Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa
File:                     34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa (raw, json)
Hash identifier:          XTwPQKjsWiwc+dkygz+Fz1PSNEH83eoYGrP1cR09eOw=
Subject key identifier:   20:B1:E1:C0:C8:D7:D7:3C:10:20:4C:24:0F:09:4F:D7:56:E8:09:32
Certificate issuer:       /CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
Certificate serial:       35CEF3D48FC3737DEBE56A5B26EDFDB01A255A56
Authority key identifier: C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa
Signing time:             Tue 05 Mar 2024 17:59:57 +0000
ROA not before:           Tue 05 Mar 2024 17:54:57 +0000
ROA not after:            Tue 04 Mar 2025 17:59:57 +0000
asID:                     267914
IP address blocks:        45.179.152.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl
                          rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ce:f3:d4:8f:c3:73:7d:eb:e5:6a:5b:26:ed:fd:b0:1a:25:5a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F7CB2EE52FBCDCDEFC46131584783FC8A60557
        Validity
            Not Before: Mar  5 17:54:57 2024 GMT
            Not After : Mar  4 17:59:57 2025 GMT
        Subject: CN=20B1E1C0C8D7D73C10204C240F094FD756E80932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:57:f1:f4:00:a6:09:dc:5d:8f:cf:14:a8:
                    e4:db:43:9e:b9:ef:1e:6e:bf:58:7f:83:10:73:39:
                    e7:8c:6c:16:e5:e0:15:2f:5d:f5:35:f4:8d:a0:bb:
                    30:09:8e:c2:ad:f4:70:52:6f:70:f7:39:1c:a0:66:
                    a9:d6:df:cd:64:d7:a1:07:82:be:fa:f6:40:95:18:
                    c2:90:cd:85:92:1b:a3:a1:4d:80:ea:39:76:c9:0f:
                    e5:2a:d9:e3:09:2c:b7:4f:c5:40:d6:22:12:5b:47:
                    96:aa:a5:69:88:25:2e:b0:db:c0:5e:98:82:d1:b0:
                    0d:a9:cb:74:8c:e1:4a:f0:b9:13:82:56:57:0a:53:
                    35:74:85:90:79:82:54:4e:f5:06:f0:ca:16:70:16:
                    76:6e:87:aa:e2:93:f3:da:56:d4:6b:ae:90:64:fd:
                    0a:39:df:97:63:d1:f5:a2:89:2f:11:a2:46:31:fa:
                    59:da:9f:a8:1d:8a:3d:38:a3:75:29:93:7f:cb:78:
                    91:cd:1d:c2:e8:5c:d6:eb:35:d2:c2:6b:73:eb:34:
                    0a:1c:92:49:b1:7f:1d:98:53:89:b5:7a:ff:ba:ea:
                    42:75:19:f0:97:e3:5f:6b:89:ec:a9:f1:df:99:e1:
                    1e:65:4d:56:af:67:e9:d5:90:5d:fa:17:9d:c8:e5:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B1:E1:C0:C8:D7:D7:3C:10:20:4C:24:0F:09:4F:D7:56:E8:09:32
            X509v3 Authority Key Identifier:
                keyid:C6:F7:CB:2E:E5:2F:BC:DC:DE:FC:46:13:15:84:78:3F:C8:A6:05:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6F7CB2EE52FBCDCDEFC46131584783FC8A60557.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/863541C677207DD94084DA7E64C5DC419A023519835F22763B5B0E507C92367C/0/34352e3137392e3135322e302f32322d3232203d3e20323637393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:48:10:c1:b2:42:c0:65:bb:d0:73:88:52:2b:5d:c6:16:
         b4:11:e8:43:7a:a9:74:03:b6:69:85:11:1a:91:01:cc:79:71:
         53:f0:49:19:2c:f8:34:02:f3:73:f6:96:9a:c7:14:4f:dd:1b:
         06:d7:96:ad:5c:70:5d:ba:b7:ae:92:a6:e2:bd:c3:54:3c:a3:
         b8:2f:4e:8e:d9:fb:9f:35:26:cc:0c:91:7f:0b:fb:21:c3:bf:
         4e:6b:00:76:c0:ab:34:bd:03:34:25:33:f7:69:bc:8e:9e:63:
         92:f1:15:9f:eb:5a:21:4d:a7:ff:f9:86:08:b8:0c:45:bf:90:
         9e:d6:b7:90:09:93:10:08:c6:9d:11:16:94:90:6b:85:b1:15:
         2c:8d:e2:48:c8:00:0d:bc:c3:95:1c:49:ef:86:bb:c7:53:61:
         c4:3e:b3:81:d1:eb:f8:c1:99:9d:f1:35:3d:23:1b:61:ed:9c:
         47:db:f6:69:a0:4a:68:28:7d:77:e4:2b:5e:43:33:f8:e8:3d:
         0d:70:5c:1a:31:a7:e7:9a:d8:6b:a4:d5:ec:28:45:ad:7f:1b:
         90:e3:ea:f4:11:92:46:86:50:c7:15:43:66:fe:59:bb:53:b2:
         8e:44:06:ca:f8:12:3a:64:3b:24:e6:0d:57:59:0c:f0:c8:13:
         64:97:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org