Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e203631353033.roa
File:                     34352e3136302e31322e302f32322d3234203d3e203631353033.roa (raw, json)
Hash identifier:          2iyjl3KWydu2EVyzYs/WwV2dBw0z51vWKtaRRMogG+s=
Subject key identifier:   FB:3B:0F:DB:A2:CC:96:62:E0:E0:18:95:42:BF:65:60:A7:F9:98:55
Certificate issuer:       /CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
Certificate serial:       1F70A23FB53A1BCE54E10E12F9CBDCC6C09CB5F7
Authority key identifier: CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e203631353033.roa
Signing time:             Tue 05 Mar 2024 18:05:28 +0000
ROA not before:           Tue 05 Mar 2024 18:00:28 +0000
ROA not after:            Tue 04 Mar 2025 18:05:28 +0000
asID:                     61503
IP address blocks:        45.160.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:70:a2:3f:b5:3a:1b:ce:54:e1:0e:12:f9:cb:dc:c6:c0:9c:b5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9
        Validity
            Not Before: Mar  5 18:00:28 2024 GMT
            Not After : Mar  4 18:05:28 2025 GMT
        Subject: CN=FB3B0FDBA2CC9662E0E0189542BF6560A7F99855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:d1:81:af:68:74:41:df:5c:1c:a9:71:d2:
                    bd:a8:62:5a:1d:d8:70:d1:80:25:d9:ef:cd:8d:01:
                    68:54:76:31:7c:62:fe:ba:19:13:77:5a:e9:4c:b2:
                    68:27:2e:54:d7:89:58:36:d4:7a:5d:74:a7:88:77:
                    18:15:55:90:17:09:33:ac:6e:b7:e5:3c:5a:0b:fb:
                    3e:e5:28:2a:cd:20:2e:fb:31:f3:c3:34:f8:e4:16:
                    c3:c6:9b:be:67:2a:7f:86:eb:b1:0f:08:b6:e3:96:
                    e6:2f:28:ad:94:ba:0c:7a:af:11:77:c7:86:ac:db:
                    40:01:fe:5f:4e:a3:78:26:3d:6a:f8:e5:c5:fe:99:
                    89:1a:e7:fe:88:04:9f:94:c0:48:dc:f7:5e:3c:b4:
                    90:fd:1b:38:c8:4b:88:dc:67:16:9b:a2:7e:cb:c3:
                    0e:97:b1:9e:71:19:8b:e6:04:71:18:10:f3:86:be:
                    bf:fb:77:90:a8:c5:23:14:d6:0c:bc:e6:37:28:b2:
                    39:0f:63:51:2a:73:1d:bd:3a:85:4d:f0:ff:a5:0a:
                    de:79:c6:c7:6e:3a:cc:df:95:14:46:39:5a:fb:8d:
                    dc:45:32:54:76:67:80:f7:9a:0b:92:fb:ef:26:54:
                    af:67:17:24:9f:f1:ba:17:32:98:ba:a6:5c:80:e6:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3B:0F:DB:A2:CC:96:62:E0:E0:18:95:42:BF:65:60:A7:F9:98:55
            X509v3 Authority Key Identifier:
                keyid:CA:32:5C:75:8B:D9:5A:E2:33:8D:37:BB:30:FC:A2:7B:8F:BE:8D:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CA325C758BD95AE2338D37BB30FCA27B8FBE8DA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0927D4E18F77EFB602AE21D5611B89C6E2EB4D195BA1848DD9961F84A0ED2B2/0/34352e3136302e31322e302f32322d3234203d3e203631353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:43:50:59:e4:1f:cc:b4:2e:0f:e6:64:6e:83:40:aa:99:e9:
         f3:87:aa:4e:1f:4d:1b:a3:20:2a:24:21:23:2b:23:49:90:a4:
         23:13:3f:fd:db:b2:1c:81:c7:0e:51:14:a4:93:e2:73:03:4a:
         22:87:20:ed:4b:c4:3d:0c:2a:ba:95:4d:eb:3d:e7:ee:77:aa:
         d8:a1:c3:8f:f4:1c:2b:eb:21:5a:4d:dd:a2:8d:9b:10:94:d6:
         f7:cd:5d:b9:ec:00:1f:e3:d3:41:a0:7e:3d:1d:af:4a:14:4d:
         cc:3f:74:60:6d:30:3b:0b:ab:cc:36:00:22:5a:f6:93:00:0c:
         62:e3:fd:81:e9:c8:99:8a:11:3c:7c:aa:8b:59:fe:d9:8b:63:
         70:c9:d7:3f:61:e1:5b:28:2c:43:7e:e0:3c:a6:83:4f:8f:73:
         16:af:2f:f8:e9:22:0d:46:6a:a7:97:66:d8:7f:14:8a:b7:3f:
         e7:5f:9c:a8:32:40:1a:37:b7:20:d7:fc:15:2c:47:ef:33:48:
         9c:10:0c:d8:50:cc:7f:51:d1:17:5d:7e:19:91:e5:65:21:c9:
         7d:b0:65:c7:ca:bb:6d:fc:d0:4a:c8:37:01:68:42:30:6a:2a:
         f5:8a:b3:9c:13:3b:c0:1b:7b:30:9c:f4:11:6b:a2:c6:84:66:
         30:7d:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org