Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa
File:                     34352e3233302e36302e302f32322d3234203d3e203532353037.roa (raw, json)
Hash identifier:          qnp39UTUkNt86OcfMen/sgAUOdrYO8ygipepyXjdB60=
Subject key identifier:   04:D6:07:7C:45:13:AE:8A:56:9D:06:EF:C7:FB:85:0D:B2:70:47:18
Certificate issuer:       /CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
Certificate serial:       6CE951E045FAFA3D5A345134477B0A0E86001970
Authority key identifier: 13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa
Signing time:             Tue 05 Mar 2024 18:04:07 +0000
ROA not before:           Tue 05 Mar 2024 17:59:07 +0000
ROA not after:            Tue 04 Mar 2025 18:04:07 +0000
asID:                     52507
IP address blocks:        45.230.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e9:51:e0:45:fa:fa:3d:5a:34:51:34:47:7b:0a:0e:86:00:19:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
        Validity
            Not Before: Mar  5 17:59:07 2024 GMT
            Not After : Mar  4 18:04:07 2025 GMT
        Subject: CN=04D6077C4513AE8A569D06EFC7FB850DB2704718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:c2:e8:9f:7e:66:61:a5:d7:07:b6:9c:8f:
                    b4:50:fd:12:5c:a8:6f:0e:64:c9:de:fb:2d:72:47:
                    28:26:87:2c:12:a1:88:8c:b0:ec:f3:11:6f:0d:c8:
                    e3:b1:a7:9d:ff:2c:ae:69:e7:1e:a9:c1:a0:85:9c:
                    04:b4:61:b4:65:92:e8:31:02:38:e9:dc:b7:e9:6a:
                    b5:35:52:9a:23:e5:a3:77:67:b5:e0:66:b1:de:74:
                    85:a3:9f:60:1d:a6:71:ac:16:3c:40:5f:55:67:b2:
                    97:e6:a6:dc:97:5a:4e:fd:1c:81:8d:3a:7e:2b:3c:
                    36:11:65:6a:ed:ea:f7:c5:2f:0a:e5:07:16:8e:21:
                    6d:e7:a7:50:09:16:3d:b7:a9:15:6d:d5:3c:2d:ae:
                    01:6b:33:75:56:ed:b2:7c:3b:c7:5a:a2:87:55:1b:
                    e8:16:76:4f:55:41:e0:f2:82:2f:37:ff:a7:12:85:
                    15:d2:70:94:63:b6:ed:65:94:2d:d5:e0:97:82:b3:
                    5f:b8:53:f1:89:b9:68:c1:b1:aa:ea:43:a5:57:ee:
                    e7:b1:37:80:65:51:cf:ae:85:1f:9c:1a:3d:81:d1:
                    65:e3:d2:ff:c1:56:46:d7:41:bc:19:d4:08:6f:e2:
                    5c:05:70:f0:c3:21:f1:99:3d:11:14:0d:d8:95:fd:
                    c5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D6:07:7C:45:13:AE:8A:56:9D:06:EF:C7:FB:85:0D:B2:70:47:18
            X509v3 Authority Key Identifier:
                keyid:13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b1:3d:50:01:0d:f7:3b:a5:64:35:65:fc:4c:50:a6:22:4d:
         5f:99:b6:e6:1e:9d:64:66:02:9e:96:b8:4c:1a:7c:9f:29:b2:
         c8:21:86:72:7a:b5:f5:3e:4e:b0:27:56:67:82:ce:25:e3:be:
         f7:40:88:77:0c:d5:ca:fb:c5:4e:09:1d:bc:bb:4d:ba:3a:de:
         df:ba:2d:f4:1e:19:c3:0e:18:c4:e3:06:d0:4c:72:09:4a:c5:
         33:bd:1f:2d:b7:cd:e5:84:a3:e8:48:d8:55:b3:5d:25:55:3b:
         12:ef:62:e7:d9:25:49:31:b2:7c:71:07:b6:98:08:03:bc:b7:
         0b:46:6f:55:15:c9:cd:6e:d0:66:6a:3d:d1:a5:aa:7b:30:e8:
         56:41:e9:23:24:ba:8f:3d:6b:32:c9:a8:43:73:fc:29:7f:61:
         ee:74:4d:52:a0:7e:f2:2e:c8:21:f3:2f:7d:10:60:2a:64:eb:
         6b:d6:28:e8:e1:48:7b:41:a7:d3:19:e6:f2:a0:42:3a:ba:c4:
         0f:85:ae:04:6e:fd:54:26:13:4e:88:ff:33:9b:86:d8:79:27:
         6b:bc:9b:6f:bc:fe:8f:23:52:a9:f0:70:16:22:3a:8a:b3:c1:
         fc:4d:9b:17:c4:79:c6:f5:eb:fd:e0:c4:03:2f:7b:3b:ad:46:
         c6:8a:a6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:23 2024 by rpki-client on console-fra.rpki-client.org