Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa
File:                     34352e352e36302e302f32322d3234203d3e20323632313834.roa (raw, json)
Hash identifier:          W2vwErtEyn3TMmzpY/rOVwxzlE/9qrgd0rAyiTMTtyM=
Subject key identifier:   82:93:89:5C:0E:18:56:AD:05:B7:D4:27:15:F0:21:F3:C1:C5:04:83
Certificate issuer:       /CN=56CC624428BCED9F377BAC95D562A585D509F1B4
Certificate serial:       4F9A2F745913EDE2F739A19B239B230DA915C233
Authority key identifier: 56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa
Signing time:             Tue 05 Mar 2024 18:13:21 +0000
ROA not before:           Tue 05 Mar 2024 18:08:21 +0000
ROA not after:            Tue 04 Mar 2025 18:13:21 +0000
asID:                     262184
IP address blocks:        45.5.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9a:2f:74:59:13:ed:e2:f7:39:a1:9b:23:9b:23:0d:a9:15:c2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC624428BCED9F377BAC95D562A585D509F1B4
        Validity
            Not Before: Mar  5 18:08:21 2024 GMT
            Not After : Mar  4 18:13:21 2025 GMT
        Subject: CN=8293895C0E1856AD05B7D42715F021F3C1C50483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b9:5d:6e:ea:a8:15:5a:78:3d:09:a1:60:47:
                    f8:f6:70:5e:ce:8f:72:88:17:06:06:72:5d:22:05:
                    4f:33:90:11:5c:ed:47:d1:3d:ec:d4:7c:92:69:ef:
                    53:6b:52:4f:8d:7c:97:ad:0e:6f:ab:06:af:0d:bb:
                    b9:a0:09:a0:75:b9:72:95:76:3d:61:79:ad:d3:ee:
                    72:55:23:14:2e:0b:6e:d8:42:85:71:3b:9c:37:44:
                    cc:45:23:dd:a6:2c:dc:00:b1:9d:cc:9d:4b:4a:36:
                    38:33:61:92:32:85:12:02:50:3a:b1:ce:24:5d:df:
                    7d:74:d8:bb:fe:2f:64:9f:62:a4:be:eb:6d:04:38:
                    75:34:81:44:74:e7:65:3c:5f:d8:36:64:aa:37:64:
                    5f:d1:13:df:e8:9f:fe:07:0c:f2:2e:35:60:c8:cc:
                    22:2b:75:40:fa:f1:05:89:3b:85:6d:8b:4b:cd:b6:
                    f8:18:01:da:de:6c:3d:06:5c:01:82:86:9d:71:0e:
                    ea:c9:95:e4:62:fb:2d:1b:79:77:67:22:ae:13:ed:
                    f4:ba:be:59:56:94:53:89:5f:d2:ca:27:f6:33:e8:
                    c7:36:8d:4e:77:b1:3b:bf:92:38:1d:3b:d6:11:f0:
                    a8:a6:1f:33:a8:91:65:ff:9a:bf:d9:ac:a1:b3:a5:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:93:89:5C:0E:18:56:AD:05:B7:D4:27:15:F0:21:F3:C1:C5:04:83
            X509v3 Authority Key Identifier:
                keyid:56:CC:62:44:28:BC:ED:9F:37:7B:AC:95:D5:62:A5:85:D5:09:F1:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/56CC624428BCED9F377BAC95D562A585D509F1B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56CC624428BCED9F377BAC95D562A585D509F1B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDE3AF68B1A87E79458AA6D1B175E1357B89802F0F2404ECD7C130E77A36FF5/0/34352e352e36302e302f32322d3234203d3e20323632313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:19:46:0a:33:8b:63:cc:20:67:e1:8f:d5:19:82:f1:14:
         bb:fb:d7:d7:e7:fe:32:ce:50:b1:bf:00:eb:94:29:e1:a3:21:
         0e:63:59:ca:e0:a1:5e:a0:da:e7:64:1d:5d:85:65:a6:89:7b:
         92:aa:b6:07:66:4d:76:08:c9:89:c1:17:4c:61:bd:5e:71:12:
         e5:ca:f7:d0:27:f3:fd:c5:fa:c5:d6:ab:d3:8d:38:e6:c6:be:
         1d:d8:f7:c0:a0:f6:26:f5:fe:6c:fd:53:89:7a:16:d7:f4:2d:
         7c:04:e8:1e:08:01:78:17:5b:39:0e:57:de:ca:3c:55:b8:d6:
         01:b3:f5:25:a3:5b:89:63:f2:99:21:f6:7b:6e:58:4f:11:ab:
         f8:e6:bd:ee:98:a2:3a:ab:81:f2:2f:6d:1d:88:63:25:4b:18:
         18:42:f8:a9:ac:7d:f1:89:7a:c9:9f:04:37:8a:35:ea:30:30:
         67:72:3c:5b:15:58:d0:60:ec:dd:d2:f4:e8:6c:aa:d5:2c:ac:
         75:13:c6:e0:5c:24:73:b2:9a:a0:10:01:b9:c5:2e:25:bc:6a:
         13:11:5b:05:f0:a6:fc:6e:12:03:2e:4e:cc:aa:9e:da:58:97:
         aa:91:b5:fe:29:ec:01:c1:b8:e3:b6:7f:fe:39:74:2c:ca:4f:
         d5:8a:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org