Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa
File:                     34352e3136322e36302e302f32332d3234203d3e20323637363739.roa (raw, json)
Hash identifier:          hnUoTmHG1E/+y80Bt80TICA2zv/USE1eUf/6IdjP2Pk=
Subject key identifier:   10:72:40:99:95:5F:8D:92:35:03:76:CB:0F:68:D2:E0:43:51:3B:76
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       108A7FAD8A97E52D1F015551B3027A749E7E82C8
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa
Signing time:             Tue 05 Mar 2024 17:42:47 +0000
ROA not before:           Tue 05 Mar 2024 17:37:47 +0000
ROA not after:            Tue 04 Mar 2025 17:42:47 +0000
asID:                     267679
IP address blocks:        45.162.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8a:7f:ad:8a:97:e5:2d:1f:01:55:51:b3:02:7a:74:9e:7e:82:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Mar  5 17:37:47 2024 GMT
            Not After : Mar  4 17:42:47 2025 GMT
        Subject: CN=10724099955F8D92350376CB0F68D2E043513B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3e:ee:e4:cb:47:12:9a:5b:04:95:7a:43:b7:
                    e3:bb:0a:17:a9:b0:8c:df:bb:3a:dd:58:12:78:99:
                    72:08:e3:07:7f:ba:2b:bf:6c:93:94:8c:f8:2f:ad:
                    50:1a:fe:47:5b:91:37:90:14:b5:a1:20:82:00:3d:
                    00:a7:33:17:b1:a2:2d:ec:4a:64:83:67:51:15:e0:
                    ae:ea:8b:83:61:42:ab:89:0e:3d:b0:5a:d2:12:bb:
                    e6:5c:1e:d0:29:7e:44:07:bf:bf:36:b7:b3:bd:cb:
                    ed:d6:5e:6d:0d:28:2a:e9:da:2f:c7:2f:2b:59:f9:
                    34:75:44:95:d6:38:0e:9d:a8:78:7d:21:37:1c:ab:
                    89:35:1a:5b:72:f4:bd:df:9a:12:cd:9a:90:31:3a:
                    fb:b6:9b:c1:ff:34:a3:c3:a0:b7:2b:9e:c1:4e:e1:
                    d7:e8:eb:55:4e:d8:9e:dc:40:4b:14:17:88:78:22:
                    d5:00:fd:78:62:08:3b:33:a4:a1:00:9f:65:a7:8e:
                    9e:7a:25:ba:ac:c9:16:b8:4c:6e:d2:9a:3f:8a:c0:
                    de:c6:8d:58:66:e2:da:12:ea:28:b2:71:ab:5f:cd:
                    ac:96:d8:cf:75:71:43:1e:5f:cc:2b:57:a2:00:47:
                    6b:8d:37:52:ea:66:1d:02:50:38:17:23:79:f8:9d:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:72:40:99:95:5F:8D:92:35:03:76:CB:0F:68:D2:E0:43:51:3B:76
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:f3:04:d3:5c:6e:ea:65:3c:13:18:4d:a9:71:ee:2d:ac:
         87:d0:65:ef:09:ff:fb:74:17:72:9f:7b:95:49:2a:ba:5c:90:
         a0:33:71:e1:db:39:9f:1f:89:84:44:2f:03:0d:d9:cc:49:96:
         02:8b:c6:f1:fe:e8:5c:83:3c:79:fc:66:a9:98:a7:d1:ef:e2:
         bd:d2:81:4f:bd:e8:fa:6b:11:93:2b:f9:15:3c:fe:cc:00:72:
         96:b3:10:09:e2:3a:52:b1:60:b1:12:0b:19:36:39:a6:6d:d6:
         78:1b:cd:07:ed:e1:d5:e2:b1:72:80:22:85:74:15:8d:43:57:
         2e:53:17:f8:d0:fd:72:a9:21:d0:1d:24:88:e5:fd:2f:77:a6:
         16:2b:61:41:ac:4f:b6:f3:5f:13:fb:cc:a2:d4:75:59:56:6b:
         2c:91:3d:a6:e3:9a:4c:84:73:0e:1d:e6:72:ec:d0:35:83:85:
         b7:8e:1d:81:74:82:62:88:76:95:13:d3:98:05:03:de:8f:48:
         e2:52:0f:26:d0:2a:7d:7f:02:8f:d7:b9:32:fe:33:21:05:fd:
         57:57:9b:3d:00:ea:d5:3e:57:fc:e5:6f:de:6d:6a:6c:cf:85:
         ea:87:91:78:ce:e1:ae:72:d4:8a:b6:23:bc:93:a9:7f:7a:50:
         7c:04:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 10:29:38 2024 by rpki-client on console-fra.rpki-client.org