Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e392e302f32342d3236203d3e20323635353534.roa
File:                     34352e3137322e392e302f32342d3236203d3e20323635353534.roa (raw, json)
Hash identifier:          b8ZV4ThE6qDURjQJxVGbxNOuKEW+1HgFbcJ7vWi+o5w=
Subject key identifier:   3E:05:79:80:B5:A6:C0:DB:F9:B7:97:4E:4A:22:BD:7D:B0:BE:01:32
Certificate issuer:       /CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8
Certificate serial:       7388957E70F6B29ADB8D9A4B09C5B795525F24E3
Authority key identifier: 2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e392e302f32342d3236203d3e20323635353534.roa
Signing time:             Tue 05 Mar 2024 18:12:39 +0000
ROA not before:           Tue 05 Mar 2024 18:07:39 +0000
ROA not after:            Tue 04 Mar 2025 18:12:39 +0000
asID:                     265554
IP address blocks:        45.172.9.0/24 maxlen: 26

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:88:95:7e:70:f6:b2:9a:db:8d:9a:4b:09:c5:b7:95:52:5f:24:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8
        Validity
            Not Before: Mar  5 18:07:39 2024 GMT
            Not After : Mar  4 18:12:39 2025 GMT
        Subject: CN=3E057980B5A6C0DBF9B7974E4A22BD7DB0BE0132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:41:67:ff:32:c9:16:bb:00:43:52:ab:a4:
                    0d:b2:84:b2:5b:a0:54:97:98:41:6b:bb:99:00:45:
                    b8:47:68:ad:21:99:db:0b:53:22:f7:47:ed:47:07:
                    11:38:b7:ec:fe:ad:7c:0d:10:97:3e:dd:56:75:51:
                    56:82:e8:6f:ae:7b:c3:c3:70:9e:e7:98:18:9a:3a:
                    e5:fe:01:83:11:ab:34:8a:18:72:6e:35:15:e6:2d:
                    71:31:d9:1c:11:0d:51:dd:31:4a:cc:ed:39:12:0e:
                    68:95:86:86:23:04:66:de:3a:01:1d:79:50:30:4c:
                    37:b0:be:5a:c8:83:71:f5:d6:d4:cd:2e:0d:8b:71:
                    f2:ec:69:0c:c5:b4:58:88:3b:f4:c7:52:cf:ab:a3:
                    a3:fd:18:72:24:2e:07:58:e1:1b:77:cd:20:fc:05:
                    2e:e6:3b:93:74:a5:ae:45:20:1b:39:62:46:48:4b:
                    99:7d:d4:ca:10:90:e5:f7:9a:ae:23:7f:e7:aa:86:
                    af:5c:8d:62:ef:57:00:82:0c:0b:8c:93:b5:f4:76:
                    b5:6f:fa:f8:a9:cb:c7:dd:07:5c:ca:e6:f9:18:84:
                    42:f2:a9:9a:c7:0e:81:d2:ee:ec:4c:ef:e2:3a:df:
                    9b:0e:88:3c:02:8c:f3:fc:aa:98:24:e8:67:69:e1:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:05:79:80:B5:A6:C0:DB:F9:B7:97:4E:4A:22:BD:7D:B0:BE:01:32
            X509v3 Authority Key Identifier:
                keyid:2E:41:FF:4F:E8:EB:A6:36:9B:AA:1B:BC:58:BB:D7:1B:FF:D3:1E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E41FF4FE8EBA6369BAA1BBC58BBD71BFFD31EA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18AE1CBDAB776AAD43D3A9FECB6B4E98C6B50727491D5E5445B66620E32D4CA9/0/34352e3137322e392e302f32342d3236203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:fb:f4:33:32:20:3a:99:79:d3:82:f7:ef:65:87:77:06:
         03:d8:2c:96:21:e0:65:56:26:f4:35:3c:7a:6d:59:26:bd:e3:
         c9:4b:5c:89:a5:33:65:8c:5e:df:72:c6:4b:49:0f:ed:bc:99:
         4a:06:d6:82:9e:cd:ea:dd:41:92:88:06:e6:d1:2c:a1:ef:93:
         a7:76:57:e4:e6:b2:df:55:9a:4f:e2:7c:21:7c:c5:06:65:e7:
         df:64:d2:ad:8e:e6:14:b3:1c:54:90:93:f7:be:a0:60:f1:ae:
         e0:1c:14:79:3c:de:ad:fc:23:7b:20:97:df:65:be:e9:24:26:
         4b:22:38:a5:54:7c:6f:12:71:6c:e0:fb:60:90:45:40:65:59:
         6a:0d:76:93:d6:50:84:9f:0d:ad:59:5d:11:ee:bf:bc:91:f6:
         fb:f6:c8:6c:ae:67:84:4b:dd:24:c1:ed:ef:99:8d:d5:b7:1a:
         b2:4b:cb:e1:72:05:6f:ec:0f:ed:f7:79:47:32:1a:f4:52:b6:
         ce:41:a6:7a:ce:da:b4:5a:20:dc:41:61:c6:93:e3:8c:5d:7d:
         71:47:86:ef:22:a5:82:b6:13:49:af:50:88:90:e4:b3:1e:1b:
         76:51:8c:56:79:c1:3d:b1:25:f9:85:c4:d9:9a:3f:15:a8:87:
         74:9e:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org