Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/34352e3137332e302e302f32322d3234203d3e203631343531.roa
File:                     34352e3137332e302e302f32322d3234203d3e203631343531.roa (raw, json)
Hash identifier:          D9vlnWmJr5EJmeD4rrPKti+o8KN+16OA58P6MUdpjyA=
Subject key identifier:   54:13:46:46:79:C8:AE:36:0E:1F:F8:E9:7E:07:99:57:73:46:ED:52
Certificate issuer:       /CN=2D420DA52C4FED64C64081F978E8485CD8161A81
Certificate serial:       1A569306C47462E7A60BAAE1CBC880832E9F02C0
Authority key identifier: 2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/34352e3137332e302e302f32322d3234203d3e203631343531.roa
Signing time:             Tue 05 Mar 2024 18:21:25 +0000
ROA not before:           Tue 05 Mar 2024 18:16:25 +0000
ROA not after:            Tue 04 Mar 2025 18:21:25 +0000
asID:                     61451
IP address blocks:        45.173.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:56:93:06:c4:74:62:e7:a6:0b:aa:e1:cb:c8:80:83:2e:9f:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D420DA52C4FED64C64081F978E8485CD8161A81
        Validity
            Not Before: Mar  5 18:16:25 2024 GMT
            Not After : Mar  4 18:21:25 2025 GMT
        Subject: CN=5413464679C8AE360E1FF8E97E0799577346ED52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:d1:71:75:80:30:eb:16:20:b6:1f:3f:12:
                    64:cc:9e:fa:e8:cd:2e:37:a4:6c:dc:91:b4:81:e4:
                    d6:b6:a8:62:dc:49:09:0d:17:f4:47:36:ee:ae:63:
                    d5:25:06:4b:7a:9d:ca:c2:87:de:59:d8:ef:f0:1f:
                    8a:fe:ee:9a:42:a3:70:ca:f8:2c:d7:9d:6b:12:c3:
                    1d:b6:e6:b7:fc:df:c7:1e:7b:07:61:16:da:c2:5b:
                    81:65:b6:a4:54:95:85:77:6e:47:eb:52:e5:4c:3f:
                    0d:ee:26:eb:e3:a9:7a:65:23:c7:07:56:ff:20:1e:
                    ec:07:c6:0e:20:97:d9:73:3e:87:69:30:9f:19:be:
                    6c:d7:20:b6:ee:fe:e5:ae:97:2e:90:90:b6:cf:1c:
                    cf:65:1d:03:d5:96:17:60:e2:93:dd:8a:a2:49:70:
                    ff:78:f2:f1:8e:33:0c:19:3a:6c:e0:bf:e0:51:69:
                    ba:5b:44:85:51:ff:21:f9:32:65:76:88:ba:b9:21:
                    e9:dc:0f:c4:42:54:c0:d6:e0:68:7b:f7:81:94:87:
                    ce:01:d8:61:e7:d3:d6:91:e5:94:43:33:a4:35:b2:
                    a4:96:09:4f:eb:8d:c8:d8:12:47:17:6b:aa:5a:ec:
                    c4:3e:6f:7f:84:4d:46:89:b6:58:06:7f:ea:7e:de:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:13:46:46:79:C8:AE:36:0E:1F:F8:E9:7E:07:99:57:73:46:ED:52
            X509v3 Authority Key Identifier:
                keyid:2D:42:0D:A5:2C:4F:ED:64:C6:40:81:F9:78:E8:48:5C:D8:16:1A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/2D420DA52C4FED64C64081F978E8485CD8161A81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D420DA52C4FED64C64081F978E8485CD8161A81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AB3C11BF40253F9055107CF2AFC1F49E577BDB491CFD7B8A48F802FC5883B5D/0/34352e3137332e302e302f32322d3234203d3e203631343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:39:c9:45:ff:93:c1:bd:b7:4c:8b:0b:f5:8c:fd:4f:4f:61:
         97:ab:09:14:cd:2c:50:88:56:30:df:71:47:a6:94:e5:20:f7:
         86:9b:c1:cb:9e:d2:1a:5e:2b:d1:b7:41:17:13:14:3d:d7:be:
         e3:85:e6:e2:7d:e8:78:dd:a6:56:f0:11:98:99:f0:16:2c:40:
         90:23:07:07:03:d7:82:6d:e4:23:02:fd:82:da:ca:3b:82:ad:
         67:ca:3f:27:0f:bd:30:cd:9e:9c:fe:bc:4a:22:e5:96:30:86:
         3e:5a:8d:ae:83:30:9d:ac:79:86:dc:0b:0c:fd:ff:e3:48:63:
         e5:2a:0e:de:e9:5e:e6:e7:e4:41:e6:be:8c:d3:f6:b9:63:94:
         fd:b7:b5:9a:67:38:b1:14:84:27:14:36:7b:c2:61:53:61:b6:
         cd:ec:43:81:66:09:18:e4:cf:91:62:68:80:d2:76:a5:d2:f5:
         e0:5a:84:a6:74:a5:da:66:20:e5:60:83:ac:40:86:40:95:8e:
         1d:3b:ea:fc:f2:60:73:5b:da:17:7e:0f:d6:ab:0d:29:01:0a:
         2e:ab:67:5d:7a:15:02:10:e8:9c:0b:b7:a4:6a:3e:07:ca:2a:
         22:d8:35:47:70:0e:7a:05:fe:4b:31:bb:47:b6:fd:82:14:9f:
         66:1b:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:30 2024 by rpki-client on console-ams.rpki-client.org