Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/34352e3137392e37322e302f32322d3234203d3e20323637393132.roa
File:                     34352e3137392e37322e302f32322d3234203d3e20323637393132.roa (raw, json)
Hash identifier:          f5OewSudaatWoiE9he5mogeUfU6IZbZjsVmbhFV1qlU=
Subject key identifier:   38:FB:09:E9:1E:4B:D9:7E:F0:AD:5E:45:B2:07:DC:82:4C:DD:C4:34
Certificate issuer:       /CN=CEB2B51AACA01EE582E365F19561EF79882825A8
Certificate serial:       45E637D2A9ED802F6F7D7BC44466BCB48901FE5E
Authority key identifier: CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/34352e3137392e37322e302f32322d3234203d3e20323637393132.roa
Signing time:             Tue 05 Mar 2024 18:05:30 +0000
ROA not before:           Tue 05 Mar 2024 18:00:30 +0000
ROA not after:            Tue 04 Mar 2025 18:05:30 +0000
asID:                     267912
IP address blocks:        45.179.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e6:37:d2:a9:ed:80:2f:6f:7d:7b:c4:44:66:bc:b4:89:01:fe:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEB2B51AACA01EE582E365F19561EF79882825A8
        Validity
            Not Before: Mar  5 18:00:30 2024 GMT
            Not After : Mar  4 18:05:30 2025 GMT
        Subject: CN=38FB09E91E4BD97EF0AD5E45B207DC824CDDC434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:17:c9:f6:71:d5:36:46:96:d5:9e:d0:df:
                    31:69:49:b4:16:6d:f0:8d:3d:e0:40:b5:94:94:b3:
                    38:05:71:5b:f2:d3:7f:92:27:84:a0:0e:47:c8:1c:
                    3c:ed:23:68:3e:c4:39:f8:c6:5d:d0:25:e9:a0:2c:
                    0a:1b:10:c0:b0:0d:be:84:cc:63:7c:97:d8:14:06:
                    7e:71:c5:43:0f:28:c8:a7:f7:4e:36:9f:ca:50:9a:
                    fe:87:36:9e:0e:79:3c:c8:e4:16:23:b8:8e:3e:ca:
                    28:73:19:1c:5a:15:fb:d6:fd:5d:7e:9f:74:1a:10:
                    8d:39:22:a4:3d:de:d5:a3:88:47:df:6f:41:6d:b8:
                    16:66:99:30:b4:53:f1:36:26:91:74:b7:db:f4:82:
                    1a:2e:2a:e9:3e:f8:68:48:d6:f9:b4:89:af:56:59:
                    82:45:4b:cd:89:8c:09:df:0f:19:28:69:00:5a:82:
                    11:94:2c:fc:20:24:1e:55:3b:d4:a0:b4:df:ad:da:
                    20:16:cd:5b:12:03:66:5e:ba:a1:73:28:54:e6:ed:
                    c3:77:f0:cf:40:d3:a4:80:36:c8:7d:7d:42:3e:fa:
                    ea:9a:3f:05:81:82:10:54:6d:30:1f:e0:97:2b:56:
                    4f:45:40:58:cf:d8:5d:d1:6f:d7:f5:b8:30:98:ee:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:09:E9:1E:4B:D9:7E:F0:AD:5E:45:B2:07:DC:82:4C:DD:C4:34
            X509v3 Authority Key Identifier:
                keyid:CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/34352e3137392e37322e302f32322d3234203d3e20323637393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:e3:62:85:c4:46:74:80:e5:10:be:25:13:18:da:b6:27:3f:
         69:e9:0a:a9:04:df:4e:4e:f0:a9:ce:18:59:2c:0d:a4:85:8f:
         17:ee:13:7d:5a:d8:d6:19:fb:12:05:85:1a:a4:0e:4e:f4:7c:
         ab:99:ec:c7:df:56:0d:0c:72:b8:76:b1:7f:aa:4d:4f:4a:3e:
         0b:2e:91:4d:16:58:d2:9f:b8:39:ed:22:cc:c9:68:f5:85:62:
         54:bf:96:8d:15:93:39:28:7a:ee:51:bc:ab:18:ca:b1:56:d4:
         fb:17:bf:03:e6:89:3b:a1:86:9e:21:24:7a:51:2b:a0:d6:64:
         f0:02:51:cc:9d:17:eb:34:56:bc:a5:5c:d1:6c:6e:a9:62:0a:
         44:08:2e:9c:33:12:6f:5e:ef:38:f0:81:7b:ed:67:8b:40:e0:
         0e:0c:8c:d5:4d:f5:2d:13:33:ba:78:9b:d3:2c:e0:c5:73:bd:
         7c:0b:d2:6b:b1:16:4a:90:e1:49:ad:1d:90:a4:2a:93:5d:01:
         b0:34:1e:7c:63:04:ee:d6:d4:a1:24:35:b1:b0:bd:fe:2e:6d:
         85:5e:77:f1:cb:1c:89:26:32:b4:85:59:ff:39:2d:12:7c:0a:
         f7:62:69:47:74:56:94:9b:80:98:05:d5:f2:64:86:96:3b:0c:
         cf:a3:3f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org