Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230322e302f32342d3234203d3e20323632323135.roa
File:                     34352e3137392e3230322e302f32342d3234203d3e20323632323135.roa (raw, json)
Hash identifier:          DQD7E3lErLtFlvXcbiCBfzlaGxDQJA1Y7l0mLKoCsXw=
Subject key identifier:   18:C5:A9:B8:9D:51:32:EC:E8:0E:0C:DF:74:D9:B9:BC:BA:73:78:AB
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       70A527B561A90D3F13FDC5A6AB199B8D5C800F7C
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230322e302f32342d3234203d3e20323632323135.roa
Signing time:             Wed 05 Jun 2024 00:25:00 +0000
ROA not before:           Wed 05 Jun 2024 00:20:00 +0000
ROA not after:            Wed 04 Jun 2025 00:25:00 +0000
asID:                     262215
IP address blocks:        45.179.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a5:27:b5:61:a9:0d:3f:13:fd:c5:a6:ab:19:9b:8d:5c:80:0f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Jun  5 00:20:00 2024 GMT
            Not After : Jun  4 00:25:00 2025 GMT
        Subject: CN=18C5A9B89D5132ECE80E0CDF74D9B9BCBA7378AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:b6:cd:97:a3:c6:bc:dd:f0:4d:f3:f7:d1:
                    48:a9:65:a1:cc:59:d5:cd:ef:65:5f:b4:f3:2e:6a:
                    a1:7c:82:9e:c4:ad:77:5e:06:57:d4:eb:d1:5d:c8:
                    89:ad:f0:61:e8:51:ed:0b:b6:64:05:4a:f8:f6:14:
                    dc:0a:63:d3:50:22:72:41:e0:5c:f3:29:46:9c:c9:
                    20:0f:f3:3b:43:5f:94:81:0f:f8:b1:bc:26:f9:7c:
                    76:6a:d6:b3:d9:2d:c8:66:4f:1b:13:1d:31:9a:65:
                    ab:08:84:bf:9e:02:a9:93:6f:c4:d5:ee:a8:71:dc:
                    24:4e:71:7a:45:b1:70:1b:99:c7:a8:98:a4:3c:54:
                    e7:e4:ab:f7:6a:f8:f7:89:17:d3:95:08:65:71:e9:
                    a1:6a:b4:01:39:f4:fb:89:45:ab:73:67:bd:8f:d4:
                    10:5c:67:36:2a:3f:31:9a:84:c6:24:24:ec:b1:f9:
                    ae:62:87:1a:cb:b5:70:5c:b3:87:52:40:08:b1:a6:
                    be:29:35:32:a6:76:d3:8c:bc:7f:e6:09:43:05:ee:
                    53:8d:92:7b:33:15:46:c6:48:b4:aa:7e:52:e3:c5:
                    61:1e:4f:8f:6f:09:d0:9b:e7:8a:14:5e:fd:1b:3a:
                    f8:11:64:3a:36:66:39:e6:f6:f6:7b:69:81:02:2f:
                    69:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C5:A9:B8:9D:51:32:EC:E8:0E:0C:DF:74:D9:B9:BC:BA:73:78:AB
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230322e302f32342d3234203d3e20323632323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:97:30:88:53:ba:fe:26:2a:ec:ec:7f:50:d0:f3:8d:26:39:
         b1:9c:c4:d2:3c:3d:9f:88:64:47:c0:cf:04:34:52:7f:66:da:
         06:bc:51:c2:97:da:33:6d:cb:94:f1:f6:b1:7e:cd:01:9c:21:
         ba:93:36:c9:58:fb:28:2f:a3:15:6c:0e:a9:53:ac:2d:df:ea:
         1d:a4:c3:29:3c:84:b2:e2:45:e5:1a:15:1d:3c:ac:8d:7f:1d:
         ce:3b:37:51:98:88:dd:a3:e7:b0:04:a0:21:00:69:d4:e4:76:
         ac:1d:74:69:92:9a:3d:7b:a7:c2:38:5b:1b:a9:27:46:39:6a:
         42:4c:23:60:ed:1d:a5:10:d2:70:e6:0a:e4:00:38:27:14:cf:
         06:8a:4d:fb:4e:15:ab:13:f5:99:8b:fe:98:2c:41:00:8a:27:
         d0:d6:ae:5e:e9:15:de:c1:77:ea:e3:84:7b:2a:48:fe:f2:25:
         c9:a8:26:92:1e:bb:74:3f:75:c6:c7:14:40:ba:b7:44:71:15:
         b1:13:66:c7:04:31:0d:42:4d:2c:72:a8:0e:78:46:68:82:cf:
         fa:72:04:a3:15:38:1f:38:30:6e:ff:e2:d7:b1:f6:e0:c5:23:
         57:e5:28:f2:b3:80:bd:9b:f7:38:c5:ca:b1:2f:3d:31:86:e3:
         c7:fe:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:29:24 2024 by rpki-client on console-ams.rpki-client.org