Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/34352e3139312e35322e302f32322d3234203d3e20323635363139.roa
File:                     34352e3139312e35322e302f32322d3234203d3e20323635363139.roa (raw, json)
Hash identifier:          612S/eE9q9AS9oPL9u2rS+v2C0TffYazsuC02fKTxmM=
Subject key identifier:   52:9A:3A:84:89:8F:89:8A:AF:01:E1:DC:17:71:C9:C1:8A:A6:03:8B
Certificate issuer:       /CN=FED4E93B0781CF3EE4775D8FA1811D341F41248D
Certificate serial:       5F1CF3081EA0AD03EC87EE4488B6AC9FBCC42F3C
Authority key identifier: FE:D4:E9:3B:07:81:CF:3E:E4:77:5D:8F:A1:81:1D:34:1F:41:24:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/34352e3139312e35322e302f32322d3234203d3e20323635363139.roa
Signing time:             Tue 05 Mar 2024 18:01:43 +0000
ROA not before:           Tue 05 Mar 2024 17:56:43 +0000
ROA not after:            Tue 04 Mar 2025 18:01:43 +0000
asID:                     265619
IP address blocks:        45.191.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1c:f3:08:1e:a0:ad:03:ec:87:ee:44:88:b6:ac:9f:bc:c4:2f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED4E93B0781CF3EE4775D8FA1811D341F41248D
        Validity
            Not Before: Mar  5 17:56:43 2024 GMT
            Not After : Mar  4 18:01:43 2025 GMT
        Subject: CN=529A3A84898F898AAF01E1DC1771C9C18AA6038B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:ee:c5:b3:f6:ab:c5:53:c6:65:0e:2f:64:
                    d8:22:6f:2e:38:d1:e1:59:59:bf:2d:f4:fc:e8:14:
                    03:6a:f9:a5:e3:13:03:1b:31:cb:57:13:c6:78:38:
                    aa:ac:ac:2e:e5:4c:0d:40:99:0e:09:eb:26:79:bb:
                    2f:46:67:b4:6a:86:01:9f:1d:74:b6:70:00:de:ab:
                    40:44:7d:a1:72:e5:0d:1c:40:02:55:03:9e:e3:6c:
                    9e:76:c3:8d:0a:cc:e1:ac:aa:35:67:b0:d0:79:e8:
                    4a:79:48:eb:95:cb:d1:30:78:44:de:65:a1:31:3d:
                    65:8c:98:1c:13:4b:a9:bf:20:17:ef:ce:9a:c0:bc:
                    f2:05:4d:da:5b:33:b5:ef:6a:9c:37:ea:e8:7a:40:
                    da:3d:d5:62:10:d7:13:d1:9e:e8:82:90:65:2f:bd:
                    cd:82:b3:2a:f4:b7:7e:20:0d:3c:63:56:23:6a:12:
                    3c:c3:c5:2e:9e:b0:03:54:f3:83:d2:77:4b:b0:93:
                    5d:07:d0:8e:83:5b:39:68:97:16:72:67:b2:80:bd:
                    f9:27:91:5e:7a:65:25:5b:61:52:83:bc:fd:66:93:
                    09:a0:52:eb:59:27:ea:d3:24:9f:f1:fd:01:ed:c3:
                    8b:3a:ff:10:f4:a7:43:e4:22:50:91:60:a2:9e:1a:
                    ce:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9A:3A:84:89:8F:89:8A:AF:01:E1:DC:17:71:C9:C1:8A:A6:03:8B
            X509v3 Authority Key Identifier:
                keyid:FE:D4:E9:3B:07:81:CF:3E:E4:77:5D:8F:A1:81:1D:34:1F:41:24:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FED4E93B0781CF3EE4775D8FA1811D341F41248D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FA56F1A2AB475731C6808EB2C038B6436A966AD7725F61CA9BF5A450F8B42BF/0/34352e3139312e35322e302f32322d3234203d3e20323635363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:14:84:32:eb:ff:e0:93:56:32:e0:81:0f:65:46:26:87:c3:
         d2:d3:00:f3:83:1d:38:7e:f9:fd:1d:53:9a:bb:32:e0:0b:9f:
         52:6b:0c:f2:26:0e:f5:3d:b7:eb:23:fe:d8:71:94:15:c9:63:
         ae:eb:87:8a:c9:3a:0e:04:c0:f6:7c:79:3a:8e:53:ba:8b:5f:
         2a:14:c0:a3:d7:48:5b:3d:3c:d4:12:45:25:76:c4:2d:33:f9:
         cd:21:bd:1e:59:fc:98:c5:94:63:92:0a:67:d7:12:2d:0e:08:
         92:7c:c9:97:ea:fa:f5:1f:91:c4:1a:dc:d8:95:41:9e:f4:b1:
         8d:6e:72:92:f8:83:74:0e:30:28:de:44:1a:0c:3b:60:9c:ad:
         62:ee:2d:cc:5a:e1:1f:5e:d8:43:50:3d:c3:b5:50:b5:1d:39:
         77:43:95:f6:f5:4c:67:b3:39:6d:09:06:dc:4c:d3:04:0c:c1:
         b3:a4:45:8a:28:a4:ef:1f:19:4a:e6:f2:77:19:af:61:00:7b:
         b6:26:63:33:33:b8:8e:ba:3d:cd:84:18:91:7b:24:e1:fa:90:
         58:e7:d1:94:59:33:f2:99:3a:a7:cf:42:4a:83:5b:9c:52:d5:
         97:14:01:71:92:44:b4:7f:8d:93:d9:5e:6e:0d:e0:80:90:11:
         c6:6b:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org