Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa
File:                     34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa (raw, json)
Hash identifier:          FuFdSnTpwPEozo06pWPmZAXq3Nyq4grt3WbaRG4gioo=
Subject key identifier:   99:73:94:66:35:42:63:16:48:FB:92:31:8F:66:AF:AD:04:75:5B:D1
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       4BE3DAC3B477E386C59DAB6CCDCBC31F0EBF6AB7
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa
Signing time:             Tue 05 Mar 2024 18:02:48 +0000
ROA not before:           Tue 05 Mar 2024 17:57:48 +0000
ROA not after:            Tue 04 Mar 2025 18:02:48 +0000
asID:                     269804
IP address blocks:        45.167.124.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e3:da:c3:b4:77:e3:86:c5:9d:ab:6c:cd:cb:c3:1f:0e:bf:6a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Mar  5 17:57:48 2024 GMT
            Not After : Mar  4 18:02:48 2025 GMT
        Subject: CN=997394663542631648FB92318F66AFAD04755BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:b6:05:52:05:82:b1:84:7a:96:08:1b:a5:
                    fe:3f:24:c1:3e:03:0f:9f:55:84:5b:64:ed:ff:14:
                    70:6d:f1:85:f9:2d:5f:28:97:a1:2f:5f:83:e9:b0:
                    36:f8:b1:5b:a6:27:bf:fb:2b:97:79:b4:02:0d:96:
                    28:89:41:4a:69:d4:cb:5a:fe:70:51:ef:0b:c4:69:
                    65:dc:9a:79:d7:78:f7:fd:f8:f2:57:87:06:29:80:
                    48:85:d0:cd:57:05:fb:aa:61:92:fe:81:21:06:4f:
                    c1:38:2c:38:f8:f5:f6:0f:9b:f2:7b:8f:44:fe:8b:
                    a4:cb:cf:b2:73:c0:a7:24:84:b7:bf:21:39:57:50:
                    53:9c:57:58:22:81:dc:25:22:24:be:cd:45:17:e5:
                    7c:5a:ef:c6:d3:4b:75:2e:97:e8:6b:25:25:8d:ed:
                    fc:ef:69:c0:a4:2c:9d:09:e1:62:3a:e6:12:d2:41:
                    7f:94:ab:5c:98:a3:48:2a:14:49:08:87:8a:c4:93:
                    20:a4:68:a6:17:4b:fb:c6:49:54:02:48:4c:90:e0:
                    77:63:87:3a:08:17:18:0e:bf:f0:a6:9f:d3:11:15:
                    d3:b9:71:cc:94:f4:95:b9:0d:34:d6:e3:72:f1:2c:
                    14:81:b8:5e:3b:72:6c:9f:36:5f:14:2d:f5:2e:90:
                    d7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:73:94:66:35:42:63:16:48:FB:92:31:8F:66:AF:AD:04:75:5B:D1
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132342e302f32332d3234203d3e20323639383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:43:9f:4e:9f:56:0b:1a:1c:22:f7:93:07:93:b4:8b:3c:c0:
         58:ff:03:d0:b2:50:0b:1b:7f:3e:ae:14:64:93:f4:ff:c0:38:
         4f:60:73:f2:ed:d3:98:d9:d3:d1:36:00:30:ad:e4:92:fa:12:
         32:a3:e8:3e:47:bf:9f:32:9c:5f:41:4c:dc:dd:98:73:cd:6a:
         03:e6:c4:30:48:86:47:ea:35:5d:5a:bb:56:c2:bd:69:a7:40:
         d2:ac:0d:a7:88:0d:06:f6:22:83:e9:7a:75:4a:e8:fc:d7:c8:
         b4:63:7c:ce:da:40:b3:3d:e5:7d:fe:0c:68:d9:99:f1:e3:fe:
         52:6a:d9:28:cb:0f:11:0c:ab:6f:50:a8:58:6c:07:1b:a2:6e:
         b2:ec:b1:5f:b2:9a:cd:b0:48:2e:f5:5d:89:84:61:4e:c9:6a:
         3d:a5:15:4c:31:3a:42:95:4f:e7:84:b6:c8:ca:f1:32:c8:29:
         33:e4:4a:89:c1:a8:f4:67:46:5f:87:5e:c7:96:9f:de:70:c5:
         52:b2:ef:40:20:33:a3:fe:ec:8f:b0:69:22:84:d4:37:0a:06:
         56:d6:9a:f0:de:ef:07:e5:90:b8:ff:86:2a:49:74:71:79:10:
         62:82:c1:ee:f6:fa:ac:f2:a2:b7:10:3e:93:de:d8:de:b2:26:
         b5:e6:0b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org