Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e20313339323335.roa
File:                     34352e3137302e3235342e302f32342d3234203d3e20313339323335.roa (raw, json)
Hash identifier:          V84lgUStg3638iAEB40Gt4F9hI/2qSTBlbEeLa7b19Q=
Subject key identifier:   5F:C1:69:8F:1C:25:6C:41:0A:FA:48:E9:A6:63:79:51:7A:43:61:D0
Certificate issuer:       /CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
Certificate serial:       49BAF091AD2BA7CAD1524F32F2FABD123FAC2CBB
Authority key identifier: 6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e20313339323335.roa
Signing time:             Tue 05 Mar 2024 18:18:24 +0000
ROA not before:           Tue 05 Mar 2024 18:13:24 +0000
ROA not after:            Tue 04 Mar 2025 18:18:24 +0000
asID:                     139235
IP address blocks:        45.170.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ba:f0:91:ad:2b:a7:ca:d1:52:4f:32:f2:fa:bd:12:3f:ac:2c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A86E783E5047079A17A5B8082BB89DADBE252A6
        Validity
            Not Before: Mar  5 18:13:24 2024 GMT
            Not After : Mar  4 18:18:24 2025 GMT
        Subject: CN=5FC1698F1C256C410AFA48E9A66379517A4361D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:3c:21:5a:7e:41:ea:2f:9e:eb:77:7d:0a:
                    5d:22:27:0d:6a:85:82:de:cb:1e:af:d1:a0:bc:0e:
                    82:74:a2:a5:e3:4e:92:ee:14:15:b1:74:c4:e9:9c:
                    94:b7:39:b3:13:8b:67:cc:1e:12:9b:b2:35:d6:a8:
                    34:c8:e0:2a:35:e9:4f:c4:94:66:fe:22:d5:15:cf:
                    64:6a:9e:3d:4b:63:62:74:51:6c:75:08:8d:c6:48:
                    54:1e:84:db:fa:19:40:33:88:d9:f0:4b:98:a5:59:
                    74:fa:24:2b:a9:cc:d4:7c:57:8e:0e:b1:87:45:66:
                    6c:11:cd:b5:bc:31:f3:34:bb:7f:7c:ca:48:02:0f:
                    4b:c1:9a:f9:a3:a6:7f:7f:2a:67:0d:24:43:40:cd:
                    d0:7f:69:d0:ce:b9:b1:80:7d:8c:b4:8f:c8:23:32:
                    ad:22:68:20:83:1e:22:e3:a4:68:3d:17:8d:d9:44:
                    68:96:4f:66:79:b2:96:a2:4f:89:d4:2e:93:f8:65:
                    aa:b6:fd:0a:7e:44:22:8d:3b:56:f1:de:38:f3:14:
                    4e:79:e2:09:ba:d2:1d:73:76:ef:8c:4b:f9:03:6b:
                    df:d5:a0:f1:31:e6:ac:f1:01:c8:c3:b6:c9:7a:7a:
                    9b:3e:e2:7d:ea:44:9e:90:30:8c:b7:23:0d:25:89:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C1:69:8F:1C:25:6C:41:0A:FA:48:E9:A6:63:79:51:7A:43:61:D0
            X509v3 Authority Key Identifier:
                keyid:6A:86:E7:83:E5:04:70:79:A1:7A:5B:80:82:BB:89:DA:DB:E2:52:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A86E783E5047079A17A5B8082BB89DADBE252A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/517E31B11E9E1C7780B38638B236300BA0D24C0F749E8D819BC14D5DD686EC2A/0/34352e3137302e3235342e302f32342d3234203d3e20313339323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:37:70:1a:a2:b7:bb:0f:74:6f:59:6e:2f:8f:05:d9:fb:9d:
         9b:18:1f:a1:c6:6d:76:33:db:47:3d:22:28:76:85:95:9d:58:
         59:d3:0e:f6:3c:f0:29:c7:97:61:4c:2e:d7:1e:d8:d1:d2:2b:
         26:f8:46:6e:4d:da:a5:53:19:09:38:5d:86:24:e2:9d:d2:3a:
         45:a4:33:81:e6:36:53:34:18:c8:f4:7e:0d:55:a1:28:ed:69:
         08:4a:48:bf:db:0e:f4:31:c6:92:2d:aa:9e:23:63:fd:4b:7e:
         1c:63:e8:b0:7a:05:0f:b1:58:05:1c:5d:6c:ab:33:9f:b3:57:
         9a:43:a1:0f:7c:04:1f:b3:94:6f:5a:30:d1:47:df:82:d4:e5:
         da:58:c3:fb:8c:1f:c9:bc:90:a5:67:61:fe:2a:c2:fa:62:98:
         e6:0c:03:21:42:36:83:10:00:7e:16:10:48:e8:0d:0d:5d:ba:
         a3:55:f5:cb:c9:c6:87:77:86:13:4c:a2:e1:99:71:b8:72:93:
         97:3c:8f:7f:53:9c:2a:71:70:9b:d1:ec:f4:62:ff:66:7a:9c:
         59:5c:d4:c9:56:c5:3a:78:b8:b3:80:82:8b:0a:30:9d:87:3f:
         af:ec:be:01:a4:9f:b0:ee:61:37:ee:fd:a5:9f:5d:2a:01:09:
         fa:8d:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:07:26 2024 by rpki-client on console-fra.rpki-client.org