Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa
File:                     34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa (raw, json)
Hash identifier:          LbNqcUGwWACDVPHvNeoEJtYThRl4ymQO+zsESkcdo74=
Subject key identifier:   10:41:3D:08:40:92:A8:1E:16:84:BD:3D:60:7F:ED:3E:82:DA:4E:1D
Certificate issuer:       /CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
Certificate serial:       50974FBCD80501D0A14C58F4BA9183167B88EB49
Authority key identifier: A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa
Signing time:             Tue 10 Sep 2024 12:50:00 +0000
ROA not before:           Tue 10 Sep 2024 12:45:00 +0000
ROA not after:            Tue 09 Sep 2025 12:50:00 +0000
asID:                     264800
IP address blocks:        45.172.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:97:4f:bc:d8:05:01:d0:a1:4c:58:f4:ba:91:83:16:7b:88:eb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
        Validity
            Not Before: Sep 10 12:45:00 2024 GMT
            Not After : Sep  9 12:50:00 2025 GMT
        Subject: CN=10413D084092A81E1684BD3D607FED3E82DA4E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:37:ef:4b:df:51:b0:44:b7:0a:57:ea:c9:
                    87:88:33:52:62:e4:1d:62:ac:37:0f:f0:c4:95:32:
                    4c:9b:1c:99:75:b2:7d:ff:9a:5f:95:0f:53:63:35:
                    b7:2e:0e:24:97:98:66:58:75:58:28:bb:ce:9a:30:
                    da:8d:c9:09:f8:ff:b2:64:83:55:29:98:14:6d:a8:
                    9c:33:08:97:be:f6:1c:39:e9:e3:96:41:1d:0e:ca:
                    58:ab:af:c9:8e:32:09:90:37:61:ea:39:2c:df:0f:
                    89:6a:d0:02:98:e3:5b:d7:f3:0b:07:3a:5a:93:8e:
                    40:7c:90:64:2b:01:bd:cc:f3:05:ed:43:d6:93:03:
                    72:54:3b:2d:39:8c:7b:1d:79:b2:4d:82:f5:06:c4:
                    5d:90:27:be:a8:c8:1b:ef:eb:47:01:1a:5c:9f:f1:
                    8a:cb:9b:19:c0:5e:ee:c3:61:86:19:79:e7:a1:f2:
                    70:bd:ed:f5:fc:0d:af:54:aa:3b:a7:38:b1:45:a5:
                    76:89:3f:08:96:ca:cf:ec:9f:10:59:6e:a8:a2:22:
                    9f:81:6f:36:5d:6e:67:aa:b6:45:20:24:ad:a2:29:
                    9f:5c:18:11:b6:0d:f0:03:5b:20:9b:a4:4e:9a:c4:
                    e6:b5:9f:7d:6c:6d:fe:2a:75:c7:f6:29:8a:07:28:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:3D:08:40:92:A8:1E:16:84:BD:3D:60:7F:ED:3E:82:DA:4E:1D
            X509v3 Authority Key Identifier:
                keyid:A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134322e302f32342d3234203d3e20323634383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:3c:42:2b:0f:b7:27:86:8d:82:73:07:56:19:76:72:3b:ca:
         35:ad:f7:ca:fd:2c:70:9f:72:f3:0e:6b:9a:f0:c8:69:9a:c3:
         f4:b1:85:0c:16:19:c2:f7:12:2e:b0:dc:69:46:dc:58:0e:b1:
         dc:d2:19:5e:86:08:13:9b:f6:da:47:a0:14:a8:03:5c:a0:67:
         6d:d5:42:5a:aa:d7:e2:b7:14:aa:9a:38:59:09:3d:d3:47:11:
         b9:22:8f:a2:87:f3:bc:eb:a9:a8:07:ea:d1:10:06:50:cd:9a:
         a3:a0:19:61:e2:04:e4:1d:58:94:10:23:2c:96:10:56:63:a3:
         e7:94:29:9e:b7:76:38:93:3d:e4:38:ae:9e:75:32:f6:ff:d4:
         9d:84:4e:bc:52:24:6a:13:22:2d:dc:c6:a4:29:54:0e:f5:32:
         71:e8:96:ba:55:a0:26:67:72:67:ae:30:a9:ed:2e:69:e4:ca:
         b4:8d:63:cf:d5:54:c5:9c:4d:9f:62:0f:d9:40:98:9d:01:ce:
         59:d1:c3:e0:86:fb:eb:a0:92:21:8a:62:68:9c:73:fd:96:f6:
         8c:74:5a:d6:d0:ef:a5:24:7b:1e:47:6f:8f:2e:8d:4e:ab:fb:
         da:82:aa:88:01:e2:30:a3:3d:d3:77:c7:7d:82:97:dd:8a:ef:
         60:dc:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:40:31 2024 by rpki-client on console-fra.rpki-client.org