Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa
File:                     34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa (raw, json)
Hash identifier:          YoWcYMWl7PYRq5BZ+duYQkoTSrZSip5g0TuJ8AtOQfs=
Subject key identifier:   CC:3E:97:B3:70:87:B0:AF:6E:9D:0E:FF:D9:62:4B:77:A5:04:CA:00
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       69770F0495D137346C07643AC3C93FDE55C21B2D
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa
Signing time:             Tue 05 Mar 2024 18:04:27 +0000
ROA not before:           Tue 05 Mar 2024 17:59:27 +0000
ROA not after:            Tue 04 Mar 2025 18:04:27 +0000
asID:                     267919
IP address blocks:        45.179.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:77:0f:04:95:d1:37:34:6c:07:64:3a:c3:c9:3f:de:55:c2:1b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Mar  5 17:59:27 2024 GMT
            Not After : Mar  4 18:04:27 2025 GMT
        Subject: CN=CC3E97B37087B0AF6E9D0EFFD9624B77A504CA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:93:9b:4a:60:69:44:8f:b0:c6:b5:2e:53:
                    67:d9:4a:08:9f:ae:d6:69:56:98:dc:f2:24:4c:cf:
                    6d:d1:53:2f:bd:b1:92:d2:8f:b3:48:89:4b:09:2f:
                    34:ea:06:1a:12:a5:b6:14:fc:06:c0:92:ae:0f:5c:
                    f1:ef:45:1d:1d:ff:f3:df:20:40:a8:c6:84:42:a7:
                    17:3c:14:b2:23:78:d5:1d:5b:94:99:e6:23:74:55:
                    fd:ac:77:c2:1d:4b:a7:5c:28:3a:b0:5f:d4:da:f3:
                    b1:b2:b5:bc:ea:00:72:1b:6f:35:73:08:e0:e2:b9:
                    95:18:0c:e4:83:76:8c:65:b0:5c:71:6c:7a:6c:6d:
                    59:b2:7c:d8:c7:f0:7b:ca:b9:1a:56:1e:b9:db:3d:
                    62:9b:9c:8f:c9:16:c6:f2:3b:58:fc:83:e7:58:a6:
                    3d:71:e6:91:2c:cb:16:2b:e4:ba:1d:60:6f:68:46:
                    c0:91:be:02:45:cf:98:fe:75:d7:0d:a3:a8:92:2b:
                    68:8e:e7:89:55:8b:29:4a:e4:14:c1:cc:fd:5f:ee:
                    79:3f:11:46:00:58:9c:bb:a9:09:7c:03:d8:77:ab:
                    ea:c1:c6:f1:58:e8:43:3c:ab:43:70:36:10:c2:5b:
                    59:6a:81:9c:25:17:fa:7d:e6:4a:8f:ee:e7:af:57:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3E:97:B3:70:87:B0:AF:6E:9D:0E:FF:D9:62:4B:77:A5:04:CA:00
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:c4:9b:bf:85:ca:bd:1d:6f:4e:90:69:9c:75:60:25:23:f8:
         a1:43:0f:ec:dd:64:38:f7:34:44:3a:b6:5f:1c:7f:77:3f:98:
         01:08:68:f5:27:c7:b6:7d:e4:77:20:a4:c2:84:8a:e3:ad:50:
         ba:b0:14:20:8e:b7:79:7c:66:83:a7:af:7e:8a:34:09:ee:66:
         d5:a2:6e:f5:1a:8e:69:d1:2c:b3:a4:53:54:d2:3e:b0:4b:f7:
         e7:21:b9:21:c2:06:3b:2b:24:ae:73:f5:3c:a3:09:b3:5c:ac:
         47:c7:6b:06:fc:9b:4f:b8:c9:0a:48:ef:fd:c2:03:62:27:51:
         0d:21:69:83:d2:80:9c:c6:41:cf:dd:7b:6a:5a:24:12:47:08:
         f7:54:99:19:9a:6a:07:dd:dd:b0:06:58:a3:fb:3f:1e:33:5d:
         33:8c:66:6a:db:a0:b3:e7:71:71:55:aa:41:5a:c0:44:4c:d3:
         6e:43:4d:f3:6b:31:ce:e0:bf:f6:cf:53:32:5b:ed:eb:54:8d:
         35:51:9b:79:54:c5:01:07:9e:f6:2b:bb:76:68:d0:e5:70:70:
         34:71:b8:36:78:e7:fe:73:93:f6:20:89:fa:ff:48:21:c8:5a:
         eb:d0:63:c5:71:8d:c8:3f:65:e2:ac:c9:7c:b6:94:c7:f1:91:
         d1:be:6c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:36 2024 by rpki-client on console-fra.rpki-client.org