Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa
File:                     34352e362e3234382e302f32312d3232203d3e203238303032.roa (raw, json)
Hash identifier:          mJ51f4rKYDuxu6EA0c8MRksrn0o5HRzaHjTP5+4ytpA=
Subject key identifier:   B5:5A:00:F3:A7:94:21:DC:77:C1:17:87:E2:CB:9C:FA:F6:2C:8D:7B
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       71B0DC2E27C804DBAF73A157D92EC98F290EDA8C
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa
Signing time:             Thu 02 May 2024 17:10:00 +0000
ROA not before:           Thu 02 May 2024 17:05:00 +0000
ROA not after:            Thu 01 May 2025 17:10:00 +0000
asID:                     28002
IP address blocks:        45.6.248.0/21 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b0:dc:2e:27:c8:04:db:af:73:a1:57:d9:2e:c9:8f:29:0e:da:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: May  2 17:05:00 2024 GMT
            Not After : May  1 17:10:00 2025 GMT
        Subject: CN=B55A00F3A79421DC77C11787E2CB9CFAF62C8D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:ad:ea:4d:ea:7c:49:21:ba:5c:a5:45:4e:
                    68:29:a0:5c:be:74:1f:9e:ab:a5:81:03:b8:47:c6:
                    b1:a3:4c:81:3b:4e:2f:5b:1d:a1:3f:4c:2a:cd:c2:
                    4b:64:4e:a8:11:bd:3b:fd:07:0f:de:b2:2d:de:ef:
                    a6:5f:4d:99:bd:98:cb:53:c9:39:55:86:9f:70:76:
                    eb:2e:84:8b:7b:82:12:f2:bc:48:85:1d:21:12:1b:
                    9d:82:7b:e8:7b:41:58:36:f0:e5:a3:98:90:65:d0:
                    d0:c5:a4:6f:b5:0c:38:5c:85:01:11:d7:1a:82:55:
                    e0:02:de:b0:b0:1c:a7:5b:72:28:39:44:64:49:bb:
                    ca:f5:d1:26:03:82:45:57:99:45:9d:27:03:13:89:
                    a0:c0:ba:e7:42:2c:d6:f3:79:0f:7d:25:ee:f5:62:
                    c3:ea:bc:e6:6b:e6:b2:3d:fc:71:f5:e6:ac:f7:c6:
                    4c:61:f6:2c:63:d6:de:04:e0:87:05:d2:21:02:9a:
                    00:c4:a7:2f:40:9e:d1:8d:68:aa:af:d6:b1:e4:09:
                    64:7a:b9:32:ca:f9:7d:92:03:81:6f:03:b4:13:18:
                    e8:0f:4f:6e:bf:9f:c7:e3:eb:7f:ee:e7:db:be:a5:
                    b0:19:13:da:61:fc:10:c1:f5:11:09:52:e0:ec:cb:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5A:00:F3:A7:94:21:DC:77:C1:17:87:E2:CB:9C:FA:F6:2C:8D:7B
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/34352e362e3234382e302f32312d3232203d3e203238303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d1:dd:ae:e6:8f:f0:07:cb:19:7c:46:05:7d:a0:f3:bb:83:ca:
         92:62:9d:14:48:9e:bc:4b:ea:1e:43:9d:82:df:15:5b:33:87:
         4d:16:6a:08:f8:43:6a:17:44:52:92:6b:73:dc:df:ca:b7:32:
         c0:63:1a:85:70:f7:7b:95:71:ed:24:d4:bf:b1:bf:47:59:6b:
         0b:98:bb:b1:6e:37:84:ad:54:18:a8:0a:ea:f2:9b:4c:c5:8c:
         f5:a9:87:37:b4:99:5f:b0:bf:c1:b8:57:b7:6f:10:43:d2:db:
         f4:86:e7:8b:1f:bb:7f:5c:8c:f3:12:6a:41:d1:76:c8:d9:14:
         a8:2f:27:ed:b8:e1:17:ec:51:d0:1b:60:2b:44:94:97:a1:af:
         88:71:80:f1:be:1c:f6:1d:5a:9a:e6:d2:12:74:a9:ad:10:8c:
         c1:f1:08:dc:1d:dc:6d:a7:98:f0:82:74:b6:40:1b:89:dd:70:
         b8:4d:11:a0:32:44:39:7a:fa:ef:38:80:33:64:5b:51:13:c9:
         d9:d4:08:90:05:3a:be:f6:e4:69:fc:d6:cb:7b:65:4a:4d:64:
         bb:fd:4e:c3:36:8b:70:7d:e9:8c:76:68:34:04:58:81:d8:29:
         ad:cf:6b:40:f6:46:af:d0:9b:a5:1e:10:67:88:5d:34:12:07:
         2b:a1:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org