Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/34352e3138322e3131382e302f32342d3234203d3e20323639373932.roa
File:                     34352e3138322e3131382e302f32342d3234203d3e20323639373932.roa (raw, json)
Hash identifier:          Bx9aeycEvjL8eQ4VLdlzMSRlOf64paHmU/r279UxKPk=
Subject key identifier:   2A:9C:9C:AC:21:78:9E:2C:1C:4C:3A:5D:96:7F:69:5D:68:66:BC:61
Certificate issuer:       /CN=41231346CAA3119B16D3EBB340022A400612414D
Certificate serial:       65DCD34EBC8BC850F0B615DA371576DCDC8D2686
Authority key identifier: 41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/34352e3138322e3131382e302f32342d3234203d3e20323639373932.roa
Signing time:             Tue 05 Mar 2024 17:48:13 +0000
ROA not before:           Tue 05 Mar 2024 17:43:13 +0000
ROA not after:            Tue 04 Mar 2025 17:48:13 +0000
asID:                     269792
IP address blocks:        45.182.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dc:d3:4e:bc:8b:c8:50:f0:b6:15:da:37:15:76:dc:dc:8d:26:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41231346CAA3119B16D3EBB340022A400612414D
        Validity
            Not Before: Mar  5 17:43:13 2024 GMT
            Not After : Mar  4 17:48:13 2025 GMT
        Subject: CN=2A9C9CAC21789E2C1C4C3A5D967F695D6866BC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:58:bd:66:78:75:4f:31:5b:6c:cc:57:27:
                    1f:f3:f9:d4:08:ce:81:db:b6:b0:1c:1d:c3:db:6b:
                    75:b0:55:b2:cc:07:93:54:56:35:9e:fb:01:17:60:
                    c5:f4:44:ba:0b:7d:c9:65:ba:13:e4:18:6f:46:d5:
                    01:78:02:65:2a:4f:50:65:c7:97:4a:e1:79:5f:7c:
                    36:f9:98:00:62:cb:d4:40:af:b2:3e:d5:31:c7:f6:
                    c8:10:f3:2a:7e:ac:1e:80:3b:0c:6e:93:8c:14:73:
                    1f:42:19:00:d0:84:27:56:e9:ab:cd:4b:dd:22:2c:
                    01:b4:00:16:29:55:40:5c:77:8a:0c:a9:f8:4a:af:
                    8d:8e:3c:33:d3:f9:d8:b2:db:b4:ad:80:42:62:de:
                    84:15:b7:04:d0:dd:77:34:d1:05:1d:d3:ea:c4:e6:
                    31:9d:40:9e:c8:f6:4d:94:19:9c:8d:cf:8b:e8:96:
                    d4:61:5c:3e:61:86:69:85:f0:f8:96:c2:ca:3a:82:
                    91:f8:3c:73:a5:3e:27:61:8e:05:a3:34:9c:23:ac:
                    04:40:87:c5:eb:20:a7:14:59:3f:86:2e:1b:66:1b:
                    3c:19:67:ef:72:31:03:b3:a4:8f:e1:50:b9:07:67:
                    0d:df:b0:54:34:57:22:34:fe:14:47:63:16:5a:f6:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9C:9C:AC:21:78:9E:2C:1C:4C:3A:5D:96:7F:69:5D:68:66:BC:61
            X509v3 Authority Key Identifier:
                keyid:41:23:13:46:CA:A3:11:9B:16:D3:EB:B3:40:02:2A:40:06:12:41:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/41231346CAA3119B16D3EBB340022A400612414D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41231346CAA3119B16D3EBB340022A400612414D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7197A8340FF1126A66CAE92B5438C060FB9CBC8EE42D4AF20A9568103DF6A60C/0/34352e3138322e3131382e302f32342d3234203d3e20323639373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:42:40:f6:e3:4a:09:da:66:39:1e:48:8d:4d:d2:a9:1b:ed:
         75:6a:4b:c1:7e:3b:5d:04:cc:dc:c2:1d:16:24:31:0d:7c:30:
         bb:bb:a9:08:df:39:b8:84:1d:a5:a4:6f:c0:90:bb:d5:a1:5a:
         e7:0d:42:9b:d3:5f:71:a5:79:0a:63:bc:6e:f4:e5:02:f0:d3:
         2c:7d:34:4a:fe:ac:af:3a:b3:f4:9e:41:a3:48:48:b9:63:7f:
         7d:88:0e:05:33:8a:d4:89:11:de:65:e0:75:41:25:cf:85:f4:
         1b:84:2b:9c:cf:48:fe:24:f9:b1:d6:11:39:74:2a:fc:27:a0:
         73:6f:1f:83:f4:1e:54:3a:d1:04:59:e2:ab:8c:28:85:8f:7b:
         13:e6:be:b6:2f:6f:71:08:74:c3:a6:7b:36:d3:d3:3b:b1:a1:
         c4:48:43:72:71:c0:ac:32:93:22:e2:b2:95:a9:07:66:e5:d7:
         e3:6e:c3:87:91:f1:1f:08:03:5b:26:fc:38:f6:fc:37:51:99:
         58:d2:98:d7:08:a1:ce:b0:32:fe:56:f4:37:a5:b1:63:b7:e2:
         6a:a7:c2:ee:85:25:1c:bb:36:cf:5c:36:25:dc:d8:e1:44:30:
         bf:4e:bd:dc:60:6f:97:80:a7:19:d6:b1:9b:2c:e8:a6:b6:c8:
         c9:c0:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org