Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13C28614D65936EEA9D61E7094DD70E8A575E5CB0CE898037447476CB299C4E8/0/34352e3136382e3139322e302f32322d3234203d3e20323635383136.roa
File:                     34352e3136382e3139322e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          GTZLTypNBjuIo5lQ52SqphgTCr8HS3uRQtm3BnFq0LU=
Subject key identifier:   A6:8C:EA:A2:5B:07:AB:09:A4:F1:99:F0:ED:9D:EF:91:9B:3D:53:7E
Certificate issuer:       /CN=6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9
Certificate serial:       453DF1C97FC011E0B772D7866AD3DCF21966BAD0
Authority key identifier: 6B:71:31:EF:9C:4F:33:B8:DE:C3:BE:45:EE:74:8A:30:82:7B:C8:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13C28614D65936EEA9D61E7094DD70E8A575E5CB0CE898037447476CB299C4E8/0/34352e3136382e3139322e302f32322d3234203d3e20323635383136.roa
Signing time:             Tue 05 Mar 2024 17:48:47 +0000
ROA not before:           Tue 05 Mar 2024 17:43:47 +0000
ROA not after:            Tue 04 Mar 2025 17:48:47 +0000
asID:                     265816
IP address blocks:        45.168.192.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13C28614D65936EEA9D61E7094DD70E8A575E5CB0CE898037447476CB299C4E8/0/6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13C28614D65936EEA9D61E7094DD70E8A575E5CB0CE898037447476CB299C4E8/0/6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3d:f1:c9:7f:c0:11:e0:b7:72:d7:86:6a:d3:dc:f2:19:66:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9
        Validity
            Not Before: Mar  5 17:43:47 2024 GMT
            Not After : Mar  4 17:48:47 2025 GMT
        Subject: CN=A68CEAA25B07AB09A4F199F0ED9DEF919B3D537E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:bf:4e:bb:da:9b:93:d1:91:57:66:3f:50:
                    58:01:e5:e3:1f:2a:43:66:d7:94:4d:e7:af:7a:79:
                    39:e5:ab:9e:90:33:bc:0a:40:8f:ef:67:8e:1b:6b:
                    e7:f3:b4:9a:9f:3b:cf:2a:6a:0b:e0:be:8a:6e:06:
                    5a:58:aa:2f:2b:16:3e:15:16:68:fd:e1:7c:b5:64:
                    65:74:c8:e3:ec:25:40:1c:ac:33:b8:ef:ac:20:df:
                    64:3c:59:df:53:14:05:c7:53:06:ff:54:b9:79:fc:
                    7d:13:70:7c:34:43:79:68:01:0d:1e:0c:39:e9:3d:
                    99:30:de:96:8c:4e:3e:c2:af:5a:a3:50:8b:35:2a:
                    0d:d5:f8:86:58:b2:c8:c4:89:e1:4c:60:de:bc:e0:
                    3f:92:e4:8d:a0:92:6c:93:69:7e:96:fc:58:ea:a6:
                    04:f7:61:86:c8:f9:f5:3b:0c:ae:da:2a:6a:70:89:
                    dc:e0:ec:54:90:f1:6d:8d:ab:ea:45:99:24:3c:35:
                    b8:16:ae:04:18:e1:da:9c:0a:48:13:56:ab:fc:8e:
                    32:18:ac:28:e2:db:bf:85:e1:33:1b:ab:fe:62:bf:
                    0d:64:a6:39:32:4c:fe:de:fc:17:99:c0:2c:f7:41:
                    a6:02:7a:28:3e:3f:a3:19:60:62:93:cf:72:72:e9:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:EA:A2:5B:07:AB:09:A4:F1:99:F0:ED:9D:EF:91:9B:3D:53:7E
            X509v3 Authority Key Identifier:
                keyid:6B:71:31:EF:9C:4F:33:B8:DE:C3:BE:45:EE:74:8A:30:82:7B:C8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13C28614D65936EEA9D61E7094DD70E8A575E5CB0CE898037447476CB299C4E8/0/6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B7131EF9C4F33B8DEC3BE45EE748A30827BC8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13C28614D65936EEA9D61E7094DD70E8A575E5CB0CE898037447476CB299C4E8/0/34352e3136382e3139322e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:df:ca:a0:08:49:c1:40:8b:ca:f3:a7:59:ff:f0:44:d8:
         85:9f:80:4a:3c:60:f0:7c:c4:3c:88:1b:0c:78:06:a5:f0:46:
         35:f0:f4:59:3d:36:9e:38:b1:a8:7e:84:8a:bf:29:c3:6d:4a:
         80:78:23:31:70:ac:93:77:4e:2f:53:af:2a:8d:9e:d6:2a:2c:
         c4:3d:2a:27:0e:be:1c:30:6e:4b:7b:e3:fe:88:6b:5e:fe:86:
         03:3c:5c:4b:1b:16:3c:90:df:01:8b:b5:91:68:d6:0d:bf:5c:
         8d:a1:06:6e:c0:61:0b:e2:bc:c8:6e:02:cf:78:10:4d:73:c4:
         45:2e:1f:ed:e6:dc:65:2c:b0:5f:df:53:d9:8a:48:38:ee:0c:
         3d:37:86:0b:0c:74:9f:3b:fb:c6:83:8c:e7:9a:ea:83:0e:65:
         b7:39:0c:8e:e4:d2:68:64:0c:e6:af:5d:d9:41:8f:14:99:85:
         7d:98:f0:e2:25:20:9c:9f:06:5d:d9:ba:db:1c:cf:a9:56:09:
         70:bd:1d:e7:28:76:b4:63:c8:c1:a9:47:53:8b:c7:6f:bf:57:
         15:81:18:d8:a1:b4:e5:1f:5f:dc:9f:e1:44:e2:3e:87:7e:23:
         1f:c0:b6:71:4f:1f:54:9e:13:45:46:0d:f5:54:d5:66:27:f4:
         19:f1:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org