Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa
File:                     34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa (raw, json)
Hash identifier:          GP2TPswh3SwyuyfcvgtHh+Pp2FV6s1AjmNmU1AfubVs=
Subject key identifier:   F0:C2:B2:72:E1:61:D3:57:FB:27:F3:4A:FA:94:00:CB:06:5E:D8:E3
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       023731F8FD8B816CD1AEA6C2B1E9262909FB1205
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa
Signing time:             Tue 05 Mar 2024 18:01:46 +0000
ROA not before:           Tue 05 Mar 2024 17:56:46 +0000
ROA not after:            Tue 04 Mar 2025 18:01:46 +0000
asID:                     269848
IP address blocks:        45.182.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:37:31:f8:fd:8b:81:6c:d1:ae:a6:c2:b1:e9:26:29:09:fb:12:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Mar  5 17:56:46 2024 GMT
            Not After : Mar  4 18:01:46 2025 GMT
        Subject: CN=F0C2B272E161D357FB27F34AFA9400CB065ED8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:3a:ea:db:e9:9f:bd:a5:70:24:ff:59:cc:
                    4d:71:85:80:d0:ba:87:d1:dc:4a:14:88:4c:b9:2c:
                    ee:90:c6:e0:e4:a6:d5:bf:a2:fc:e4:88:e5:36:f4:
                    be:a6:c6:2d:39:13:d3:fb:c3:0a:39:f5:56:97:b6:
                    5e:60:19:ea:19:a4:48:50:8f:c9:2f:76:1a:91:ce:
                    62:94:0c:00:23:21:34:e2:d9:b2:fa:22:a4:77:74:
                    44:b8:09:21:78:e4:13:2e:e6:de:14:67:02:ed:e7:
                    cb:bf:d9:c9:2f:ca:a9:23:66:99:86:4f:1c:ee:69:
                    d5:aa:0f:15:85:0d:2f:32:bb:c8:d2:4f:f4:62:83:
                    09:92:da:c3:fa:d9:d7:00:7c:8b:0f:51:13:9b:91:
                    00:92:7e:6a:fe:78:0d:cf:fa:79:b9:f0:e7:58:b8:
                    ac:1e:48:c5:e9:cc:a0:1a:64:a5:3a:61:0c:c1:bc:
                    56:99:ee:19:c0:e5:dc:0a:20:aa:a6:b7:35:7f:dd:
                    4f:68:da:81:8b:33:e0:98:ae:14:81:f5:11:53:8c:
                    25:73:f5:22:4a:e2:da:2b:e8:84:2a:3c:cc:41:f1:
                    db:11:75:e4:38:13:80:a0:07:66:62:3b:87:f4:ba:
                    39:35:cd:3f:f2:fd:ce:f4:11:6f:8b:da:ff:25:b5:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:B2:72:E1:61:D3:57:FB:27:F3:4A:FA:94:00:CB:06:5E:D8:E3
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:05:2d:cf:86:d1:8f:72:77:16:48:b5:5c:68:9e:7a:29:89:
         de:fa:dd:d2:3f:f1:00:a4:6f:a4:8d:6b:be:2f:91:04:7f:28:
         e4:3c:7c:fa:d0:17:26:cc:b0:d1:f6:db:db:38:85:a9:b9:2a:
         bc:e1:e1:e5:96:4c:f8:7b:78:c2:16:7c:16:19:70:d4:42:83:
         3f:cf:a0:c3:05:f6:fd:2d:49:6e:53:5b:49:80:11:2f:4e:5e:
         bf:17:f4:53:77:b1:a8:14:ed:ad:31:49:44:72:63:bf:82:5e:
         04:f3:35:d9:f1:f4:00:38:50:4d:20:5f:a7:eb:fd:74:53:66:
         42:1f:74:80:2c:33:b4:58:58:80:fa:e0:b0:0d:c3:01:76:a1:
         8e:28:82:09:b0:04:6f:be:de:4b:f7:42:98:61:79:19:bb:29:
         5b:91:75:ea:ab:79:ca:70:c4:77:30:e5:fb:d7:ef:40:e2:34:
         e4:49:31:7c:eb:b7:1a:c8:01:9a:34:91:dd:11:83:5b:a1:f3:
         53:b1:68:26:a0:54:0c:b2:45:2d:ed:30:17:99:8f:6a:53:27:
         66:75:aa:53:2e:bf:6e:0b:5e:e5:4c:d2:42:9d:2c:e2:c8:d4:
         2e:3a:e7:76:d7:aa:14:c0:ce:c9:e9:36:73:fa:c2:fc:32:60:
         72:24:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 04:11:17 2024 by rpki-client on console-fra.rpki-client.org