Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/34352e3138362e3231312e302f32342d3234203d3e20323732383635.roa
File:                     34352e3138362e3231312e302f32342d3234203d3e20323732383635.roa (raw, json)
Hash identifier:          PCVtXE+mIZ8+TVCkLhgGFHKNUvGkOY5nBHbr2sahne4=
Subject key identifier:   46:D2:6C:21:89:94:E3:79:FA:FD:8F:1A:E8:61:72:BB:97:2A:4B:7B
Certificate issuer:       /CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
Certificate serial:       79D3ACADC638422232A5A60C903012986774FE29
Authority key identifier: C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/34352e3138362e3231312e302f32342d3234203d3e20323732383635.roa
Signing time:             Tue 29 Oct 2024 16:40:00 +0000
ROA not before:           Tue 29 Oct 2024 16:35:00 +0000
ROA not after:            Tue 28 Oct 2025 16:40:00 +0000
asID:                     272865
IP address blocks:        45.186.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d3:ac:ad:c6:38:42:22:32:a5:a6:0c:90:30:12:98:67:74:fe:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184
        Validity
            Not Before: Oct 29 16:35:00 2024 GMT
            Not After : Oct 28 16:40:00 2025 GMT
        Subject: CN=46D26C218994E379FAFD8F1AE86172BB972A4B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:fd:09:19:81:ff:13:27:4e:5c:f0:08:e6:
                    42:2a:5a:06:28:3d:08:74:22:bc:17:76:35:6e:6d:
                    3d:96:65:fe:14:bb:4a:ea:f3:b5:97:65:48:12:e9:
                    cd:e7:92:d8:c9:1d:f9:c8:b7:3e:39:ef:a7:16:6d:
                    b5:23:eb:c5:63:31:51:6c:7c:f3:d5:e2:30:13:7c:
                    2b:1d:35:45:0f:cb:26:de:42:58:70:de:02:84:5d:
                    b3:4d:76:7e:2f:bc:82:53:74:cf:e7:3d:08:34:9b:
                    6e:60:98:0f:13:84:6b:4d:c1:b2:d9:59:64:0d:c6:
                    f3:69:d2:80:cb:16:50:60:55:cf:6c:c5:cb:9b:04:
                    9b:e2:dd:d1:01:5b:b5:39:83:54:28:00:14:b6:24:
                    5d:79:5f:9c:cb:49:61:a3:09:80:9c:bd:93:ae:36:
                    cc:10:d2:12:6c:bb:33:2f:ce:bd:13:2d:f4:cd:98:
                    ee:98:e8:6f:b6:98:6c:ae:c3:d9:83:fc:29:61:17:
                    17:2e:1f:e5:95:17:65:b4:d5:ea:89:d2:97:2d:00:
                    b5:75:41:d3:3c:1b:e3:e3:78:16:11:99:01:ee:77:
                    04:77:49:f2:10:a9:14:d5:03:5a:2c:5e:3a:d2:6a:
                    6f:6d:ca:0c:48:01:1b:6f:1a:a2:f3:02:14:93:8b:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D2:6C:21:89:94:E3:79:FA:FD:8F:1A:E8:61:72:BB:97:2A:4B:7B
            X509v3 Authority Key Identifier:
                keyid:C4:F3:D6:A9:3E:D3:92:00:B7:BE:0E:7D:A2:87:7B:FE:BD:30:41:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4F3D6A93ED39200B7BE0E7DA2877BFEBD304184.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52214818C59A13029495CE71BF9E834CE46B03E04DBBAEB14C1CD6CD56E1968E/0/34352e3138362e3231312e302f32342d3234203d3e20323732383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:2b:fa:be:ad:63:6e:35:4f:64:45:5f:d4:1f:98:02:41:91:
         3c:32:84:c7:04:79:9c:ab:46:d7:6d:91:09:f9:f6:c4:25:9e:
         62:9f:3c:da:14:40:c1:86:3e:7e:0b:76:89:02:13:23:cc:ae:
         39:f4:a6:47:1b:f2:b7:20:04:87:4f:c0:98:47:d6:8a:89:33:
         31:aa:59:88:20:67:55:9c:20:33:6c:7e:d1:09:0e:82:77:63:
         ea:81:8c:a1:35:ab:19:3c:2a:4c:ed:de:af:eb:1b:9b:d2:76:
         42:e1:7d:71:12:4c:ee:a8:08:f1:5b:30:c4:56:5f:43:7e:cf:
         41:15:de:93:9f:42:fe:74:42:1e:2d:a2:0f:84:29:76:7f:e4:
         ed:56:ec:83:65:9c:55:68:98:69:a4:13:30:80:dd:92:d4:99:
         cc:21:64:23:25:0e:37:04:6d:04:57:b7:77:9f:19:b1:be:86:
         08:f4:02:19:99:40:4b:18:7e:d1:d8:8d:b6:6a:89:d9:5a:ac:
         52:39:1a:18:45:ba:2f:29:8a:91:71:58:0c:bb:34:75:cf:24:
         10:0c:67:81:79:a9:8a:3f:07:d9:3b:2e:6c:e2:39:b0:4f:7b:
         d3:f5:3d:b1:ae:5c:14:51:80:dd:3f:24:cf:0a:94:79:bc:fd:
         a2:de:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org