4C8CDE8906FA2F912F7ACC53DC2B3FFB0E54D08F
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136392e302f32342d3234203d3e20323636363934.roa
Signing time:             Tue 28 May 2024 17:35:03 +0000
ROA not before:           Tue 28 May 2024 17:30:03 +0000
ROA not after:            Tue 27 May 2025 17:35:03 +0000
asID:                     266694
IP address blocks:        45.229.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8c:de:89:06:fa:2f:91:2f:7a:cc:53:dc:2b:3f:fb:0e:54:d0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: May 28 17:30:03 2024 GMT
            Not After : May 27 17:35:03 2025 GMT
        Subject: CN=A95453EF5C1E4CAAC8E45E09E14032DF61A3C490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:13:0d:eb:63:a6:5d:78:c3:4a:7b:98:14:
                    5c:8d:75:91:0f:70:0c:ed:98:ff:f0:97:92:38:ef:
                    50:5b:57:32:a5:9e:6d:db:6a:dd:2c:af:17:a3:26:
                    6f:b8:41:6d:70:78:ac:3e:fc:74:52:99:ae:a2:bc:
                    10:cb:38:ea:5c:ff:1e:d3:a9:9a:fd:78:21:a5:06:
                    f0:98:f5:c3:1f:b3:e2:f7:1a:8b:88:9d:50:ee:24:
                    ce:9c:70:b6:65:ac:74:17:ac:7e:a8:2f:c5:71:4a:
                    f9:89:f5:c6:6d:9a:a5:aa:ad:66:94:49:b0:48:06:
                    a8:ba:5e:44:fc:e4:59:48:34:8b:39:43:98:68:c9:
                    83:d1:7a:07:e1:cb:ee:a0:02:fd:e1:6d:a1:25:a1:
                    d5:07:0a:94:a0:fb:13:64:f9:1b:ac:14:45:a8:45:
                    8f:3f:14:25:de:af:c6:e9:52:68:f9:af:04:48:2b:
                    87:b6:f9:55:c8:2b:91:c5:51:e5:0e:be:c1:75:7d:
                    b8:ef:a7:57:36:42:74:54:78:92:61:56:fe:a3:59:
                    51:77:dc:9d:b0:01:aa:7a:2a:7d:69:81:1f:9d:00:
                    a7:18:b3:0f:5e:f9:77:ed:5d:77:c4:73:43:68:71:
                    90:bf:7f:07:b3:fd:4c:3e:8f:2f:55:ab:17:9f:e0:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:54:53:EF:5C:1E:4C:AA:C8:E4:5E:09:E1:40:32:DF:61:A3:C4:90
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136392e302f32342d3234203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:70:30:f7:a6:c8:cb:1a:9b:30:1b:19:77:63:4d:d7:18:
         d9:97:68:60:d7:85:12:11:b9:65:d9:7a:4e:8a:9b:3d:f1:2d:
         ce:59:f1:be:5f:3f:89:be:b5:67:16:91:8f:1a:f9:a8:51:ef:
         29:00:6a:be:da:05:7c:b5:5d:81:75:8c:8a:d1:b9:2e:5e:5f:
         3e:6d:d6:85:17:21:a5:5c:08:73:56:11:50:a0:48:7c:c2:6a:
         c0:5a:3c:53:37:79:99:5a:3f:a3:14:f4:6c:08:90:5b:d1:5f:
         33:fe:45:2c:13:d8:4d:1a:66:87:d7:9f:68:46:fa:eb:11:06:
         b6:ae:33:ee:69:2f:85:6e:d9:a5:5c:5b:8a:82:0f:f4:da:77:
         8b:57:1d:f3:5f:e8:a5:e6:b9:77:6c:d6:8e:f4:3d:ac:12:67:
         6f:e2:ea:51:d5:e0:04:ca:8a:18:25:d4:a7:b9:10:6b:66:47:
         8f:82:fe:5e:ee:12:2f:51:7c:68:aa:0f:9b:68:10:6d:ac:d1:
         8e:ee:57:e5:81:5f:fb:b8:6d:6d:59:63:fe:7e:88:79:1d:0d:
         55:db:72:c9:b9:25:1c:d0:0f:5c:c3:72:08:a1:ea:42:b3:a0:
         0a:98:66:7f:14:4b:b8:1f:28:44:63:a4:16:08:ea:1f:d5:74:
         b8:f6:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org