Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138302e302f32332d3233203d3e20323632313931.roa
File:                     34352e352e3138302e302f32332d3233203d3e20323632313931.roa (raw, json)
Hash identifier:          JakSZLCTNFtZQuKh1uz2luZumur52gbRVB4k8PgugH4=
Subject key identifier:   07:9E:2D:97:BA:FA:F1:0A:82:8F:32:62:DE:62:87:00:DE:F3:A8:EC
Certificate issuer:       /CN=D418292B880E84CA0C2BFDA04321A946B3478A05
Certificate serial:       44EC80F56CA447401CEC28E2B81153C7B5791545
Authority key identifier: D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138302e302f32332d3233203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:19:49 +0000
ROA not before:           Tue 05 Mar 2024 18:14:49 +0000
ROA not after:            Tue 04 Mar 2025 18:19:49 +0000
asID:                     262191
IP address blocks:        45.5.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ec:80:f5:6c:a4:47:40:1c:ec:28:e2:b8:11:53:c7:b5:79:15:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D418292B880E84CA0C2BFDA04321A946B3478A05
        Validity
            Not Before: Mar  5 18:14:49 2024 GMT
            Not After : Mar  4 18:19:49 2025 GMT
        Subject: CN=079E2D97BAFAF10A828F3262DE628700DEF3A8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:88:05:b8:86:6a:87:b8:28:f0:3f:7a:93:63:
                    b5:0b:6f:dc:61:f4:b9:8f:af:67:5b:cc:c3:d4:89:
                    19:c4:03:a4:4d:63:04:2c:d3:94:e7:ac:71:14:0b:
                    72:7d:96:94:af:d7:b7:2c:7e:9e:28:09:30:4e:db:
                    1c:a1:59:96:9b:3f:6c:82:65:1a:fa:ac:8b:44:33:
                    35:b7:82:0c:30:c5:53:12:cc:2a:39:a3:7c:c6:f8:
                    14:9f:e6:33:c5:96:9e:f1:57:f6:c6:8f:99:c1:62:
                    e0:a6:b6:b7:9d:e4:70:b8:7a:f3:a3:90:a5:c6:65:
                    c3:58:6d:17:1b:63:b0:ef:30:74:a1:04:f9:3e:b7:
                    18:07:a7:c4:6f:91:6e:cc:32:3f:ad:2d:fa:28:fb:
                    db:b7:08:6b:be:46:e7:af:10:d9:dd:41:46:c1:4e:
                    c5:a6:37:85:00:d8:55:b8:45:f6:3c:b0:8a:77:60:
                    54:00:ae:8e:45:85:ad:42:1c:0b:89:0e:6a:70:81:
                    ff:f0:e3:a5:1f:74:25:fb:ea:86:f4:ab:72:8b:af:
                    8a:a6:60:0c:b5:e7:36:ea:6d:8c:95:49:39:7b:0e:
                    d9:e3:43:25:a5:b9:73:6c:5c:d8:ac:66:14:c4:56:
                    13:f5:7e:3c:42:e0:4c:4f:11:54:e3:99:82:e5:11:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9E:2D:97:BA:FA:F1:0A:82:8F:32:62:DE:62:87:00:DE:F3:A8:EC
            X509v3 Authority Key Identifier:
                keyid:D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138302e302f32332d3233203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:7a:0e:5f:a2:da:2f:24:b7:b1:aa:d5:7e:8e:de:df:09:a6:
         81:5b:4d:a4:9c:bf:4d:09:c5:1a:ec:dd:87:33:0e:16:6b:98:
         65:31:55:6f:2d:3d:21:18:26:84:84:1b:6a:7d:9f:46:a1:a2:
         26:f8:a0:f8:fc:28:2a:31:ad:22:98:fc:99:b0:a3:58:91:07:
         6d:7d:e7:04:ea:32:f1:7a:d8:06:0d:06:56:a5:c1:bd:56:c0:
         09:9f:e0:10:34:d6:7c:0e:a1:62:23:4a:c0:4f:4d:28:26:da:
         ee:1c:e0:fa:66:a1:eb:d1:4c:9d:7e:62:b7:3d:13:61:72:9c:
         c1:14:7f:d2:d4:29:6b:aa:a0:cd:70:68:7e:9e:76:c6:05:51:
         d9:44:be:d8:e4:ee:2d:91:2b:2f:b3:67:6c:18:6e:80:50:71:
         47:26:67:bc:58:ee:73:bc:25:b2:2a:0a:20:63:ee:1b:67:ff:
         73:95:b4:9a:f9:1f:12:68:3a:03:62:62:53:f3:c2:ee:ad:2c:
         ce:7a:dc:77:52:08:6b:09:6b:ce:15:d3:c6:74:6d:ed:b2:86:
         e8:07:dc:7d:f0:6d:1c:60:4e:36:88:53:1e:27:14:56:d7:e5:
         37:5b:cc:39:bd:80:08:46:a8:d1:70:b3:9c:96:28:7b:75:99:
         98:4d:42:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org