Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e34342e302f32342d3234203d3e20323639373432.roa
File:                     34352e3138302e34342e302f32342d3234203d3e20323639373432.roa (raw, json)
Hash identifier:          yk46Sq9XCOmczA07hKbJXsLq4BJoQN6WcgRas2o20Ew=
Subject key identifier:   C3:19:6D:D4:40:D2:01:03:34:C7:25:4C:89:4F:62:0A:FB:8F:00:F5
Certificate issuer:       /CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
Certificate serial:       7C0F77E8690F9F5A87A6CEEAE2088954CDEAB8C4
Authority key identifier: C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e34342e302f32342d3234203d3e20323639373432.roa
Signing time:             Tue 05 Mar 2024 17:44:19 +0000
ROA not before:           Tue 05 Mar 2024 17:39:19 +0000
ROA not after:            Tue 04 Mar 2025 17:44:19 +0000
asID:                     269742
IP address blocks:        45.180.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:77:e8:69:0f:9f:5a:87:a6:ce:ea:e2:08:89:54:cd:ea:b8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
        Validity
            Not Before: Mar  5 17:39:19 2024 GMT
            Not After : Mar  4 17:44:19 2025 GMT
        Subject: CN=C3196DD440D2010334C7254C894F620AFB8F00F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:2c:96:99:76:48:c5:55:b9:a3:f3:04:cd:
                    8a:96:aa:bf:18:b9:34:bf:51:94:93:65:ff:fb:79:
                    02:c1:c5:6b:c9:47:3f:b1:a7:69:40:82:ce:8d:1c:
                    28:d5:20:c5:27:0d:db:bc:c0:90:85:cc:5c:c2:4e:
                    6b:f9:dd:60:7c:9f:2b:92:a7:c2:bd:45:66:f3:04:
                    28:a6:18:d0:fb:41:a1:dc:39:d9:5e:01:61:b6:ae:
                    9e:7b:f2:03:e4:72:5b:8c:e2:a9:df:ce:b1:df:14:
                    b1:71:a1:c5:15:85:d2:7d:79:4f:ed:cd:03:13:d8:
                    65:9f:c7:3b:0b:74:e2:28:a6:55:07:87:5e:41:f7:
                    f7:ff:42:9b:5b:7f:b6:7d:20:f0:e3:0d:3e:32:1a:
                    67:07:bf:1b:a1:ee:87:36:b6:04:8f:1b:b7:7f:07:
                    40:ea:b4:2c:40:0c:41:13:9e:b8:e6:a8:f3:fc:8b:
                    26:ba:1d:66:02:a6:13:52:1f:d4:66:a8:7c:6c:7c:
                    b8:3c:e4:43:a1:40:a8:72:5c:17:09:4a:3c:bd:8a:
                    3e:39:6a:84:f8:9d:c2:d2:45:30:bf:29:8d:ed:4f:
                    8b:e7:6c:4b:da:ac:f2:81:e9:54:f2:71:ce:60:65:
                    9a:06:2b:b6:3a:63:c0:e3:30:e3:45:1d:2e:53:0a:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:19:6D:D4:40:D2:01:03:34:C7:25:4C:89:4F:62:0A:FB:8F:00:F5
            X509v3 Authority Key Identifier:
                keyid:C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/34352e3138302e34342e302f32342d3234203d3e20323639373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:58:d3:01:c8:52:44:55:16:3f:b8:ba:c5:7c:d4:4a:3c:68:
         58:48:3a:3c:ce:4a:8c:f3:07:7b:c5:a7:64:2b:02:d7:6d:ba:
         42:5d:13:33:57:69:64:2c:4d:35:cc:2c:88:a7:e1:69:f8:7a:
         b3:41:c2:62:86:4b:88:e0:e9:b5:b8:e0:9d:8d:a9:7f:6e:ae:
         c9:0a:1f:dd:a7:58:3d:5e:11:ed:fc:b9:4b:dc:cb:4f:e9:76:
         97:de:14:eb:81:41:da:66:f3:39:90:b3:86:45:d5:c5:ff:b3:
         91:01:f2:94:45:00:5f:f8:05:05:c8:81:ca:5d:c9:c3:6e:55:
         18:1e:30:f0:cb:e8:f9:8f:0a:a3:ba:d3:d0:41:9f:b0:b4:37:
         32:17:8b:fa:17:b3:dc:2e:7e:6e:50:96:a9:aa:ba:2d:21:9e:
         49:ca:64:5b:e4:6d:c3:65:5c:be:a2:7f:e9:56:58:47:0b:16:
         a3:70:7d:b5:03:df:ad:7f:bc:1e:7b:07:26:a3:37:1e:19:61:
         66:89:47:13:ba:65:3e:ef:cb:8f:ae:5e:29:7c:be:33:1a:04:
         30:ae:11:ce:77:60:0a:e6:f9:d5:c2:3f:61:0a:79:95:9e:8e:
         20:84:27:f8:ab:61:5c:63:bf:10:c1:71:62:0a:eb:b9:c0:30:
         2f:14:3b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 04:27:51 2024 by rpki-client on console-ams.rpki-client.org