Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa
File:                     34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa (raw, json)
Hash identifier:          3OjsiLzwuFvtGYQFbIwZcRp/EHunAf6sng65hK+bdBc=
Subject key identifier:   85:1E:CE:09:0A:24:D9:10:CE:9F:58:64:CE:BA:CE:52:48:DF:D8:6E
Certificate issuer:       /CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
Certificate serial:       53AEEB2BBADD3E2501A2E7FE2BB7ABDB033B1453
Authority key identifier: C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa
Signing time:             Tue 05 Mar 2024 17:48:49 +0000
ROA not before:           Tue 05 Mar 2024 17:43:49 +0000
ROA not after:            Tue 04 Mar 2025 17:48:49 +0000
asID:                     267883
IP address blocks:        45.177.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ae:eb:2b:ba:dd:3e:25:01:a2:e7:fe:2b:b7:ab:db:03:3b:14:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
        Validity
            Not Before: Mar  5 17:43:49 2024 GMT
            Not After : Mar  4 17:48:49 2025 GMT
        Subject: CN=851ECE090A24D910CE9F5864CEBACE5248DFD86E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:be:ea:82:b2:72:93:80:13:6e:be:56:9e:
                    ea:85:8d:5f:e3:0e:a3:3f:92:35:48:66:c7:e2:86:
                    89:54:ea:a4:08:e2:6a:ed:81:1a:4f:6b:d9:15:0b:
                    02:5a:a9:e9:7d:fe:42:c2:d6:b9:a0:54:af:6e:05:
                    86:5b:0d:1d:72:fb:84:74:33:b9:48:6b:7a:42:b3:
                    63:72:63:ca:7d:de:7e:e6:8d:19:37:b5:78:5f:70:
                    a5:0e:4d:68:f7:24:16:55:79:18:93:e7:77:14:f6:
                    3e:98:cf:ba:91:ba:e4:47:fe:be:c6:10:e6:28:0b:
                    d5:4a:28:ed:6f:0f:4a:8b:0b:37:2a:a5:2d:e5:2d:
                    35:f9:71:02:3c:e0:a4:de:a4:16:94:50:23:47:ce:
                    41:11:86:5f:27:25:f4:cf:69:b6:69:3c:01:0f:a9:
                    a4:8c:7f:74:b5:d5:7c:98:9d:aa:61:49:2d:92:66:
                    43:05:57:43:5d:83:b0:fe:b5:69:71:dc:cd:6c:fd:
                    f8:73:d0:36:87:9c:45:bd:c3:13:c1:ff:14:c7:d2:
                    e4:0c:32:4e:68:e5:73:bc:b7:97:0a:df:ff:f0:51:
                    e6:3b:e3:aa:17:6a:41:0f:21:a0:dc:ca:28:39:82:
                    7f:c9:c4:32:7b:f6:46:fb:b5:1b:e4:4f:8f:0e:2f:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1E:CE:09:0A:24:D9:10:CE:9F:58:64:CE:BA:CE:52:48:DF:D8:6E
            X509v3 Authority Key Identifier:
                keyid:C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:81:93:cc:1b:75:ed:b5:5a:d4:cb:a3:16:fe:77:ba:1d:
         45:2c:63:7a:76:3a:65:06:1f:71:fc:e8:e0:3a:e1:4b:a7:95:
         68:0d:7f:5c:47:53:8b:97:75:ac:36:cd:7d:70:96:a8:eb:be:
         04:f4:f6:06:25:49:d0:05:47:d0:8c:c1:80:eb:61:1e:88:85:
         f7:1b:54:ef:f3:0b:0a:aa:60:3e:1f:ca:03:d9:4f:e9:58:49:
         ed:bf:85:2d:1d:c0:0d:eb:b5:83:63:2a:3b:ce:40:8d:36:b7:
         15:40:de:25:26:eb:f1:96:35:a1:7b:ac:fb:6d:40:ff:8f:c8:
         83:bc:d6:ac:91:4c:fb:c0:49:99:bc:7d:8a:a5:08:6d:ca:18:
         72:24:8b:38:65:cf:d7:5c:a5:44:3f:3a:cb:eb:6e:e7:5f:e4:
         34:9a:d3:c2:e0:73:a6:f7:12:26:b3:12:9c:21:d7:c1:ac:4a:
         21:de:57:1c:22:50:d4:ef:50:b1:84:69:9a:b7:ec:e3:bc:76:
         66:60:5d:6b:19:fa:3a:b5:8f:b4:31:75:89:8c:c4:bf:9e:bc:
         c7:27:48:35:69:62:c6:1f:29:95:6e:7d:d1:45:69:f4:2e:45:
         33:37:d2:d1:b5:5f:2a:7e:d7:09:ef:39:e0:69:e9:f6:b4:d1:
         a7:53:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org