Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa
File:                     34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa (raw, json)
Hash identifier:          jtZMyyFx6oXxTAPxFaCRpMx0n4wyikNk8QvNJ3Dgt3Y=
Subject key identifier:   0D:5C:7E:4E:D7:FC:0B:E5:A0:04:FB:AB:59:E9:69:94:D2:71:ED:DC
Certificate issuer:       /CN=BD9037968409387615A2867C81BDF4EE88009203
Certificate serial:       2FE024C6B5BE3C5FDF3E98B8D790C7C41A3A1A67
Authority key identifier: BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa
Signing time:             Thu 27 Jun 2024 19:15:02 +0000
ROA not before:           Thu 27 Jun 2024 19:10:02 +0000
ROA not after:            Thu 26 Jun 2025 19:15:02 +0000
asID:                     267704
IP address blocks:        45.162.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e0:24:c6:b5:be:3c:5f:df:3e:98:b8:d7:90:c7:c4:1a:3a:1a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9037968409387615A2867C81BDF4EE88009203
        Validity
            Not Before: Jun 27 19:10:02 2024 GMT
            Not After : Jun 26 19:15:02 2025 GMT
        Subject: CN=0D5C7E4ED7FC0BE5A004FBAB59E96994D271EDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:94:89:ec:70:54:e4:54:ca:2d:9c:20:97:08:
                    ca:fa:14:dd:93:a5:b4:bc:4c:b0:a4:ac:5b:2d:67:
                    7f:54:e0:3b:c1:73:4d:51:4a:ed:05:ff:87:10:37:
                    42:a3:57:f8:e8:4c:cf:04:1c:76:c1:41:19:46:ec:
                    13:4c:6a:51:a2:e1:3d:6c:5f:ba:ec:69:24:f9:f7:
                    31:f1:85:0a:62:37:6f:20:98:43:18:92:fa:84:e4:
                    ac:ac:01:c1:ea:00:6e:60:62:db:a0:83:e9:4f:30:
                    57:e3:40:c3:85:54:4f:c3:38:c7:94:3c:36:c0:2c:
                    05:af:3f:ec:64:b5:b7:5d:f4:80:92:cc:e6:fe:18:
                    bf:90:bf:d6:a7:97:55:95:d2:5f:e3:7d:7e:7c:47:
                    4c:63:34:20:e7:e6:72:39:38:4a:87:d5:22:c1:45:
                    ea:87:9f:bd:88:d6:7d:29:6b:5f:32:c6:0c:b1:f8:
                    24:8b:e2:32:62:e8:fa:29:0d:40:a6:2c:0c:50:05:
                    7a:f8:f1:f0:c5:94:33:0c:59:e5:87:75:b6:e0:a3:
                    ee:0a:9d:76:ef:cf:ee:07:38:fd:65:60:45:ba:48:
                    ef:7d:e6:cc:c9:63:a0:a8:1f:34:a9:56:ee:fa:4b:
                    4d:03:cb:70:9a:69:c1:83:50:83:0a:01:df:a9:4d:
                    0a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5C:7E:4E:D7:FC:0B:E5:A0:04:FB:AB:59:E9:69:94:D2:71:ED:DC
            X509v3 Authority Key Identifier:
                keyid:BD:90:37:96:84:09:38:76:15:A2:86:7C:81:BD:F4:EE:88:00:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/BD9037968409387615A2867C81BDF4EE88009203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD9037968409387615A2867C81BDF4EE88009203.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B2D6A5523212477BC8437C47D491DE7D1434D403CBBCC5725BD2B0C2E507271/0/34352e3136322e3138322e302f32342d3234203d3e20323637373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:2e:1d:e9:88:db:f7:fe:33:5e:26:05:97:2a:ee:b2:16:68:
         dc:94:e6:a5:d2:d9:6b:8b:b1:08:31:80:bd:d0:41:69:51:ad:
         62:02:bd:06:70:89:3f:76:0e:8c:ca:20:06:38:99:32:84:27:
         86:83:e7:9b:f4:cd:3a:9b:3e:3b:43:97:e8:ca:60:f1:4f:09:
         e0:a9:95:3a:8c:bd:dc:5b:01:be:0c:2b:91:59:52:ed:8d:ee:
         c6:3a:d0:d0:73:20:16:6b:50:85:84:2d:bd:5e:8c:65:31:7d:
         a9:73:10:4e:f0:fb:4e:2b:fd:be:87:d3:41:b9:c1:28:e2:5d:
         39:55:6b:fc:3a:0a:63:e0:5a:2b:0b:c1:94:d3:5f:56:4a:95:
         2e:e7:2c:e4:2c:2c:9a:09:22:08:d7:ac:76:37:d8:f4:92:90:
         e8:1c:3b:31:4a:a5:be:19:f0:99:8c:f0:0d:01:5a:5b:20:b8:
         3a:b1:52:71:b2:47:ac:07:c0:b2:9b:0c:0e:8e:2a:c4:35:d3:
         41:33:17:f7:21:7c:47:1e:0c:3e:92:56:35:14:f6:97:fb:b6:
         61:7e:d4:1b:40:e9:de:f6:16:68:be:85:6a:18:ff:b8:1b:a5:
         b2:03:16:b4:e0:c0:1b:e3:f6:d5:c1:b1:f5:e8:f1:c2:d2:2b:
         a7:a4:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org