Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34322e302f32342d3234203d3e203233323433.roa
File:                     34352e3232392e34322e302f32342d3234203d3e203233323433.roa (raw, json)
Hash identifier:          /n1TnACZhEa8PaWnJu5ogdw6DOjFZ3iDoDo7QLNypwo=
Subject key identifier:   30:87:80:9C:3B:76:37:6D:AA:7B:37:DA:3E:2A:8D:3C:78:43:4B:C5
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       7C07857AC5590221EF95F644917D51D7FA3F6C51
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34322e302f32342d3234203d3e203233323433.roa
Signing time:             Tue 05 Mar 2024 17:56:05 +0000
ROA not before:           Tue 05 Mar 2024 17:51:05 +0000
ROA not after:            Tue 04 Mar 2025 17:56:05 +0000
asID:                     23243
IP address blocks:        45.229.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl
                          rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:07:85:7a:c5:59:02:21:ef:95:f6:44:91:7d:51:d7:fa:3f:6c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Mar  5 17:51:05 2024 GMT
            Not After : Mar  4 17:56:05 2025 GMT
        Subject: CN=3087809C3B76376DAA7B37DA3E2A8D3C78434BC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:12:f5:40:b9:d6:5e:56:db:f6:75:1e:b4:
                    e9:18:78:08:80:ae:3f:83:8f:4f:5a:01:6d:e5:b6:
                    f8:f8:62:37:0b:26:60:77:a3:23:55:e4:b5:1c:0c:
                    49:e7:b4:b0:ba:4c:19:7b:2d:8c:2f:0b:9f:74:51:
                    92:62:0e:80:d7:54:cc:35:93:19:1d:e1:cf:4a:3b:
                    28:a7:75:e7:10:a0:33:83:3e:39:ac:5f:16:28:44:
                    83:e1:1e:a5:48:3e:00:59:38:2d:e1:0b:11:51:d7:
                    89:43:7a:0e:a1:c5:df:7d:14:24:a0:e6:9f:ae:15:
                    98:53:5e:35:b8:6a:15:95:eb:a4:21:ea:f6:86:c4:
                    d5:5d:e7:45:90:32:11:39:d3:dc:b3:7f:a4:b1:93:
                    5e:78:43:a8:1c:c1:a4:92:b4:3b:4a:f6:1d:13:45:
                    fe:d5:85:2b:7d:ad:37:5a:84:cf:5f:90:65:13:a3:
                    30:61:0b:f3:fe:ae:00:31:f3:4f:29:81:e8:e8:77:
                    98:8b:19:6a:da:73:1f:d9:02:2e:27:27:68:53:54:
                    d0:48:8f:3e:d8:e5:12:ef:e7:ad:96:bb:0e:67:77:
                    1b:24:b5:2b:07:3c:ff:ce:f7:8f:86:5a:5f:18:3c:
                    ff:79:e5:13:3b:2d:10:ef:32:f1:2a:49:cb:f0:ea:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:87:80:9C:3B:76:37:6D:AA:7B:37:DA:3E:2A:8D:3C:78:43:4B:C5
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/34352e3232392e34322e302f32342d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:1b:8f:de:a8:a9:36:90:fe:9b:1a:9b:8e:63:01:9f:e4:
         47:b3:aa:59:2e:30:45:7f:ef:94:32:a1:e6:d8:d4:95:84:9d:
         cf:c5:f6:04:96:6b:ae:1a:ee:3b:87:e3:dd:19:2e:7b:09:5d:
         ba:ae:89:34:25:2c:b7:0f:35:f3:8f:d8:7b:e1:9b:2d:4d:9f:
         40:7a:d5:f1:3e:62:c0:5d:e7:8a:7a:95:2c:84:b7:13:50:e8:
         80:78:6f:8c:95:df:71:4a:f0:cb:c6:7b:1d:1a:29:3f:84:4f:
         ff:f2:b5:3f:63:cb:e1:9a:11:d8:ed:f3:04:74:ef:7a:53:da:
         c4:53:c1:ce:cb:ee:02:9d:49:ad:b4:aa:f3:48:e9:ed:36:88:
         76:37:9b:44:f0:7b:87:7e:73:e7:3b:71:91:53:8c:da:78:c0:
         63:d7:2d:fe:b0:13:b7:68:6c:d2:ae:07:09:15:7d:77:5d:ad:
         f4:ad:27:b4:7b:2d:4a:5e:4c:e0:52:38:49:63:cb:82:7f:70:
         46:a8:ce:30:c9:f3:61:c5:e4:ac:ff:0f:d5:d8:c9:b6:44:ef:
         40:3e:84:9d:b4:29:de:84:32:48:be:e4:e3:60:c9:5a:90:bb:
         c1:28:bc:7c:44:f4:f8:10:48:2a:70:ee:36:d2:5f:31:a3:f3:
         a1:42:6a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:57:51 2024 by rpki-client on console-fra.rpki-client.org