Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa
File:                     34352e3138302e36382e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          y6M2XYgw55fIBoMLRFt+fhqeKHONjhbyEe4MwsIjYMY=
Subject key identifier:   83:AC:35:BA:D0:2B:59:05:B3:B9:29:6C:E9:D1:52:8A:28:AF:29:7F
Certificate issuer:       /CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
Certificate serial:       41DDA24791BF4CF885A64953A0C7E87DB6658EEC
Authority key identifier: 12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 05 Mar 2024 18:10:24 +0000
ROA not before:           Tue 05 Mar 2024 18:05:24 +0000
ROA not after:            Tue 04 Mar 2025 18:10:24 +0000
asID:                     61466
IP address blocks:        45.180.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dd:a2:47:91:bf:4c:f8:85:a6:49:53:a0:c7:e8:7d:b6:65:8e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3
        Validity
            Not Before: Mar  5 18:05:24 2024 GMT
            Not After : Mar  4 18:10:24 2025 GMT
        Subject: CN=83AC35BAD02B5905B3B9296CE9D1528A28AF297F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:75:9b:6e:ef:75:60:da:73:81:3b:97:2d:12:
                    5a:89:d4:ee:f3:6a:e0:93:f5:39:6c:64:54:08:bf:
                    bf:3a:2e:dd:ec:26:8b:8c:b2:41:6d:91:f7:b6:33:
                    8b:e1:3a:b5:b0:d6:47:f3:90:65:50:b7:31:27:c1:
                    61:af:d0:a8:19:7c:3a:41:b7:b9:b1:17:02:5d:16:
                    61:ba:db:85:4a:d0:f9:38:e3:82:1c:d0:96:03:b4:
                    a5:af:56:de:31:a8:e6:a7:ce:97:a0:1c:3c:f3:e5:
                    d9:b0:07:b6:1d:a7:b1:a8:ee:f3:91:92:e0:d2:44:
                    9e:68:47:9e:17:34:ab:06:d1:00:29:d6:3a:a4:a6:
                    01:6c:35:d6:e8:f1:69:14:63:7c:0c:c9:6c:96:d3:
                    38:d5:ce:b4:9d:5d:ec:39:7d:f7:1a:f8:1b:df:18:
                    18:84:48:26:09:f8:07:f7:a7:ac:2c:b0:89:ca:87:
                    cf:58:37:f4:ee:22:b0:51:6e:5b:aa:ce:15:0a:66:
                    66:c3:50:e1:eb:ea:08:18:eb:b2:d6:e4:65:92:3c:
                    f9:6d:7c:82:e8:ff:5e:89:2f:72:b2:2d:57:d6:ea:
                    b7:e9:f2:86:cb:9e:5d:47:a3:5c:4f:82:2b:35:d2:
                    0c:51:25:14:44:c6:3c:c9:bf:c2:ed:eb:bb:be:64:
                    3c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:35:BA:D0:2B:59:05:B3:B9:29:6C:E9:D1:52:8A:28:AF:29:7F
            X509v3 Authority Key Identifier:
                keyid:12:CE:84:47:ED:2C:9E:7E:BF:1D:D2:04:16:F4:E9:B1:FD:CF:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12CE8447ED2C9E7EBF1DD20416F4E9B1FDCF0EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34E7B7D9E400AE1ADF3C0321236B437D7338E26EC256774F58E4013A2641DF46/0/34352e3138302e36382e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:4f:93:50:c8:b8:26:2e:ec:d9:9c:b1:91:d9:2c:38:e0:62:
         b8:c4:c4:6c:7d:ab:83:7b:fc:d1:35:10:4e:ea:6b:05:5f:71:
         96:4f:98:54:70:3c:ee:ec:95:ae:6a:4d:fb:a8:ec:6b:87:19:
         00:f5:5e:7a:14:63:4e:6d:d6:71:0c:90:be:92:5b:e8:5f:0d:
         01:44:08:85:1a:9f:cc:08:22:3a:6b:00:91:69:a0:b9:4c:43:
         8f:58:6f:7e:28:8a:7d:6a:b9:98:ff:39:81:a2:1c:c1:70:3f:
         3b:f8:21:d6:55:0d:a9:a9:ad:9f:ed:77:8e:a7:e0:db:b7:1a:
         b6:04:f8:2d:10:b6:70:16:1d:0b:e2:6d:6b:de:b7:36:6a:0b:
         da:7d:94:27:ce:2c:18:bd:25:68:00:48:2e:fd:e0:00:7f:55:
         08:cb:40:2e:50:0a:20:c5:5c:94:49:b6:59:7c:2d:7a:04:4d:
         c7:64:14:f0:e0:6b:c8:89:f1:4e:9b:78:cf:8a:87:8d:4f:ae:
         58:83:15:19:0f:1b:a1:2d:96:fc:38:9c:e6:25:57:77:05:77:
         63:f1:7e:b8:14:9a:6a:99:cf:01:05:a7:94:6a:c7:2c:1d:34:
         f4:83:aa:e6:d6:5a:cb:e2:31:f3:fd:ac:67:44:cb:82:3c:b0:
         92:69:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org