Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32342d3234203d3e20323635353936.roa
File:                     34352e3138312e34302e302f32342d3234203d3e20323635353936.roa (raw, json)
Hash identifier:          UQcGKzA7adetKjuctM1CoGgbSMyvJnugBbe5aBqUDtI=
Subject key identifier:   0C:51:E7:72:41:39:1C:75:9E:8B:69:E0:48:58:2C:C7:E7:F5:67:63
Certificate issuer:       /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial:       442F5149A77F38313C400087EAB4334881F4700A
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32342d3234203d3e20323635353936.roa
Signing time:             Tue 05 Mar 2024 18:13:15 +0000
ROA not before:           Tue 05 Mar 2024 18:08:15 +0000
ROA not after:            Tue 04 Mar 2025 18:13:15 +0000
asID:                     265596
IP address blocks:        45.181.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2f:51:49:a7:7f:38:31:3c:40:00:87:ea:b4:33:48:81:f4:70:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
        Validity
            Not Before: Mar  5 18:08:15 2024 GMT
            Not After : Mar  4 18:13:15 2025 GMT
        Subject: CN=0C51E77241391C759E8B69E048582CC7E7F56763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:30:ed:6e:c3:8f:20:62:9c:bf:cc:f2:e6:
                    81:b5:47:55:ab:8c:3a:b3:14:cb:d3:3b:b4:a9:f5:
                    6a:ca:02:69:b9:fa:0c:25:e4:44:9a:dc:31:cc:3a:
                    9b:a8:25:f5:dd:96:c1:da:44:18:1c:6d:fa:99:ab:
                    bf:bd:9b:79:ba:f4:02:f2:da:e7:8f:7e:d8:25:97:
                    6e:a9:64:3b:6b:46:80:2b:b8:04:f5:db:bc:ee:aa:
                    93:b1:f1:ee:aa:0b:0e:04:a0:76:fe:c8:0e:ba:01:
                    51:c4:83:cf:16:75:10:51:80:18:fd:a8:b4:fd:d1:
                    7d:c5:17:13:8b:2d:66:67:59:ce:2e:cf:41:87:86:
                    a5:31:80:e2:e5:fd:f6:12:15:39:01:68:b6:b3:dd:
                    cb:aa:a7:07:af:ee:23:d5:b4:49:3a:1b:c4:38:93:
                    f4:26:87:c1:4a:3d:2e:a2:95:b4:2c:31:71:f3:ee:
                    cf:0b:b0:58:86:43:d0:d9:e0:c8:b0:56:c6:b6:68:
                    06:a4:90:7f:d4:79:70:05:ac:37:64:32:bc:c3:2e:
                    c7:2e:1e:ed:4d:cd:c1:a4:da:2f:71:0a:93:92:41:
                    e0:b7:19:b4:50:18:a6:8d:e0:a1:32:8c:85:99:73:
                    92:ca:29:ac:83:e6:bc:05:aa:01:1a:af:69:7d:08:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:51:E7:72:41:39:1C:75:9E:8B:69:E0:48:58:2C:C7:E7:F5:67:63
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34302e302f32342d3234203d3e20323635353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:52:dc:43:11:b3:1f:13:a7:53:d4:05:b1:96:7b:b4:ce:df:
         c2:3f:43:97:b6:d5:4f:b2:03:6c:4d:98:b1:0a:94:48:75:c0:
         ed:4f:2a:c7:ef:94:38:d8:52:56:c3:ed:55:28:67:9e:f1:ec:
         59:20:a6:b8:d1:32:10:39:b1:9f:49:8e:c9:20:3d:96:7f:6c:
         f2:87:fe:0c:e6:5d:b1:74:c6:c4:8c:e3:d9:3f:15:a9:6c:26:
         3b:c2:29:8b:4b:df:87:ec:3a:72:09:69:d2:69:56:16:51:97:
         aa:3b:69:01:2f:e6:58:e2:1e:a4:ad:ce:ec:61:db:e9:98:73:
         f8:d9:bc:64:46:f7:0c:e8:13:44:f3:b9:7a:fc:2f:e8:e8:e5:
         24:df:82:a6:e7:f8:0a:26:13:5f:06:02:61:53:a9:d8:b4:46:
         9d:50:53:27:a6:b3:ab:62:ea:22:aa:ea:8a:a3:2e:33:44:df:
         d7:bd:c0:96:a4:5e:00:45:bc:1e:be:be:35:b2:59:1b:17:86:
         1f:a7:27:5e:25:76:d5:f4:5a:93:86:23:b1:79:13:e2:9c:b8:
         47:f1:83:97:0d:4c:82:aa:70:4a:c8:4c:1a:77:bd:6a:84:5c:
         3e:72:8b:d6:e4:5d:10:01:b1:84:32:0f:8c:b1:1f:7d:25:16:
         87:65:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org