Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/34352e3136312e3136392e302f32342d3234203d3e203238303933.roa
File:                     34352e3136312e3136392e302f32342d3234203d3e203238303933.roa (raw, json)
Hash identifier:          1pIemd+BUfg/bwoWqTivx+pbsb/qOny0IPBawV34Wbs=
Subject key identifier:   E8:FF:D4:1B:A5:23:32:73:07:14:CD:6E:8D:78:ED:FC:C0:0B:9F:8C
Certificate issuer:       /CN=4E10749617F934E1D6CBF359A4033D533EA752C4
Certificate serial:       75A0A3B084D2C82E01EBC6546F67F953699816BC
Authority key identifier: 4E:10:74:96:17:F9:34:E1:D6:CB:F3:59:A4:03:3D:53:3E:A7:52:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E10749617F934E1D6CBF359A4033D533EA752C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/34352e3136312e3136392e302f32342d3234203d3e203238303933.roa
Signing time:             Tue 05 Mar 2024 17:52:58 +0000
ROA not before:           Tue 05 Mar 2024 17:47:58 +0000
ROA not after:            Tue 04 Mar 2025 17:52:58 +0000
asID:                     28093
IP address blocks:        45.161.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E10749617F934E1D6CBF359A4033D533EA752C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a0:a3:b0:84:d2:c8:2e:01:eb:c6:54:6f:67:f9:53:69:98:16:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E10749617F934E1D6CBF359A4033D533EA752C4
        Validity
            Not Before: Mar  5 17:47:58 2024 GMT
            Not After : Mar  4 17:52:58 2025 GMT
        Subject: CN=E8FFD41BA52332730714CD6E8D78EDFCC00B9F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:b8:c5:f0:ac:2d:50:3b:ba:bf:08:04:28:
                    18:d1:55:70:36:4c:56:51:c3:73:a8:f7:80:81:96:
                    fc:0b:9f:b0:5c:31:49:bd:6c:f3:86:86:db:88:4f:
                    68:e3:bf:ee:75:a7:e2:db:d1:69:45:89:ea:6f:46:
                    81:52:52:49:8f:89:56:b2:d1:2f:1f:3e:26:00:91:
                    fb:6e:05:2a:8a:d9:2b:6e:0a:a6:6e:1e:b5:b3:47:
                    91:41:74:fe:51:42:a7:26:9d:1f:94:53:f1:5b:53:
                    c8:d3:ca:e3:58:f6:40:64:14:dc:2d:bb:1a:f5:9d:
                    0c:4b:cb:3e:c8:89:b7:a7:f2:ca:4e:5f:d2:ba:27:
                    9b:d1:31:1e:77:b2:1b:d5:fe:77:c0:64:bc:c5:da:
                    40:59:e7:5f:a5:64:40:55:dd:38:80:ca:f4:c0:13:
                    01:66:a1:d6:4a:85:01:2b:1c:41:e4:ba:19:d4:eb:
                    19:ef:0b:e9:52:27:16:4d:8b:95:11:cf:6d:81:50:
                    c6:da:a3:8a:88:9e:0f:4f:3e:94:3a:da:0e:0d:ef:
                    ec:ff:99:c7:a9:ad:77:4a:9e:3a:c0:17:ee:d5:65:
                    ee:50:bf:d4:0c:9f:53:48:72:cf:e6:44:9e:d1:01:
                    3b:e6:01:75:81:93:10:ea:b0:36:4e:8a:50:05:ac:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FF:D4:1B:A5:23:32:73:07:14:CD:6E:8D:78:ED:FC:C0:0B:9F:8C
            X509v3 Authority Key Identifier:
                keyid:4E:10:74:96:17:F9:34:E1:D6:CB:F3:59:A4:03:3D:53:3E:A7:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E10749617F934E1D6CBF359A4033D533EA752C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/34352e3136312e3136392e302f32342d3234203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:f5:db:bf:b4:72:bc:46:36:70:a5:93:14:be:c1:c4:c5:
         ed:a5:a1:44:ab:78:79:e9:f8:52:fd:6c:b9:e3:d8:fa:d5:7a:
         7d:6d:b4:af:89:87:1a:46:38:ba:c6:f7:c0:0d:34:2e:34:f9:
         33:88:2b:05:09:98:46:7a:30:44:55:46:22:e5:ef:16:f2:3f:
         83:39:09:40:db:13:51:7e:dd:06:53:c7:07:08:09:ac:3a:4f:
         b6:a8:9e:84:34:b1:e5:85:04:f7:9e:66:04:d1:38:ec:fc:0d:
         a8:38:5e:64:e3:59:9e:62:77:59:a4:20:d8:83:21:01:53:32:
         34:ab:c2:f5:ca:fe:4f:da:a5:54:b6:10:3d:30:4e:35:c2:38:
         0e:99:ba:63:c0:05:c4:84:df:04:dd:cb:a3:5b:bb:3b:b3:85:
         a2:c4:33:2a:7f:28:b3:2b:f7:ad:69:d3:88:e9:80:fd:2f:6c:
         53:df:eb:2c:a5:dc:84:e7:7d:c8:23:c7:30:c0:e0:42:be:e4:
         06:e2:37:83:24:83:2d:08:20:f5:2f:85:40:b7:69:aa:a2:16:
         c6:6a:1c:d5:85:e0:9a:c6:61:bc:29:18:f3:52:01:0e:ca:15:
         f5:fe:13:d4:58:f5:47:80:65:9c:7d:ea:35:e1:57:69:ea:51:
         cc:e1:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org