Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/34352e3138312e34322e302f32382d3239203d3e203130333130.roa
File:                     34352e3138312e34322e302f32382d3239203d3e203130333130.roa (raw, json)
Hash identifier:          KQUQ2yy6vqMKpTEasfz5Sb2UBE7aOe1aD1m6rSX+gNc=
Subject key identifier:   5F:19:AF:F9:97:81:F7:E4:64:FF:D2:01:21:A1:0F:B9:66:8B:77:AD
Certificate issuer:       /CN=CD0B4D24BCD10878701F4C262615351929118638
Certificate serial:       2B0D7729F3671AB5CE8A00C3803244A1D3EA887F
Authority key identifier: CD:0B:4D:24:BC:D1:08:78:70:1F:4C:26:26:15:35:19:29:11:86:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/34352e3138312e34322e302f32382d3239203d3e203130333130.roa
Signing time:             Tue 05 Mar 2024 17:43:34 +0000
ROA not before:           Tue 05 Mar 2024 17:38:34 +0000
ROA not after:            Tue 04 Mar 2025 17:43:34 +0000
asID:                     10310
IP address blocks:        45.181.42.0/28 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0d:77:29:f3:67:1a:b5:ce:8a:00:c3:80:32:44:a1:d3:ea:88:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0B4D24BCD10878701F4C262615351929118638
        Validity
            Not Before: Mar  5 17:38:34 2024 GMT
            Not After : Mar  4 17:43:34 2025 GMT
        Subject: CN=5F19AFF99781F7E464FFD20121A10FB9668B77AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d5:9e:72:e4:cf:54:ac:2a:f8:54:2f:e2:0e:
                    87:a1:6f:f1:9d:c4:bf:30:b6:05:33:b9:3a:08:dd:
                    15:7e:82:c6:f8:1f:e5:b7:00:20:9d:e2:6c:0b:6b:
                    ef:78:f9:8d:40:fe:13:7d:7f:b7:08:4e:9e:a2:8c:
                    69:71:3c:d3:d4:d7:87:a7:84:7e:cd:dc:f3:02:e1:
                    6f:40:ac:c1:23:50:03:76:57:de:81:20:c2:2c:8b:
                    f1:42:a2:4c:ea:ec:2e:ec:65:f1:79:68:ab:35:ff:
                    8b:3c:bf:ab:82:35:56:f6:8f:be:88:db:b2:9b:71:
                    35:19:a0:4c:cd:19:db:09:45:79:cb:7d:e6:1e:92:
                    42:41:fa:6d:65:7b:57:95:a0:fe:35:d6:c7:9f:84:
                    15:0e:81:29:4d:a8:62:cb:7e:e3:79:36:5b:90:aa:
                    fc:08:67:fe:08:27:0f:52:6d:72:44:1d:0d:8e:e5:
                    4f:cb:da:53:60:65:69:6e:8c:72:8c:b2:8a:e6:95:
                    7c:ef:c2:ae:83:9b:d8:55:01:97:90:c5:9a:3c:61:
                    67:de:07:74:ed:c3:06:d5:b9:12:1d:16:23:8c:8a:
                    9f:15:0a:c2:d3:6f:bc:ce:87:43:72:7d:7a:ee:bc:
                    3c:5b:56:03:eb:88:1e:e8:d1:e3:2f:b0:70:4f:6c:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:19:AF:F9:97:81:F7:E4:64:FF:D2:01:21:A1:0F:B9:66:8B:77:AD
            X509v3 Authority Key Identifier:
                keyid:CD:0B:4D:24:BC:D1:08:78:70:1F:4C:26:26:15:35:19:29:11:86:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/CD0B4D24BCD10878701F4C262615351929118638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0B4D24BCD10878701F4C262615351929118638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B39F5795B5CC3D5EBF32109ECEE4D926FE5FC4173B1D5D1672EA16AA1F859666/0/34352e3138312e34322e302f32382d3239203d3e203130333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.42.0/28

    Signature Algorithm: sha256WithRSAEncryption
         8e:2c:91:77:ad:49:f9:05:5e:e6:89:ca:27:a5:38:69:26:74:
         ae:09:05:9f:72:7f:c9:09:73:43:48:6d:40:17:23:4e:2d:fd:
         87:5f:d8:6a:51:9b:5e:11:0a:c9:ac:f0:82:34:18:cc:a4:bf:
         a3:83:93:ba:12:38:c1:7a:eb:81:e3:09:77:b2:05:e9:72:4a:
         ec:e2:c7:c8:24:53:08:77:83:1c:77:99:7d:f9:f5:94:83:6f:
         79:29:01:a1:22:5b:16:5d:f5:c7:27:81:d7:e7:e3:a5:0e:eb:
         20:c8:35:ae:fa:ab:72:b1:14:59:30:39:f6:06:15:ac:50:47:
         07:ee:5c:e9:63:51:ef:2a:82:5d:45:55:1b:93:5e:85:2d:ba:
         f3:6a:fa:2d:73:02:73:84:bb:7a:33:7d:c5:3e:25:bb:b0:0a:
         e5:1e:9a:d5:ee:e2:3e:81:cc:37:ea:d8:99:df:b2:ad:4a:c9:
         4e:49:bc:2f:5f:b0:1a:e1:85:c5:06:e6:c9:e2:4b:e5:0f:b2:
         e6:43:21:cd:a6:8c:09:dc:fc:8e:b4:a5:8c:75:b6:39:9e:26:
         bf:7e:bf:ba:9b:c3:72:a6:43:3e:c3:cd:42:3e:75:a5:ac:88:
         aa:e5:bf:0f:13:2b:ca:e9:9b:c7:71:9d:25:50:7a:05:ad:75:
         10:94:eb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org