Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa
File:                     34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa (raw, json)
Hash identifier:          KQl23SozNWKmedqhLkhjJ36QZdSpuFZlIffBvn00qDo=
Subject key identifier:   11:CA:74:12:BA:1C:D8:C9:4B:DA:AB:8C:44:33:8C:5D:A7:17:02:18
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       4D1500B2FB255BDAED1CD803FDB2F8CE6D39A7B8
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa
Signing time:             Thu 27 Jun 2024 19:15:00 +0000
ROA not before:           Thu 27 Jun 2024 19:10:00 +0000
ROA not after:            Thu 26 Jun 2025 19:15:00 +0000
asID:                     267704
IP address blocks:        45.162.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:15:00:b2:fb:25:5b:da:ed:1c:d8:03:fd:b2:f8:ce:6d:39:a7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: Jun 27 19:10:00 2024 GMT
            Not After : Jun 26 19:15:00 2025 GMT
        Subject: CN=11CA7412BA1CD8C94BDAAB8C44338C5DA7170218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:de:c6:ce:89:08:61:b1:d8:e5:4a:f1:33:62:
                    73:90:76:c8:4e:f2:0d:e0:79:a2:ce:98:04:4e:38:
                    05:3e:76:2f:f5:3d:11:7d:97:0a:71:ba:5c:db:43:
                    75:64:2c:cf:80:2c:41:9e:54:47:0d:50:69:86:66:
                    9a:de:06:11:36:75:92:84:1f:27:0d:9a:21:6d:9c:
                    d9:3f:1a:b8:e5:d6:80:e2:72:6e:b8:e6:e5:66:e7:
                    42:03:23:db:35:64:c7:b4:d8:33:b7:9f:4b:de:10:
                    8a:dc:31:cc:fb:b4:d2:a4:6a:82:76:86:24:9d:21:
                    a9:c3:9d:e0:62:d7:2e:33:7c:30:bd:05:3a:64:bb:
                    74:a7:83:a4:45:95:47:d9:20:52:29:28:87:fc:b9:
                    84:88:0e:c7:aa:68:64:8a:83:76:0a:ca:e1:f8:f9:
                    7e:d7:1f:4a:18:70:1b:e8:a0:6f:c7:a7:6b:7f:41:
                    ce:74:6b:1c:3e:94:6e:fc:17:3a:a3:15:8e:3f:23:
                    58:d4:63:05:b1:a5:29:14:47:0b:76:3a:62:e4:fc:
                    84:12:bb:9c:19:d3:13:39:43:fb:45:b9:e9:34:ec:
                    96:a4:82:8a:63:2f:0b:b7:ff:ec:92:0d:c6:c8:b9:
                    fb:86:e5:53:ec:cf:b1:a4:30:61:62:a4:e5:35:86:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CA:74:12:BA:1C:D8:C9:4B:DA:AB:8C:44:33:8C:5D:A7:17:02:18
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138312e302f32342d3234203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:66:1f:ed:35:4c:c7:32:d4:3b:9a:8b:a9:17:f7:51:a1:35:
         f6:21:39:f5:a4:05:a7:a9:98:1d:1c:83:ff:cc:9c:ee:a6:e0:
         67:81:f9:cc:ce:c7:e0:52:60:61:17:7b:1a:d7:90:c2:a8:18:
         b2:7f:49:c1:bc:99:20:31:f1:a4:e5:b0:ec:b8:d3:cc:86:74:
         7c:ae:c3:88:e1:46:30:dd:05:00:fd:81:5e:b2:dd:cc:e6:8c:
         f9:45:f9:d4:fd:ab:ae:f5:97:ea:e5:0a:bf:fb:02:da:3f:b2:
         ee:82:3c:94:42:cc:c1:47:95:05:87:1d:46:9f:dd:91:87:fe:
         29:f9:f3:5e:80:e0:f5:ae:d7:b0:ff:e7:c3:f0:c3:52:a0:f9:
         47:4d:21:8b:ae:4f:62:e2:98:fc:9d:d1:4e:96:ba:58:dc:ca:
         7d:6b:83:01:61:92:db:1f:4e:e2:82:c6:9d:42:be:50:02:71:
         35:43:dd:41:65:f8:da:bd:06:3c:ca:14:e7:33:5a:14:b5:d8:
         1f:36:f8:07:73:f9:30:02:13:45:ce:10:ca:f6:1f:eb:c5:2f:
         0a:df:d0:b8:d1:56:71:ac:e3:4f:b1:56:05:a9:0b:c1:56:6d:
         59:ba:0a:12:12:ec:a8:05:6e:4d:9e:d3:f8:45:9b:45:9c:b0:
         83:ab:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org