Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/34352e3136312e33322e302f32322d3234203d3e20323636383934.roa
File:                     34352e3136312e33322e302f32322d3234203d3e20323636383934.roa (raw, json)
Hash identifier:          d6uLnWqZLCN+qP5tmKZZIPFdypCn6WcDChQiUOY+prk=
Subject key identifier:   6A:8F:0A:C8:0D:AE:D2:12:24:9C:DD:42:14:60:39:68:62:9C:8E:90
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       5A6F8752A5256FECFF3629B25D9D2EFC39F059A0
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/34352e3136312e33322e302f32322d3234203d3e20323636383934.roa
Signing time:             Tue 05 Mar 2024 18:02:21 +0000
ROA not before:           Tue 05 Mar 2024 17:57:21 +0000
ROA not after:            Tue 04 Mar 2025 18:02:21 +0000
asID:                     266894
IP address blocks:        45.161.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6f:87:52:a5:25:6f:ec:ff:36:29:b2:5d:9d:2e:fc:39:f0:59:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Mar  5 17:57:21 2024 GMT
            Not After : Mar  4 18:02:21 2025 GMT
        Subject: CN=6A8F0AC80DAED212249CDD4214603968629C8E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:85:05:02:f3:17:58:08:7f:d6:89:39:a2:
                    3d:81:74:27:b4:46:93:24:2e:c1:89:bd:70:9d:26:
                    fb:17:44:c5:7e:3e:26:73:20:79:71:86:7f:e8:78:
                    21:0a:b7:6d:11:c8:fd:8a:0d:3d:e5:d1:27:02:a5:
                    43:30:cb:e8:12:a3:c9:e2:aa:cb:ac:8f:bc:29:28:
                    bd:98:5e:db:31:54:5e:df:20:e3:91:82:8a:58:7c:
                    2a:ba:37:ee:0c:bd:40:cc:fb:56:5c:f9:6d:2c:61:
                    36:79:1d:19:d5:4b:78:12:c6:63:1f:44:b9:11:ce:
                    5c:33:c5:ac:7b:c4:31:c8:ba:3f:04:fd:79:af:2e:
                    f6:40:24:d5:4d:02:18:69:c5:25:09:07:e7:25:4c:
                    44:39:5c:6d:f3:ff:1a:92:34:bd:b7:cb:df:c6:8a:
                    e0:af:ac:97:0b:7e:a6:75:49:d8:b1:32:fa:91:cc:
                    2c:d3:10:cf:7b:e5:a7:0f:59:ac:b8:f6:d8:97:02:
                    ed:59:11:41:b8:dc:8b:0e:a5:a8:c4:3b:39:e4:98:
                    ed:a5:fd:1e:e7:fd:10:e2:2f:b9:f9:05:c3:8a:b5:
                    f1:82:c1:3c:85:a2:78:3c:65:ee:4e:c4:32:2c:b3:
                    ed:31:dc:06:30:1c:a4:a8:bf:24:c5:28:b0:f6:27:
                    38:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8F:0A:C8:0D:AE:D2:12:24:9C:DD:42:14:60:39:68:62:9C:8E:90
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/34352e3136312e33322e302f32322d3234203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:ff:eb:33:5a:7f:08:83:a7:36:14:37:bb:af:da:02:e5:
         26:b7:12:69:fa:fc:97:7d:af:b3:a7:04:d3:67:9f:6b:8b:1c:
         22:b2:83:91:bf:29:a7:ea:1a:cc:2f:e3:d4:86:62:c4:6c:fd:
         ab:88:33:8d:f3:4b:f2:d1:27:d1:43:37:3c:08:6e:b0:24:db:
         4e:e8:7f:3b:32:a0:a2:53:70:bb:a5:9f:9e:ae:66:df:39:8e:
         b2:70:54:50:4a:48:02:9c:5d:79:3c:b5:3a:5b:b9:3c:57:b2:
         b5:44:5b:bc:7b:d7:c6:63:01:d7:4c:b8:75:73:30:c9:b6:23:
         f0:cd:4d:f9:c4:ee:d8:7a:58:ea:b1:95:08:3e:08:74:a9:fa:
         df:e2:71:c4:79:66:6a:e2:4b:b0:33:bd:ee:96:6f:8d:f7:64:
         3a:cc:2f:38:00:4d:91:48:b0:c2:3e:5d:d8:dc:06:0c:03:5f:
         f3:09:12:15:63:df:ea:e1:3b:76:64:66:63:1c:07:e0:4f:62:
         d7:d5:ef:2c:c0:a9:1b:5d:30:49:40:3d:d9:10:b5:ce:62:af:
         1a:0c:ce:fc:46:ec:ba:e2:98:c8:00:b3:8d:b3:ab:a0:21:65:
         56:99:b7:bd:a3:28:d8:6a:c3:5f:59:9b:b3:4a:b1:a8:06:53:
         d1:50:0f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:54 2024 by rpki-client on console-fra.rpki-client.org