Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e302f32342d3234203d3e203133343839.roa
File:                     34352e3136392e3235332e302f32342d3234203d3e203133343839.roa (raw, json)
Hash identifier:          ccCL/Mubbon695ycN4YKzDCUqetMtWzWH4SE2zP0nNY=
Subject key identifier:   81:36:57:6B:2B:24:80:56:BE:3F:B3:09:96:06:E4:53:6E:E2:11:15
Certificate issuer:       /CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
Certificate serial:       51EF64EA4821EABAE6373E1C2EE99DE23EFB84B8
Authority key identifier: A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e302f32342d3234203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 18:09:36 +0000
ROA not before:           Tue 05 Mar 2024 18:04:36 +0000
ROA not after:            Tue 04 Mar 2025 18:09:36 +0000
asID:                     13489
IP address blocks:        45.169.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ef:64:ea:48:21:ea:ba:e6:37:3e:1c:2e:e9:9d:e2:3e:fb:84:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
        Validity
            Not Before: Mar  5 18:04:36 2024 GMT
            Not After : Mar  4 18:09:36 2025 GMT
        Subject: CN=8136576B2B248056BE3FB3099606E4536EE21115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:f4:78:20:a0:d0:3a:da:70:a6:ca:53:c7:
                    00:fc:5d:6e:1d:9a:bf:77:fa:ea:55:81:93:b1:2e:
                    90:0a:ea:7a:22:54:71:45:26:42:3d:2a:45:93:91:
                    b0:f4:33:8f:0e:64:56:4f:da:60:36:2d:48:2b:88:
                    b4:e0:b6:aa:a1:d9:e1:4f:6b:ca:78:a2:29:ac:7b:
                    1e:0f:2d:89:42:fa:40:45:bd:df:af:a7:1c:93:b8:
                    7e:23:71:ca:cf:38:fb:c3:e0:fb:53:19:98:6e:4f:
                    42:7c:81:9e:75:20:28:8e:77:71:c8:84:7a:b7:0d:
                    9e:25:72:d1:6c:67:d4:4c:b5:3f:69:8d:a2:7c:39:
                    15:88:f8:cf:10:b2:1e:70:01:ca:c1:e3:b2:c3:a2:
                    ea:69:38:36:43:e5:97:50:54:ce:bf:43:a4:e0:80:
                    26:7b:8f:f9:7d:e3:15:84:8e:08:f5:46:fd:09:e1:
                    3e:84:2d:c8:fb:1b:f9:a5:b1:48:6c:af:b7:f9:37:
                    57:c0:bb:ef:d1:d1:15:a5:df:e9:50:e4:f1:ad:64:
                    cc:da:7a:60:f6:5c:8a:f3:b5:9d:b5:aa:99:f5:07:
                    e8:5c:6c:f5:bd:1e:60:08:59:56:aa:34:97:39:36:
                    52:b2:af:69:2c:68:5c:97:23:c8:90:6a:a6:84:e3:
                    ae:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:36:57:6B:2B:24:80:56:BE:3F:B3:09:96:06:E4:53:6E:E2:11:15
            X509v3 Authority Key Identifier:
                keyid:A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e302f32342d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:b3:5c:ae:64:8f:29:54:39:ea:96:f7:5d:2c:03:cd:99:
         b7:b0:02:54:03:65:3e:a0:28:51:b4:82:39:21:f3:e8:de:f2:
         c9:33:62:28:36:a1:bf:d5:b2:0d:64:9c:8a:28:ed:f3:56:60:
         cb:70:eb:a4:56:40:bc:10:d1:d5:4c:1e:da:40:af:2f:5d:47:
         c7:0c:95:80:51:79:d7:ca:f6:7d:c3:1e:e2:e8:0a:19:9f:73:
         59:af:e0:e5:ac:c3:7a:09:57:2c:0a:43:64:77:56:8e:f5:f1:
         a0:8a:f2:49:fe:28:cc:ed:07:0f:8e:08:94:97:10:7b:4b:11:
         d1:d7:48:6b:a2:67:3c:63:a8:0c:1d:76:f4:92:3d:1a:5c:c1:
         19:74:16:07:40:5b:e6:39:54:60:26:37:7b:be:91:aa:2d:50:
         b5:97:5c:b7:f6:14:ba:d0:92:bd:36:d2:dc:b4:1f:cf:bd:30:
         a0:9c:71:d7:45:a6:f7:cc:51:26:7b:90:a9:65:0a:c7:b6:86:
         d4:62:ae:60:07:9d:0c:7b:9a:6d:34:33:f6:ee:8a:fa:1e:4f:
         a2:c0:47:c2:8c:a9:61:b1:aa:a1:6c:69:97:5b:a8:0d:3e:c4:
         bb:99:29:25:10:1c:bf:34:01:90:5f:a9:d4:85:d8:12:7e:76:
         66:a0:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org