Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa
File:                     34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa (raw, json)
Hash identifier:          tv4hlRVU7RIrCd2k6NU2bmVdAZGNwzZmILysCEAFoUY=
Subject key identifier:   B7:12:64:B2:2D:9D:4C:2B:68:74:3F:C8:12:48:59:6A:25:CC:55:6B
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       3015BD218ABADE04E92025FBB95C1D928F3B7532
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa
Signing time:             Tue 05 Mar 2024 18:04:27 +0000
ROA not before:           Tue 05 Mar 2024 17:59:27 +0000
ROA not after:            Tue 04 Mar 2025 18:04:27 +0000
asID:                     267919
IP address blocks:        45.179.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:15:bd:21:8a:ba:de:04:e9:20:25:fb:b9:5c:1d:92:8f:3b:75:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Mar  5 17:59:27 2024 GMT
            Not After : Mar  4 18:04:27 2025 GMT
        Subject: CN=B71264B22D9D4C2B68743FC81248596A25CC556B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:26:06:be:bf:2d:8b:6c:3b:53:0a:f2:37:
                    b5:d4:55:2e:13:3f:a9:1e:53:f7:67:aa:79:dc:5c:
                    89:a5:83:0b:de:14:24:4f:ca:52:9e:a4:dd:85:6b:
                    b4:ba:40:1d:69:04:63:07:96:a3:90:8b:35:2d:50:
                    3a:12:51:48:dd:38:8a:c1:de:6d:6b:bb:40:ad:51:
                    94:6a:28:e4:b6:ba:ab:b4:95:4c:3d:37:87:24:37:
                    8b:88:40:d9:b8:c6:2f:32:c6:4c:4c:37:73:d1:78:
                    58:37:85:84:9f:5a:8b:12:ce:84:df:3c:d7:44:4d:
                    cb:c3:3b:73:24:ad:34:31:4c:15:b3:db:b6:e1:f4:
                    53:de:64:9d:d0:d8:96:70:b3:39:d2:0c:eb:a7:78:
                    f6:de:88:f9:b2:21:10:8b:02:e4:f9:b6:65:f5:0e:
                    40:62:fe:bc:80:58:4f:98:d8:c2:10:86:f6:47:9f:
                    03:7b:3c:d8:9b:a0:a9:e0:ba:ff:1f:d6:0e:5c:63:
                    46:44:b8:23:00:12:a7:4c:69:66:bb:3e:c5:e8:89:
                    60:69:81:73:73:e4:44:82:bf:a4:82:5f:e7:18:a3:
                    1e:0c:ea:45:71:7e:56:ce:14:a9:a8:47:f4:35:5c:
                    bf:b4:2b:c3:f1:b2:de:25:34:2c:e8:a3:8e:02:8f:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:12:64:B2:2D:9D:4C:2B:68:74:3F:C8:12:48:59:6A:25:CC:55:6B
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:0c:78:67:d4:48:64:3b:75:11:e4:c5:c7:f0:26:f1:4a:
         b7:9d:79:29:3b:a0:a3:e9:7b:9e:0f:1f:cf:3f:8e:43:89:46:
         e7:3f:e5:b9:19:de:66:7c:58:40:42:da:6a:f3:0b:00:8d:b6:
         89:a1:2c:bd:50:1e:80:01:bb:63:a2:83:3b:ef:3d:24:40:b1:
         3e:d4:3e:55:ea:de:41:03:26:58:a6:27:1a:2f:5a:d5:98:fe:
         37:3f:87:b3:3d:21:1e:2e:6b:7e:f7:c0:c8:51:f9:49:d0:32:
         98:42:1f:cc:e8:12:a8:16:83:c4:33:bc:6f:87:63:c3:87:62:
         47:d0:0d:ad:9c:48:a7:ee:5e:da:68:da:22:0e:ec:01:af:63:
         8d:3b:e2:09:5f:2b:bc:4d:81:86:7c:20:69:95:e4:ed:48:38:
         65:15:c9:84:ef:5e:8c:93:2f:db:6b:92:f3:3a:38:9b:7c:00:
         e9:bf:a1:e5:90:bb:d1:67:28:1d:9b:bc:20:5f:de:70:af:8d:
         2f:f6:27:33:c4:4f:86:d7:d0:a2:c6:b7:92:f5:a5:d4:5e:27:
         9e:d9:e1:d8:4c:6b:22:da:d0:03:1c:a6:b9:a3:3e:11:31:92:
         94:00:b1:40:6a:fe:9f:aa:df:ce:45:71:94:be:2a:ad:3a:72:
         14:92:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:36 2024 by rpki-client on console-fra.rpki-client.org