Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135362e302f32342d3234203d3e20323633313537.roa
File:                     34352e3136372e3135362e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          wHOZ+MtELKt/cGo8RUu1nZGaZ2BNS4AM/B2jDWgNA9Y=
Subject key identifier:   06:1D:2D:B1:90:4F:DE:21:E5:03:A9:71:5D:E7:10:86:4F:82:3E:00
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       5CA940749B660168E44A0AF22F33D78A5C355BDA
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135362e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 05 Mar 2024 17:50:18 +0000
ROA not before:           Tue 05 Mar 2024 17:45:18 +0000
ROA not after:            Tue 04 Mar 2025 17:50:18 +0000
asID:                     263157
IP address blocks:        45.167.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 16:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a9:40:74:9b:66:01:68:e4:4a:0a:f2:2f:33:d7:8a:5c:35:5b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Mar  5 17:45:18 2024 GMT
            Not After : Mar  4 17:50:18 2025 GMT
        Subject: CN=061D2DB1904FDE21E503A9715DE710864F823E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:fc:f5:9d:19:d0:f9:c5:7c:88:8a:0c:7a:
                    08:e2:ff:d0:b9:5b:32:93:80:e3:85:67:46:e6:38:
                    90:4a:a0:f7:1d:2b:a1:be:36:54:d2:5f:73:d5:db:
                    88:10:08:26:10:a7:1b:78:8f:df:a9:17:1d:a7:cc:
                    f2:85:cb:49:72:01:73:92:53:1b:fa:57:00:9f:69:
                    fa:55:ec:6a:3b:92:e4:b1:11:03:c0:c9:c3:f6:c5:
                    97:6f:48:64:2b:9a:06:f5:52:de:e0:47:db:15:3b:
                    5f:7c:df:34:d4:a5:b6:6b:a0:a3:a4:f1:2a:14:71:
                    64:3b:31:b9:14:20:d9:48:2c:48:af:70:fb:ec:e6:
                    02:7b:c0:83:c5:95:cc:b5:a5:2e:29:48:30:6b:6d:
                    35:b0:6b:27:80:ed:64:22:a6:c8:95:68:ca:56:b3:
                    55:0e:83:97:8c:e3:31:99:6c:83:e4:de:83:cc:4b:
                    3a:9c:e2:1e:db:14:9a:b1:d8:58:b9:a7:9b:3f:4e:
                    1a:eb:96:4a:0c:16:8a:ee:f8:fb:54:f7:30:93:98:
                    8e:1b:52:55:87:e9:65:5b:c1:d1:36:f7:92:1a:6c:
                    0b:46:33:72:b7:50:0f:81:83:1d:60:7a:ff:da:76:
                    1d:0b:c2:11:06:7b:6d:b7:10:d4:4c:92:8f:52:dc:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1D:2D:B1:90:4F:DE:21:E5:03:A9:71:5D:E7:10:86:4F:82:3E:00
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135362e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:7b:49:99:00:83:81:f9:3d:5f:42:c9:5f:6f:d6:7c:56:35:
         70:75:32:c1:e6:32:35:1e:18:c9:a9:26:f8:d3:74:e0:af:33:
         e7:3b:f8:84:f1:1f:64:2c:88:25:4b:d9:6c:f7:b9:de:d2:94:
         a4:be:8a:0b:07:2c:94:3d:e4:13:09:fa:fc:6e:35:c1:09:89:
         d6:99:ee:a5:ed:d8:38:18:76:11:8a:6b:52:9f:9f:c1:1f:4f:
         a0:c7:60:c7:7a:13:1e:08:f3:24:f8:5f:4e:c8:3c:8d:43:6d:
         14:a9:ae:13:12:e1:32:50:d4:aa:30:95:32:c3:de:d1:98:fd:
         ee:50:a5:0a:ca:53:9b:fa:63:f1:8f:b8:2f:2e:37:23:f4:a1:
         21:ff:21:28:ee:f8:91:c8:c2:95:02:09:0f:b0:cb:84:e4:6a:
         01:93:d4:51:5c:7c:f2:2c:43:e6:67:74:f5:71:06:4d:90:66:
         4c:0d:ad:91:19:89:b6:eb:62:22:67:f7:b8:e1:8e:e6:4c:b5:
         75:89:d0:b0:de:37:fb:13:d6:75:25:45:05:c0:0f:58:de:45:
         5a:71:b6:f2:8e:7f:e2:e3:2f:d5:81:c0:39:a0:d5:96:de:b1:
         d5:9b:c6:7b:da:31:d2:81:e8:84:68:d1:18:f1:30:93:84:2e:
         4b:d1:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:08:49 2024 by rpki-client on console-fra.rpki-client.org