Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/34352e3138312e3132382e302f32322d3232203d3e20323634373635.roa
File:                     34352e3138312e3132382e302f32322d3232203d3e20323634373635.roa (raw, json)
Hash identifier:          3gtIWMI4zJLxo3NpRrUQbwe2T/Jd4gOmn8zEDJKz7AQ=
Subject key identifier:   81:11:4D:4C:38:D4:CD:76:8C:21:32:FE:11:7E:D4:52:39:69:C2:6E
Certificate issuer:       /CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
Certificate serial:       3C1E9202C37DD1D07602D01BF205315145075C9F
Authority key identifier: D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/34352e3138312e3132382e302f32322d3232203d3e20323634373635.roa
Signing time:             Thu 06 Jun 2024 01:05:01 +0000
ROA not before:           Thu 06 Jun 2024 01:00:01 +0000
ROA not after:            Thu 05 Jun 2025 01:05:01 +0000
asID:                     264765
IP address blocks:        45.181.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:1e:92:02:c3:7d:d1:d0:76:02:d0:1b:f2:05:31:51:45:07:5c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
        Validity
            Not Before: Jun  6 01:00:01 2024 GMT
            Not After : Jun  5 01:05:01 2025 GMT
        Subject: CN=81114D4C38D4CD768C2132FE117ED4523969C26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7a:a1:c0:c3:47:54:22:6b:59:6a:d3:35:ab:
                    02:37:b3:58:eb:ac:be:56:50:f7:ca:af:8c:11:f4:
                    9e:7c:bb:e6:ac:65:5b:17:ef:4f:f6:1f:08:28:a5:
                    87:2d:cc:01:71:02:ac:cc:3f:a2:75:08:64:52:d5:
                    3b:6c:8b:e9:dc:b2:31:e0:3a:12:4d:a8:ec:cc:61:
                    87:e5:c1:b4:ee:93:73:07:55:e1:f9:54:81:1c:52:
                    8d:5b:48:c6:e7:68:db:4f:db:ec:02:72:96:37:6c:
                    89:b3:d5:20:db:ff:03:17:d1:a3:1b:3b:a1:ae:a7:
                    6c:10:14:7c:d6:3b:70:de:05:07:c3:98:79:9f:3a:
                    66:8a:0d:dd:8c:03:28:90:ff:6c:51:90:fc:eb:5c:
                    a1:7e:16:dd:07:53:b0:b5:43:cf:b9:a4:ca:fb:64:
                    ce:84:73:74:78:fb:ac:71:e8:1b:7b:7b:8d:01:f5:
                    21:cc:bb:3f:74:5f:8c:d5:97:55:2f:97:07:d2:22:
                    b3:42:26:bf:bc:f2:fb:df:65:33:4e:8b:e4:b8:b4:
                    88:b7:39:1c:cb:41:10:48:17:7c:72:af:11:d6:74:
                    92:5e:cc:0e:46:69:54:74:26:ff:26:aa:2d:dd:3a:
                    95:f9:3d:ca:04:29:38:f6:55:8c:40:55:71:01:ab:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:11:4D:4C:38:D4:CD:76:8C:21:32:FE:11:7E:D4:52:39:69:C2:6E
            X509v3 Authority Key Identifier:
                keyid:D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/34352e3138312e3132382e302f32322d3232203d3e20323634373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:69:af:16:49:63:41:e3:37:d0:2f:65:7d:9d:07:1e:34:c4:
         64:b6:54:2f:42:0a:19:75:8f:d8:9c:07:8b:c4:45:a4:67:b7:
         90:1e:7d:64:7c:b1:49:ac:4c:8e:76:6f:e7:ce:41:7f:9d:54:
         93:3f:44:aa:e1:d8:37:2e:e8:ed:d5:12:96:07:63:ca:9b:c8:
         cd:90:52:56:6e:e1:0d:50:0c:c0:21:41:47:26:9a:48:f8:05:
         45:68:07:ca:45:2c:ef:1d:1f:19:0f:a2:36:be:66:d3:35:ec:
         aa:14:28:1c:4f:98:7a:28:42:8c:48:0a:f1:78:89:90:fb:86:
         35:45:ce:ae:41:ee:6a:de:a2:a1:0d:07:3b:44:4c:bf:28:c0:
         f9:53:f8:c2:49:d6:73:cb:41:81:02:ec:9a:36:48:2b:41:07:
         e2:e3:59:1a:1f:e5:1e:af:4e:1f:09:53:b2:80:78:f0:6c:1b:
         bc:3b:f8:1f:9e:1b:d3:31:9c:77:f6:7d:43:8c:5e:74:49:12:
         cf:95:b0:ff:dd:37:06:58:b1:91:a0:9a:75:20:6a:5d:24:02:
         13:51:10:3d:04:00:01:e9:99:a5:7c:9c:f0:da:27:ed:0e:29:
         e0:30:80:90:b7:5c:64:21:92:2b:c7:9a:d0:9f:7d:6f:66:05:
         c0:4a:8e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:59 2024 by rpki-client on console-fra.rpki-client.org