Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/34352e352e3136302e302f32332d3233203d3e20323635363936.roa
File:                     34352e352e3136302e302f32332d3233203d3e20323635363936.roa (raw, json)
Hash identifier:          CvWIuZObgMGTcir31QWim1MO4U/IZqnxjIp1Lsxm/4w=
Subject key identifier:   1A:52:EC:A0:41:6E:A4:CF:3F:70:7B:0F:E8:2C:BB:19:E8:6F:B5:DF
Certificate issuer:       /CN=032C699B92C7B4D5EFBBFF0D4773645B78457A56
Certificate serial:       1B2E0F085AFED62C2C5E042A38DD581509094DCC
Authority key identifier: 03:2C:69:9B:92:C7:B4:D5:EF:BB:FF:0D:47:73:64:5B:78:45:7A:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/34352e352e3136302e302f32332d3233203d3e20323635363936.roa
Signing time:             Tue 05 Mar 2024 18:20:16 +0000
ROA not before:           Tue 05 Mar 2024 18:15:16 +0000
ROA not after:            Tue 04 Mar 2025 18:20:16 +0000
asID:                     265696
IP address blocks:        45.5.160.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2e:0f:08:5a:fe:d6:2c:2c:5e:04:2a:38:dd:58:15:09:09:4d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032C699B92C7B4D5EFBBFF0D4773645B78457A56
        Validity
            Not Before: Mar  5 18:15:16 2024 GMT
            Not After : Mar  4 18:20:16 2025 GMT
        Subject: CN=1A52ECA0416EA4CF3F707B0FE82CBB19E86FB5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:be:2b:30:c1:17:2d:9e:7e:4f:01:6c:9f:
                    90:33:50:c9:69:72:eb:88:1e:59:ed:65:d3:8a:4c:
                    c2:b5:ab:dd:cb:ea:66:fc:2c:63:31:34:12:0e:18:
                    8d:26:22:40:62:86:60:f6:de:e6:c4:00:92:d2:2b:
                    e3:1b:d2:bf:d2:ba:95:a9:a4:c1:7d:f6:19:a3:eb:
                    cf:fa:93:ab:fb:62:e7:2c:b0:94:65:79:1b:0c:a4:
                    28:12:0a:62:43:52:19:2f:8b:3c:ef:b0:dc:5a:97:
                    dc:89:4e:a1:c2:09:e7:fa:35:52:fb:04:70:ef:e6:
                    6e:21:ae:08:9e:fc:9d:c9:df:9c:ac:ed:fd:15:6b:
                    91:91:53:43:45:2a:93:34:1b:da:d0:0f:5b:9b:86:
                    d9:ac:08:38:6e:e6:4a:27:67:e4:0d:8a:ba:ea:aa:
                    54:12:88:27:18:70:42:4c:87:a0:31:12:0b:b3:f0:
                    3a:37:89:e8:2c:ca:fc:0d:53:15:f9:34:79:8e:a0:
                    e0:41:fa:ad:40:7d:94:99:6e:30:06:18:c4:31:bf:
                    4d:c2:66:61:3f:7a:f8:90:04:e7:9e:6a:8c:17:59:
                    12:d4:71:64:dd:6b:9d:11:99:fe:eb:9f:e0:44:f0:
                    5b:60:86:7f:49:38:7b:69:21:43:24:f3:82:74:66:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:52:EC:A0:41:6E:A4:CF:3F:70:7B:0F:E8:2C:BB:19:E8:6F:B5:DF
            X509v3 Authority Key Identifier:
                keyid:03:2C:69:9B:92:C7:B4:D5:EF:BB:FF:0D:47:73:64:5B:78:45:7A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/032C699B92C7B4D5EFBBFF0D4773645B78457A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46E793FAB0BDC04DABE00C31BBF8FBB0F090259D24FFE6C993E7EC6FA20946A6/0/34352e352e3136302e302f32332d3233203d3e20323635363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:a4:e9:8c:47:19:f9:a6:a0:6b:99:d7:84:d4:da:13:9d:
         b8:a7:f8:3d:95:3a:f5:fc:01:4d:b0:7e:19:16:ed:e7:40:54:
         af:b0:81:ef:b9:09:d0:d9:8b:42:02:89:0a:89:f6:1e:2b:48:
         37:d3:ca:47:ce:ac:34:ce:ec:af:e6:25:23:84:44:24:58:54:
         e6:9f:d8:c4:4a:dc:f9:53:a6:44:4b:0a:fe:2d:40:a0:f6:5c:
         4e:fa:82:62:d1:2c:e6:93:f9:38:6b:d7:bb:85:a0:b1:88:b5:
         89:5c:b5:34:77:59:aa:9f:29:4e:7c:88:40:82:38:e8:8c:70:
         90:41:4c:48:57:57:09:f7:cd:ba:77:fe:fb:34:5f:9b:3c:e3:
         79:55:ea:72:aa:a7:5f:40:5b:d0:17:b6:64:7e:c9:42:7a:12:
         ae:0b:d0:4b:1d:39:59:b9:9c:08:ae:5e:e4:8d:76:fa:de:7a:
         2b:63:b4:1f:52:e9:ba:93:cf:45:83:81:48:0e:a7:07:a1:29:
         9c:0b:a9:75:20:a8:7c:06:f9:8d:5f:ac:63:2f:fd:93:34:85:
         da:3d:e7:07:3b:5c:53:ea:70:cf:29:08:85:f0:1f:04:a1:be:
         2b:ae:09:67:12:2c:5c:de:12:7a:2b:fe:40:cd:ed:be:1a:2b:
         2d:66:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org