Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa
File:                     34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa (raw, json)
Hash identifier:          c9gZa2tWnmE99rr+sVfOpaTQCt8OkLr1ubHbLCoUCaY=
Subject key identifier:   EC:AC:50:48:07:A4:04:57:9F:1B:77:99:08:AD:E8:B9:1D:51:B2:99
Certificate issuer:       /CN=6FB215754DD4ED59F894D93863C869DAB31DC0CC
Certificate serial:       242E2C97A54F1E558E937967BCA31AA8AAA04FD7
Authority key identifier: 6F:B2:15:75:4D:D4:ED:59:F8:94:D9:38:63:C8:69:DA:B3:1D:C0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa
Signing time:             Tue 05 Mar 2024 18:11:25 +0000
ROA not before:           Tue 05 Mar 2024 18:06:25 +0000
ROA not after:            Tue 04 Mar 2025 18:11:25 +0000
asID:                     267851
IP address blocks:        45.174.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2e:2c:97:a5:4f:1e:55:8e:93:79:67:bc:a3:1a:a8:aa:a0:4f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB215754DD4ED59F894D93863C869DAB31DC0CC
        Validity
            Not Before: Mar  5 18:06:25 2024 GMT
            Not After : Mar  4 18:11:25 2025 GMT
        Subject: CN=ECAC504807A404579F1B779908ADE8B91D51B299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:b4:02:4c:2a:71:b0:c7:f1:27:55:f3:fc:
                    a2:25:9a:f9:43:98:8a:bb:51:01:cd:ac:97:fa:55:
                    47:dd:08:55:95:44:de:70:e9:5d:e7:32:57:28:74:
                    d3:48:bd:f5:f2:a3:15:7e:ea:55:27:4b:94:4e:74:
                    af:cc:53:87:6a:07:3c:6a:e6:2b:14:84:1d:7f:da:
                    8b:c6:b6:02:cc:83:a0:67:28:a5:b7:be:1e:e3:03:
                    43:2a:63:e8:2b:3d:cd:af:af:f1:41:1b:a3:f5:f5:
                    65:ea:74:ca:76:60:9f:fa:78:c2:d5:6b:5c:d5:02:
                    c5:d4:bd:b9:12:87:66:53:3c:92:c3:b5:00:a1:95:
                    ce:ea:1b:b3:50:85:fd:70:f4:de:eb:e5:6a:ae:1f:
                    ea:8d:23:78:9f:06:4d:49:9c:92:92:a6:17:97:c7:
                    ec:1f:c3:f9:ee:b7:f2:1a:4c:be:41:5d:03:82:cb:
                    6d:e6:82:6f:0b:1b:f5:04:dc:77:97:c2:0b:77:cb:
                    7a:eb:4d:25:2b:c6:91:5a:1f:00:29:dc:d4:94:ea:
                    2e:d2:8a:72:4e:56:32:3e:2a:d7:15:19:bf:8b:8a:
                    43:40:64:67:e8:e0:c5:f3:b4:04:53:8c:5f:b8:9d:
                    1b:e3:e3:56:8f:00:24:9a:3e:04:b5:ec:89:f0:2d:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:50:48:07:A4:04:57:9F:1B:77:99:08:AD:E8:B9:1D:51:B2:99
            X509v3 Authority Key Identifier:
                keyid:6F:B2:15:75:4D:D4:ED:59:F8:94:D9:38:63:C8:69:DA:B3:1D:C0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FB215754DD4ED59F894D93863C869DAB31DC0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4670F6BD1E934FEEEC0E00AE0EBADBB91C25C481783E745C3E47EAA07C9A98B4/0/34352e3137342e3230342e302f32322d3234203d3e20323637383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:fe:0c:39:0b:1b:e6:5b:64:47:85:07:c1:e0:ab:eb:42:01:
         aa:58:7b:92:bc:ec:d5:bb:6e:9b:a0:04:1d:43:fd:4d:ec:b6:
         d7:78:26:ca:3c:53:ee:88:23:5f:f5:1a:0f:43:f4:88:5e:2f:
         e3:d8:71:35:51:74:94:14:6d:c5:d9:ce:d2:39:62:21:10:45:
         b8:e5:d6:c6:ca:80:85:13:a5:53:62:ee:2b:30:74:4a:42:31:
         cf:b5:8e:15:fb:e4:ea:d1:ad:2e:11:db:65:0d:94:e0:31:1c:
         84:30:e6:81:05:4a:87:3a:39:18:43:a5:f7:a2:09:ac:d2:dc:
         c6:b6:16:c0:05:dc:e3:22:d5:8e:03:51:10:81:68:9b:cf:91:
         16:63:52:4d:14:34:4b:9b:2c:cf:51:30:09:2c:f9:25:29:01:
         ee:d5:fb:67:11:2a:9d:46:2b:3a:bc:05:7f:5d:66:b6:64:a9:
         cd:e9:36:93:e4:6b:21:01:6b:89:53:03:01:d6:12:46:8d:ee:
         4f:53:54:9f:42:d0:28:44:3c:58:c0:e2:ba:0c:3f:8a:f8:a5:
         cb:5a:ea:97:b5:cc:1d:92:f5:0d:78:74:39:be:06:58:9f:f6:
         28:b1:20:99:02:69:4c:68:5e:5f:a1:55:07:01:92:85:74:4a:
         02:4c:bc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:24 2024 by rpki-client on console-ams.rpki-client.org