Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e31312e302f32342d3236203d3e20323637383030.roa
File:                     34352e3137322e31312e302f32342d3236203d3e20323637383030.roa (raw, json)
Hash identifier:          ALVi3I44uuywM2S5ON4F46/X0z0u44jZV9kNlhtMebM=
Subject key identifier:   54:82:C7:43:12:A2:B0:F7:36:E7:16:B8:44:54:81:80:31:A9:6E:73
Certificate issuer:       /CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8
Certificate serial:       153796C17617EA9E805EAEEB2A724F1DDB0F86DD
Authority key identifier: 2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e31312e302f32342d3236203d3e20323637383030.roa
Signing time:             Tue 05 Mar 2024 18:12:38 +0000
ROA not before:           Tue 05 Mar 2024 18:07:38 +0000
ROA not after:            Tue 04 Mar 2025 18:12:38 +0000
asID:                     267800
IP address blocks:        45.172.11.0/24 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:37:96:c1:76:17:ea:9e:80:5e:ae:eb:2a:72:4f:1d:db:0f:86:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8
        Validity
            Not Before: Mar  5 18:07:38 2024 GMT
            Not After : Mar  4 18:12:38 2025 GMT
        Subject: CN=5482C74312A2B0F736E716B84454818031A96E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:cc:04:ba:b5:b2:19:43:dc:7f:07:d3:e6:
                    29:cd:ef:b1:99:a0:e9:05:6b:85:b2:c5:19:ec:a0:
                    ae:31:7b:f2:29:0c:65:e8:cc:65:e7:fc:f8:a0:28:
                    e7:49:c6:0c:f9:7e:f4:78:f9:c4:59:6f:2d:92:a5:
                    56:c9:31:cc:1d:8c:1e:87:34:e5:c5:e9:63:f2:2c:
                    a3:0d:22:49:be:f2:a8:a6:ee:91:b1:01:b3:4e:9d:
                    6a:1d:1e:7c:27:9d:80:b5:a4:1a:b6:72:8c:9a:5a:
                    c8:7e:45:d1:7a:c5:15:4a:cb:b6:2b:1d:1b:d8:73:
                    ef:78:6d:41:18:aa:f5:1e:ab:5b:3e:b7:99:47:89:
                    ed:bb:52:a5:b1:0c:c4:a0:70:b4:6c:60:46:da:79:
                    68:6e:34:b6:c8:be:c5:0e:83:a4:7e:3f:e2:06:00:
                    77:82:7f:71:dd:19:56:ef:ee:40:1d:79:2f:17:ba:
                    f4:41:e5:f4:dd:e5:1e:c2:1e:8c:27:25:42:a8:66:
                    ad:bb:5e:f9:f3:e7:5c:36:8f:19:7b:75:ec:13:52:
                    67:82:55:0e:39:c3:ff:ba:36:7a:b8:6a:c5:50:32:
                    39:02:4a:9f:26:c6:36:de:16:5a:21:e6:19:0f:03:
                    b2:c6:47:26:9b:e9:35:3d:07:bf:ce:41:93:eb:d1:
                    6e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:C7:43:12:A2:B0:F7:36:E7:16:B8:44:54:81:80:31:A9:6E:73
            X509v3 Authority Key Identifier:
                keyid:2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e31312e302f32342d3236203d3e20323637383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:09:6b:63:1b:02:82:45:ea:5d:a1:bd:56:fd:a2:f3:d8:1c:
         d4:51:4e:43:09:ec:3a:cd:ce:4f:c0:c6:b2:45:29:42:34:ac:
         13:3c:3c:e2:86:d6:03:73:aa:7f:75:f7:2e:9b:4c:a5:9f:c4:
         17:16:af:71:56:7a:c0:53:22:af:2f:65:87:6a:ec:72:e2:38:
         2d:27:41:e1:ac:e3:2b:1e:09:c1:61:b0:90:c7:36:42:68:e4:
         af:bc:71:04:76:b5:86:5d:1e:f6:26:46:98:3c:9e:4a:04:e5:
         0b:0b:78:10:dc:56:e6:55:cd:8c:a4:73:6c:3b:b8:01:66:57:
         6c:3f:91:9b:e2:61:5f:e3:35:d3:6f:5f:8c:55:3f:12:c4:4b:
         e3:eb:55:cf:b5:19:ea:e3:00:49:d7:6b:f5:b6:63:bf:66:a5:
         ca:43:5b:74:fd:c0:71:e6:e1:30:26:5e:4e:30:4b:37:f4:a8:
         77:c4:f0:ed:f6:7d:2e:74:32:13:dd:e2:81:fd:88:65:68:65:
         c5:5e:e6:eb:95:b1:5e:6f:90:25:a1:57:9f:5d:61:d1:22:59:
         f2:2a:39:72:16:be:a9:b0:02:41:16:7c:8b:e0:bf:b1:bd:80:
         80:50:d3:8a:5a:a9:25:72:44:a4:a0:28:6a:01:15:91:1f:88:
         3e:79:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:18 2024 by rpki-client on console-fra.rpki-client.org