Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231322e302f32322d3234203d3e20323636383831.roa
File:                     34352e3136302e3231322e302f32322d3234203d3e20323636383831.roa (raw, json)
Hash identifier:          KCA5ViuL3P7qiiL7p6oeXbblPMoR5ZtnTfZJv/iz4Ko=
Subject key identifier:   7F:5E:AF:C1:8D:64:E9:FD:81:D7:9A:28:73:87:2F:47:61:E0:35:9F
Certificate issuer:       /CN=1CA27CA2982478980CC4E39A2BDF1858010F4D9A
Certificate serial:       248C8F2F62A827E85A4A13DEF3E81C2F4C8AA518
Authority key identifier: 1C:A2:7C:A2:98:24:78:98:0C:C4:E3:9A:2B:DF:18:58:01:0F:4D:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CA27CA2982478980CC4E39A2BDF1858010F4D9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231322e302f32322d3234203d3e20323636383831.roa
Signing time:             Tue 05 Mar 2024 17:57:04 +0000
ROA not before:           Tue 05 Mar 2024 17:52:04 +0000
ROA not after:            Tue 04 Mar 2025 17:57:04 +0000
asID:                     266881
IP address blocks:        45.160.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1CA27CA2982478980CC4E39A2BDF1858010F4D9A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1CA27CA2982478980CC4E39A2BDF1858010F4D9A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CA27CA2982478980CC4E39A2BDF1858010F4D9A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8c:8f:2f:62:a8:27:e8:5a:4a:13:de:f3:e8:1c:2f:4c:8a:a5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CA27CA2982478980CC4E39A2BDF1858010F4D9A
        Validity
            Not Before: Mar  5 17:52:04 2024 GMT
            Not After : Mar  4 17:57:04 2025 GMT
        Subject: CN=7F5EAFC18D64E9FD81D79A2873872F4761E0359F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:9d:39:88:a6:68:5f:76:98:6f:da:5d:33:
                    eb:c9:c5:49:e4:41:e4:89:e9:13:34:c3:af:d1:c4:
                    8a:1b:86:80:06:8d:a3:42:00:bd:3f:00:a8:90:f3:
                    e5:0e:f6:3c:c3:41:f6:3a:2e:ce:ca:34:99:2c:f0:
                    f6:6c:0f:81:54:36:ab:f6:ac:d0:2d:85:9e:e7:b8:
                    3d:c5:55:97:5f:73:8b:73:69:a5:c6:ed:3d:b7:2f:
                    04:c3:fc:05:6d:7e:27:6d:f4:26:e5:1e:67:a2:55:
                    8d:d6:88:87:ea:39:51:ff:c6:cd:e5:a1:6f:ab:84:
                    52:99:69:38:4f:ad:13:76:b2:fc:42:18:e4:fa:ab:
                    f5:a8:07:c2:96:be:e5:cd:72:33:53:95:c0:14:72:
                    9c:68:ab:bb:59:d8:61:2e:44:39:04:10:b3:c4:e5:
                    70:47:94:3f:01:de:53:8c:f3:9e:15:24:eb:7d:c9:
                    e7:19:79:0f:94:a1:2d:f0:a9:bb:68:90:f5:ea:5f:
                    5d:7d:9e:24:63:93:02:4e:56:f8:04:ec:88:e6:dd:
                    4d:97:d7:7a:12:92:8e:3f:45:9e:f1:9d:06:74:e9:
                    5e:ab:19:55:8c:e0:fb:d3:8b:cd:2c:c1:01:0d:39:
                    7f:30:4a:29:09:c7:cf:ce:29:1f:4e:c1:62:ae:f5:
                    64:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5E:AF:C1:8D:64:E9:FD:81:D7:9A:28:73:87:2F:47:61:E0:35:9F
            X509v3 Authority Key Identifier:
                keyid:1C:A2:7C:A2:98:24:78:98:0C:C4:E3:9A:2B:DF:18:58:01:0F:4D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/1CA27CA2982478980CC4E39A2BDF1858010F4D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1CA27CA2982478980CC4E39A2BDF1858010F4D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2AF290336ECE0C206498F096A586CDB3954C297CAD5DBA660720FCFCB8A12E24/0/34352e3136302e3231322e302f32322d3234203d3e20323636383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:19:61:0a:02:ca:45:2c:11:8a:99:5e:c4:4a:14:b0:dc:eb:
         46:7c:b0:16:31:90:e0:65:a4:e4:40:a9:5b:2f:8f:a9:ca:e6:
         33:a1:69:76:17:40:c2:28:91:e0:65:73:ea:de:96:d2:ef:17:
         ae:5a:8b:4b:6a:9e:ce:b6:36:d1:b5:fb:5d:65:bd:f5:37:c1:
         91:e9:71:73:ce:65:1a:1f:ab:2e:4a:2e:dc:5a:d3:03:ad:43:
         4d:0e:74:f9:83:92:40:12:d3:7a:46:83:0e:4e:6c:12:84:62:
         52:6c:64:9b:be:a0:64:4c:13:c5:b1:2d:3e:eb:96:81:44:05:
         e1:63:9d:a3:df:22:59:81:98:cf:db:6d:d6:bd:bc:73:53:8d:
         9b:1a:eb:fc:ce:3a:1f:08:83:6e:33:2a:7a:e5:6d:7b:15:13:
         a9:2c:18:25:93:ea:11:b2:41:e5:e5:59:c9:00:88:be:b8:05:
         a3:79:56:b5:14:a3:bf:90:6e:a3:56:21:5d:78:47:7e:a9:b4:
         c7:a3:1f:58:6e:46:3e:39:d3:d4:1a:7a:b2:a3:15:d2:0e:da:
         0c:ec:b0:d4:78:61:80:98:69:69:45:32:d6:be:8f:a1:e0:54:
         a0:1c:15:42:58:70:d4:29:7b:53:77:f1:ad:84:64:c8:49:5d:
         af:50:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org