Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32342d3234203d3e203532343638.roa
File:                     34352e3138392e36302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          ecVFJUEbrRptcq7QFr/fm1x+gZ8lBOhnxt8wu/TzCs8=
Subject key identifier:   67:43:E9:7C:8F:F2:DF:72:54:A8:55:6A:63:3B:75:7F:0C:1D:22:D5
Certificate issuer:       /CN=58C76DEB05E1657B955AB41355B108825D2D69BC
Certificate serial:       753D7A706830EF704F2F013F0B00AC7A3C581E37
Authority key identifier: 58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:23:32 +0000
ROA not before:           Tue 05 Mar 2024 18:18:32 +0000
ROA not after:            Tue 04 Mar 2025 18:23:32 +0000
asID:                     52468
IP address blocks:        45.189.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3d:7a:70:68:30:ef:70:4f:2f:01:3f:0b:00:ac:7a:3c:58:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C76DEB05E1657B955AB41355B108825D2D69BC
        Validity
            Not Before: Mar  5 18:18:32 2024 GMT
            Not After : Mar  4 18:23:32 2025 GMT
        Subject: CN=6743E97C8FF2DF7254A8556A633B757F0C1D22D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:37:6c:07:db:96:a7:13:92:81:9a:71:54:
                    89:96:e0:84:54:a5:88:2c:9b:59:59:16:57:b0:52:
                    20:dc:ee:e6:62:f0:ea:ba:98:b0:4b:d4:7d:0a:fb:
                    75:81:f3:3a:d6:3b:2a:a3:a9:85:af:63:4f:64:37:
                    46:81:74:43:c8:bb:26:c3:4d:ff:22:f0:a4:05:98:
                    04:91:6b:3d:a3:b9:62:79:46:e8:c0:20:1d:6d:b0:
                    e3:a0:12:88:ed:2d:96:b9:c6:7e:f7:ab:ca:99:71:
                    10:04:d9:92:ee:9f:81:60:58:40:6e:a5:c6:ea:9c:
                    85:58:12:5c:9d:71:b8:65:ee:81:8b:46:da:31:83:
                    8b:d1:9d:b7:94:8a:c7:f0:b3:ae:96:da:73:fa:73:
                    ad:d4:6d:8d:7a:61:cb:d0:68:63:0d:25:e1:f2:db:
                    00:c2:8e:a8:20:21:76:9a:99:fd:69:9a:a2:ab:77:
                    73:e9:32:c9:97:0d:64:f2:ef:c2:e0:a4:0e:63:79:
                    38:1e:99:bf:f9:16:ad:82:d3:29:bd:24:21:0c:5e:
                    f1:99:1d:07:26:c3:d6:ab:fc:52:d7:3e:21:39:3e:
                    d6:83:2a:9e:0c:47:3f:09:a0:40:2d:fb:cd:0c:82:
                    b8:f9:96:fc:63:53:d1:65:6a:7d:86:0b:d4:1b:5e:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:43:E9:7C:8F:F2:DF:72:54:A8:55:6A:63:3B:75:7F:0C:1D:22:D5
            X509v3 Authority Key Identifier:
                keyid:58:C7:6D:EB:05:E1:65:7B:95:5A:B4:13:55:B1:08:82:5D:2D:69:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/58C76DEB05E1657B955AB41355B108825D2D69BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/58C76DEB05E1657B955AB41355B108825D2D69BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B2F1BAE427909763512B7001E694045B9FAB9477FCCC1EE2B6830E0A0838B1A/0/34352e3138392e36302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:92:8e:ee:47:ba:e6:f2:4e:70:b2:00:0d:23:d1:50:61:f0:
         d0:78:5f:ab:66:b3:4d:13:28:ee:0f:69:28:1f:9e:6a:6b:bd:
         30:a7:cf:6f:c1:74:15:f6:c9:64:53:d5:fe:c2:d8:6f:7e:0d:
         4b:09:49:8c:60:14:0c:c5:b8:cd:9b:c8:d5:0d:c3:d8:50:9c:
         84:75:05:41:33:ab:32:ee:56:80:6c:e0:6f:dc:ae:cd:81:90:
         31:66:71:e9:fc:97:c0:91:71:f9:d5:b8:d3:79:36:d2:e7:b7:
         08:f3:ff:e8:af:70:d3:6c:b3:09:e1:76:b6:bf:61:fb:94:ed:
         c6:b6:59:08:e0:27:13:a5:0c:26:ed:f9:69:6b:72:8e:b3:05:
         84:ab:52:82:df:71:b1:f8:cc:b3:ef:d7:b7:07:56:06:b2:31:
         c7:d5:ad:a6:81:67:50:aa:f4:2c:76:dd:df:a6:7a:03:9d:87:
         79:20:ba:6b:83:54:0a:4d:21:2f:8f:44:cd:fa:61:3c:ba:33:
         0f:00:59:cc:61:1d:1a:28:9d:a1:91:de:b7:01:09:7f:b1:d8:
         02:7f:c4:41:69:b4:29:4b:f3:4c:77:ea:10:94:fe:43:11:01:
         48:73:18:7c:ed:7a:92:8d:77:9e:7a:9e:47:d5:58:2d:0b:73:
         56:45:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org