Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/34352e3136342e3232392e302f32342d3234203d3e20323637373036.roa
File:                     34352e3136342e3232392e302f32342d3234203d3e20323637373036.roa (raw, json)
Hash identifier:          jOgjl+bQNYTn8k8bcfjxuHQXh+RKXdpACf190N4fjds=
Subject key identifier:   A1:21:16:12:54:44:19:E6:AA:E0:68:BF:52:DD:E7:58:14:12:65:B9
Certificate issuer:       /CN=3A2E414DFFAF888C3670046DD819856FE5330921
Certificate serial:       0CD76EF7AE24C9FDC92CFAE8DDE1B464ADE97C9A
Authority key identifier: 3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/34352e3136342e3232392e302f32342d3234203d3e20323637373036.roa
Signing time:             Tue 16 Apr 2024 11:30:00 +0000
ROA not before:           Tue 16 Apr 2024 11:25:00 +0000
ROA not after:            Tue 15 Apr 2025 11:30:00 +0000
asID:                     267706
IP address blocks:        45.164.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d7:6e:f7:ae:24:c9:fd:c9:2c:fa:e8:dd:e1:b4:64:ad:e9:7c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2E414DFFAF888C3670046DD819856FE5330921
        Validity
            Not Before: Apr 16 11:25:00 2024 GMT
            Not After : Apr 15 11:30:00 2025 GMT
        Subject: CN=A1211612544419E6AAE068BF52DDE758141265B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:70:b5:69:fc:b8:09:bc:8d:97:af:ca:2f:
                    23:79:4e:34:99:de:5f:84:b2:e3:5b:5a:51:b2:4f:
                    85:13:bc:fe:95:97:20:b1:e1:ff:40:bc:41:cc:7c:
                    b4:93:01:cc:d3:f7:b6:e0:61:ab:75:78:8f:b4:fc:
                    c0:a5:e5:86:8d:34:a3:cb:fe:fd:16:cd:a7:68:52:
                    45:d6:e4:1f:0f:d8:37:6a:f1:47:44:f0:f6:22:fb:
                    05:84:bf:88:dd:80:d6:fd:c1:77:3d:72:cc:b8:b8:
                    05:ca:9b:76:50:68:f1:da:83:90:fd:c5:77:13:6b:
                    bb:0d:83:4d:fb:bc:68:70:dd:22:3f:f0:77:e9:e3:
                    9b:14:e4:3f:3b:50:b1:05:5b:5f:32:87:d4:a4:1d:
                    9b:dd:5d:e2:7c:5b:1a:57:8b:4e:1d:32:7f:9f:50:
                    d9:66:11:ec:3c:b4:27:e8:f3:48:99:1e:43:00:51:
                    9c:b6:d1:d2:ac:8c:a0:14:16:d1:b1:58:de:87:6f:
                    86:4f:65:67:71:2e:a4:62:7a:4d:83:59:b0:7a:97:
                    1c:6d:4a:d1:16:8b:47:41:82:4d:3c:ca:84:f1:0e:
                    f6:ce:5f:40:22:7e:04:33:cd:c6:3a:49:7f:dc:4d:
                    f3:b6:98:5c:c2:86:4f:12:21:6c:f8:9f:91:4e:c5:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:21:16:12:54:44:19:E6:AA:E0:68:BF:52:DD:E7:58:14:12:65:B9
            X509v3 Authority Key Identifier:
                keyid:3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/34352e3136342e3232392e302f32342d3234203d3e20323637373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0c:60:aa:af:59:0a:db:6f:b4:12:73:ad:7b:c0:2c:2a:2b:
         c3:74:0a:bf:70:4d:59:7b:d5:b7:e1:91:59:1c:02:91:ef:2f:
         aa:02:22:ea:b3:f8:4b:cf:7a:13:29:e5:8d:d9:60:c2:b4:2c:
         0a:79:2d:ea:10:53:42:f5:cf:3c:67:a4:b3:e6:10:c5:8b:ed:
         bd:9b:bb:8d:e0:dc:04:e4:0c:19:69:55:42:7a:c7:5f:e1:38:
         ee:52:e4:bd:59:93:79:98:02:be:64:32:34:75:89:31:ca:30:
         11:bf:29:70:23:7c:17:a7:45:fd:3e:0e:6a:97:ee:75:d3:e6:
         33:17:04:2d:97:5b:62:ed:2e:b0:89:61:54:c3:af:24:ed:f1:
         11:69:ac:b5:bb:3a:25:49:d5:09:b2:a5:2e:b8:ab:c7:16:1a:
         d9:5c:ca:10:60:c6:ad:66:06:b2:8d:3f:23:10:78:2c:38:37:
         c4:b6:2a:63:07:c7:93:ea:76:25:39:5e:cf:76:af:c5:53:c9:
         5c:88:04:15:3f:47:72:b8:3b:9f:b5:9b:70:ec:93:c7:66:39:
         9e:de:ff:36:1e:5b:34:13:56:9e:ff:3e:b7:48:69:14:ce:87:
         ea:b6:cb:b3:e3:66:d4:1b:12:a6:89:a3:ee:b7:e2:94:2e:71:
         f7:b4:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org