Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa
File:                     34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa (raw, json)
Hash identifier:          Dui99sskpkYgJRGHFHPS+u9LVVLlwmqd0cTTDuoT18c=
Subject key identifier:   43:18:68:A1:5A:E0:AC:5F:EA:DA:F2:00:E2:63:CC:72:05:EC:56:20
Certificate issuer:       /CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
Certificate serial:       539A43132D3743B175F609C1BF1DD7A883AD433D
Authority key identifier: A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa
Signing time:             Tue 05 Mar 2024 17:55:11 +0000
ROA not before:           Tue 05 Mar 2024 17:50:11 +0000
ROA not after:            Tue 04 Mar 2025 17:55:11 +0000
asID:                     264800
IP address blocks:        45.172.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9a:43:13:2d:37:43:b1:75:f6:09:c1:bf:1d:d7:a8:83:ad:43:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A452CC0A52E6766C48F9C7DF2D4337A911BA64D1
        Validity
            Not Before: Mar  5 17:50:11 2024 GMT
            Not After : Mar  4 17:55:11 2025 GMT
        Subject: CN=431868A15AE0AC5FEADAF200E263CC7205EC5620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:f2:30:b5:a9:3c:8f:d6:d8:78:84:7c:19:
                    41:3a:c1:ff:69:a7:5f:e2:1f:50:ac:05:cb:a7:72:
                    ce:5e:a4:31:4a:14:eb:15:e8:35:27:cf:ae:7a:69:
                    66:c4:45:0a:a7:c6:c7:11:f0:d2:ff:52:4e:80:7f:
                    8a:13:32:63:46:f7:69:64:84:b7:c6:af:33:64:65:
                    ff:80:98:8e:d9:cc:83:4c:21:5a:2f:df:b3:07:ae:
                    9c:58:05:43:d6:54:4a:44:f9:8f:72:25:37:8b:cf:
                    ec:a3:37:c1:55:34:08:89:e3:c5:12:59:92:87:be:
                    b5:40:cb:c4:44:13:f7:6d:88:15:05:07:86:57:31:
                    3c:6f:ab:b2:7a:3c:e3:bb:3b:34:0a:52:ba:60:f2:
                    39:2e:70:31:bf:c2:c9:d2:e4:e6:66:38:dd:43:ef:
                    0b:2c:5b:5e:54:5c:fe:ef:2c:ee:c7:a6:fd:17:16:
                    52:b5:5f:fa:39:b8:00:9c:18:b4:66:5b:98:b8:51:
                    18:2c:a0:36:3b:df:01:68:e9:ac:52:25:0d:91:d3:
                    ea:e2:d5:0d:74:d1:96:ac:1d:3e:53:ab:35:3f:c3:
                    3e:a5:ae:5d:b8:1d:2d:a6:17:05:54:e7:0c:ab:b8:
                    0c:b9:4a:13:1b:2b:d1:72:94:45:df:3a:04:7b:76:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:18:68:A1:5A:E0:AC:5F:EA:DA:F2:00:E2:63:CC:72:05:EC:56:20
            X509v3 Authority Key Identifier:
                keyid:A4:52:CC:0A:52:E6:76:6C:48:F9:C7:DF:2D:43:37:A9:11:BA:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A452CC0A52E6766C48F9C7DF2D4337A911BA64D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA6A65A2CAD06EE340B111EABD6D626235099FEE4F1266BBEFF6E3705CC8523A/0/34352e3137322e3134332e302f32342d3234203d3e20323634383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:dc:f5:60:91:81:c4:1e:e0:35:c9:a5:80:2b:fb:0d:de:6d:
         47:1a:65:fe:d8:ac:2a:f6:93:92:8e:5c:8f:50:c3:b9:7a:3b:
         61:dd:fc:0c:9a:34:49:11:69:e8:5f:1b:08:9c:65:0d:87:17:
         b6:58:fe:96:43:bb:87:5f:8b:58:9f:b8:a2:56:97:63:39:10:
         7a:93:79:41:42:1a:6a:8a:34:c7:c6:fc:49:81:90:0d:a6:fb:
         12:0c:bb:41:76:b0:29:67:8a:b0:04:29:b8:ca:a0:ae:99:c4:
         df:4c:4b:0a:03:b6:f7:81:2a:60:d8:c4:b9:17:a5:e3:7e:18:
         18:07:d2:ba:9b:44:8b:35:c1:7c:7d:01:3b:2a:5b:cc:04:28:
         18:3c:ac:1e:33:11:63:6f:fe:58:a5:f5:96:3e:a2:e6:f6:6b:
         fc:3e:af:88:7d:34:6f:dc:45:47:6a:cc:77:4e:a9:30:c3:a8:
         b5:58:85:4e:1c:4d:da:d6:c5:89:d4:62:3e:a5:ec:fb:26:ab:
         49:70:f6:16:a1:f0:b9:42:ad:4a:51:17:c4:93:71:f4:5a:df:
         ec:0c:f6:5f:2e:c4:01:80:83:5f:ed:84:c2:80:57:dd:1f:37:
         9a:a9:c0:dd:03:ee:e8:f4:c7:82:4f:88:e0:27:c2:ef:98:5b:
         d2:de:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org