Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32322d3232203d3e20323637363739.roa
File:                     34352e3136322e36302e302f32322d3232203d3e20323637363739.roa (raw, json)
Hash identifier:          +SOU5GoivA/n8t+GEaeUM3UkT3OJoyFgp91V3dyGOXk=
Subject key identifier:   2A:A4:51:94:7E:2C:58:C3:FB:3B:5E:31:53:D3:7C:DA:69:4E:9E:14
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       23C47908B4E67A92F14DBF71886A6CAE0706B32C
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32322d3232203d3e20323637363739.roa
Signing time:             Tue 05 Mar 2024 17:42:48 +0000
ROA not before:           Tue 05 Mar 2024 17:37:48 +0000
ROA not after:            Tue 04 Mar 2025 17:42:48 +0000
asID:                     267679
IP address blocks:        45.162.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c4:79:08:b4:e6:7a:92:f1:4d:bf:71:88:6a:6c:ae:07:06:b3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Mar  5 17:37:48 2024 GMT
            Not After : Mar  4 17:42:48 2025 GMT
        Subject: CN=2AA451947E2C58C3FB3B5E3153D37CDA694E9E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:e7:0c:e7:9e:99:ac:3d:26:8d:c8:9a:1e:
                    53:1c:3f:a8:c2:b9:cc:46:5b:32:9f:bf:c4:8f:4c:
                    73:ff:ef:c1:33:c1:cb:7c:75:02:69:98:68:0a:f9:
                    6d:70:2a:d6:bb:40:fa:36:68:82:dd:3b:db:b5:0e:
                    05:64:f8:26:2b:84:73:f9:f5:c4:59:0b:d0:12:cd:
                    cb:28:e0:29:90:a7:23:a1:1d:5e:64:9a:bf:4f:94:
                    6c:8c:e1:17:a6:f6:ee:76:52:34:35:e4:f3:78:83:
                    33:ef:24:48:d7:90:91:d0:d1:8b:fb:88:b1:58:43:
                    49:82:a1:f3:77:38:3c:48:c0:e2:90:ad:83:0c:d9:
                    fd:cc:c1:c9:b9:b1:73:ca:ac:7e:8c:d7:59:c4:a5:
                    01:66:96:fa:08:00:35:e6:99:46:63:8e:66:ab:73:
                    56:d9:ed:c9:90:1c:88:4d:02:e5:42:46:b0:70:fb:
                    7d:cd:aa:39:28:1f:0d:dc:79:1c:b4:7d:22:14:bf:
                    5a:72:c0:0b:aa:3d:76:78:ca:b1:fa:71:31:49:6a:
                    01:ee:b0:41:2d:63:7b:d5:cc:8e:7a:e1:c1:30:95:
                    b5:bc:12:19:7a:2e:1e:a3:c0:76:5e:4d:3b:69:99:
                    2a:d8:10:09:b5:ee:af:0e:b5:69:0b:57:7b:97:ac:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A4:51:94:7E:2C:58:C3:FB:3B:5E:31:53:D3:7C:DA:69:4E:9E:14
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32322d3232203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:3d:9b:6e:4c:32:6f:cf:9f:b1:aa:87:e9:ff:a3:3e:00:14:
         a9:b3:5f:21:90:87:fa:a8:a6:86:ec:5d:90:b1:32:a3:c1:35:
         a6:33:31:97:4e:e7:39:40:a4:67:e3:00:23:50:d0:5c:78:47:
         50:d5:e7:f9:2f:74:68:07:16:25:00:de:bc:2a:5d:7d:c7:1c:
         d6:ff:14:a4:7b:60:cc:da:1a:c7:50:57:e6:10:44:12:ff:e9:
         32:1d:0b:78:ff:52:8f:a0:9d:86:e8:6e:ee:f1:06:1a:f6:ca:
         75:40:8d:a2:57:6f:92:cd:0f:9b:00:ff:a1:2b:fb:b9:7c:8e:
         63:c4:99:d2:eb:ab:21:0b:5b:5c:44:00:2d:df:22:00:f7:84:
         96:54:18:db:73:93:4c:30:60:27:89:8a:5c:54:d3:d0:ec:e9:
         3f:55:0a:05:61:8a:6f:36:19:28:94:d3:d4:f7:15:e6:e2:5d:
         65:8f:ef:a5:c1:2b:6a:83:24:55:fb:cc:d5:54:e7:46:70:ef:
         92:f4:fb:c1:92:1d:2c:e8:9f:67:15:69:46:02:ac:14:6f:12:
         24:cd:b7:23:44:67:51:28:bb:8c:3a:5c:59:2c:69:fa:3d:44:
         ec:cd:e8:f7:23:e1:bb:d1:23:54:2e:1a:fa:d8:bd:37:4b:4a:
         c8:26:4c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:29:38 2024 by rpki-client on console-fra.rpki-client.org