Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3133302e302f32332d3234203d3e20323637383230.roa
File:                     34352e3137342e3133302e302f32332d3234203d3e20323637383230.roa (raw, json)
Hash identifier:          6xGKDzBXD86fSAoggklsdQWVeuEs44wueqp6eHQgxcI=
Subject key identifier:   C6:FE:F5:55:1B:D8:AB:5E:F6:D5:FB:10:82:87:70:E5:EC:BC:25:80
Certificate issuer:       /CN=2C105A8B66A79B278FD2A38A1572477F4D886617
Certificate serial:       72744783017CBDDEC4FAB4C030D522304E1BDDEB
Authority key identifier: 2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3133302e302f32332d3234203d3e20323637383230.roa
Signing time:             Tue 05 Mar 2024 18:21:46 +0000
ROA not before:           Tue 05 Mar 2024 18:16:46 +0000
ROA not after:            Tue 04 Mar 2025 18:21:46 +0000
asID:                     267820
IP address blocks:        45.174.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:74:47:83:01:7c:bd:de:c4:fa:b4:c0:30:d5:22:30:4e:1b:dd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C105A8B66A79B278FD2A38A1572477F4D886617
        Validity
            Not Before: Mar  5 18:16:46 2024 GMT
            Not After : Mar  4 18:21:46 2025 GMT
        Subject: CN=C6FEF5551BD8AB5EF6D5FB10828770E5ECBC2580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:6b:12:f0:a9:13:e3:29:5f:b7:d6:93:c4:
                    dd:98:55:e9:54:58:5d:a5:58:ed:ce:ba:d0:12:5c:
                    a7:08:40:99:ab:da:a5:74:63:b3:2d:59:7d:56:cb:
                    ed:76:27:7f:ca:80:bc:d2:29:f0:b0:db:b6:e6:e8:
                    7f:b8:04:1a:0b:b8:67:da:3e:d2:11:ba:f8:89:3a:
                    99:3d:83:ab:e5:38:4a:1a:a6:41:72:a4:ee:93:56:
                    5a:56:9b:8a:a4:dc:31:a2:1f:e2:60:7e:33:2d:34:
                    96:05:03:6b:2d:ee:4c:e6:a1:80:db:ef:fb:0f:74:
                    bf:d9:bc:a2:3a:77:c0:0f:12:7c:98:5c:76:7a:c1:
                    b1:e7:a4:4b:dc:bf:00:c1:fb:cd:1f:57:30:5c:84:
                    21:a8:93:86:b1:d9:e8:ad:a6:4b:c1:05:3d:6f:b2:
                    38:d0:3e:0d:79:0d:bc:98:ee:ae:3b:86:17:bb:c7:
                    ff:10:4f:18:bc:31:67:ca:00:2e:53:52:1c:e1:6c:
                    60:35:3a:ac:85:f1:25:2b:6b:c1:f6:32:1f:5c:96:
                    69:7a:eb:fe:a0:06:73:de:57:73:9e:48:cf:f4:9a:
                    79:05:71:57:c2:52:2f:66:98:69:08:1b:85:00:df:
                    de:11:75:c8:59:40:c4:12:23:eb:99:1f:d9:99:86:
                    27:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FE:F5:55:1B:D8:AB:5E:F6:D5:FB:10:82:87:70:E5:EC:BC:25:80
            X509v3 Authority Key Identifier:
                keyid:2C:10:5A:8B:66:A7:9B:27:8F:D2:A3:8A:15:72:47:7F:4D:88:66:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/2C105A8B66A79B278FD2A38A1572477F4D886617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C105A8B66A79B278FD2A38A1572477F4D886617.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D9C74732942F64EDC7028E9D7B05FBE3B5F54C5A8BEC145299796788F683309/0/34352e3137342e3133302e302f32332d3234203d3e20323637383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:ce:cd:04:8d:96:9d:c7:53:c1:51:60:a2:79:59:fa:61:
         3c:e9:10:ec:23:af:85:b1:7f:19:82:6f:bc:7f:26:1a:05:b7:
         46:d0:69:3e:e3:4e:99:4d:c9:4d:76:a5:2e:2e:8f:e4:2c:85:
         30:89:e8:bc:33:3b:ea:4d:38:6a:75:bf:53:d9:e6:16:63:7f:
         3a:b0:1f:8c:92:55:eb:1e:8d:85:82:27:94:4b:d9:67:91:ed:
         bb:8b:91:ed:dd:df:03:89:ec:dd:c5:0a:0f:6f:6d:08:51:5d:
         0d:19:98:af:06:ca:e9:ea:52:b2:e3:1e:e6:51:f1:99:1b:66:
         d5:aa:88:fe:fa:90:2d:ed:fd:32:e4:9d:8d:be:de:82:22:8e:
         d7:8b:63:2e:d1:5f:47:93:de:aa:86:b5:32:68:ec:25:79:12:
         b1:82:10:42:1b:24:6c:f0:68:1a:8c:88:dd:8b:86:11:e6:68:
         07:06:fa:91:e5:67:28:8b:87:2f:6a:11:3c:44:61:dd:ea:b2:
         e0:d0:24:39:cc:c0:e4:00:8b:f5:6b:34:e3:96:3c:8c:67:3b:
         62:61:d6:42:4b:c6:cf:a3:9f:50:95:12:3d:d6:2f:75:d4:bd:
         66:05:3d:3f:dc:78:62:6e:06:71:aa:90:e4:c8:ca:65:3e:79:
         4e:1d:e4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:59:50 2024 by rpki-client on console-ams.rpki-client.org