Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/34352e3136302e3133322e302f32322d3234203d3e20323636383735.roa
File:                     34352e3136302e3133322e302f32322d3234203d3e20323636383735.roa (raw, json)
Hash identifier:          F5+n17IUHAwOjPR4AwVsHyy0dxJxlqoBa7SW28DTkyc=
Subject key identifier:   BF:82:A8:35:DF:D9:60:9F:85:7B:B5:51:9F:B1:DE:F6:4E:A1:B4:7A
Certificate issuer:       /CN=51464CFCFA715ED195EF7F2B99539BB0E4CEEE36
Certificate serial:       7968518B4017269ABB3F714DC284755024C014B6
Authority key identifier: 51:46:4C:FC:FA:71:5E:D1:95:EF:7F:2B:99:53:9B:B0:E4:CE:EE:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/34352e3136302e3133322e302f32322d3234203d3e20323636383735.roa
Signing time:             Tue 05 Mar 2024 18:11:40 +0000
ROA not before:           Tue 05 Mar 2024 18:06:40 +0000
ROA not after:            Tue 04 Mar 2025 18:11:40 +0000
asID:                     266875
IP address blocks:        45.160.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 02:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:68:51:8b:40:17:26:9a:bb:3f:71:4d:c2:84:75:50:24:c0:14:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51464CFCFA715ED195EF7F2B99539BB0E4CEEE36
        Validity
            Not Before: Mar  5 18:06:40 2024 GMT
            Not After : Mar  4 18:11:40 2025 GMT
        Subject: CN=BF82A835DFD9609F857BB5519FB1DEF64EA1B47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:41:94:00:2c:65:2b:b3:a8:b5:6d:e3:4c:
                    48:f7:94:26:15:97:7a:21:55:b5:c4:8b:6e:0f:f3:
                    0c:92:84:b9:63:c3:81:ac:12:e7:4a:6c:c7:80:e1:
                    ca:6e:33:80:e0:3b:8f:e2:f1:19:c4:49:95:26:fe:
                    f6:a2:d5:ba:40:a3:39:b7:80:ca:d1:cc:45:d3:f2:
                    13:ad:bb:ed:c3:ca:7a:a3:8d:08:4e:ce:f1:32:2a:
                    f3:bf:78:0f:fe:35:62:98:7d:72:dc:4f:72:70:a2:
                    a7:67:05:a4:f4:d7:85:f6:77:07:1f:a4:19:89:48:
                    5c:9d:4e:a7:ac:61:36:68:58:60:e2:ab:cf:2f:df:
                    f3:eb:8a:9f:bb:9c:04:33:d6:ca:4c:14:7a:5e:39:
                    1a:0b:f9:00:35:ce:79:54:98:a8:bc:a1:85:3a:b2:
                    86:62:56:ab:e9:bc:4c:31:dd:6b:24:03:49:86:25:
                    42:10:a2:20:3c:ca:1e:9e:d9:b4:e1:58:16:9e:88:
                    c8:13:5f:c9:60:dc:c1:d7:11:b4:72:80:52:64:56:
                    c9:b0:d6:b8:a8:0c:24:9a:7f:fe:a4:7d:18:1f:7e:
                    b0:b8:a9:83:28:9f:55:50:64:d2:e3:96:84:9b:83:
                    f6:eb:af:a5:3c:2c:b3:66:96:85:aa:e6:10:fb:a2:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:82:A8:35:DF:D9:60:9F:85:7B:B5:51:9F:B1:DE:F6:4E:A1:B4:7A
            X509v3 Authority Key Identifier:
                keyid:51:46:4C:FC:FA:71:5E:D1:95:EF:7F:2B:99:53:9B:B0:E4:CE:EE:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51464CFCFA715ED195EF7F2B99539BB0E4CEEE36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1857FDC335544C25D01819DE32D3341D5856A570FAA32C7AB308CC9186FC65F/0/34352e3136302e3133322e302f32322d3234203d3e20323636383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:1a:3c:f5:e1:67:29:d7:93:b5:5f:41:9f:0b:91:42:54:7f:
         93:f3:55:54:06:6f:34:f0:29:d2:49:18:b3:3d:80:aa:5d:29:
         77:d4:3f:46:52:69:67:e3:78:3f:dc:24:7b:1c:66:20:bd:48:
         f5:85:25:98:de:bb:a9:b1:f8:b7:df:19:f3:0a:6e:d9:da:15:
         11:42:3c:05:37:23:cd:12:5a:de:8e:b0:5e:89:8c:33:04:7f:
         b4:22:a1:8a:be:73:e0:a6:b0:c3:65:32:5b:d1:46:fc:50:b7:
         de:b5:1f:7f:7c:c3:68:bd:37:97:f4:73:87:ab:fe:a3:47:91:
         66:2f:7c:41:b6:05:cf:2a:cb:7e:ce:69:01:3b:7b:4f:e0:c2:
         56:1b:9d:59:7b:6d:7d:28:c9:7b:f2:a0:8b:47:e0:0d:a1:65:
         12:26:a3:59:6d:bb:ea:a6:5c:b2:80:a0:cf:14:e3:bc:26:79:
         8d:e3:1e:81:5a:d5:89:08:cb:b8:54:eb:04:b4:05:5b:bc:bd:
         14:a6:9b:bd:3a:ba:a5:0b:bf:08:d6:c4:7d:e5:4d:b8:91:78:
         0e:46:b9:36:fa:f9:7b:c1:f3:3f:71:dd:7f:91:a5:0b:5b:64:
         df:18:98:17:eb:c7:fb:01:12:56:e6:95:60:da:3f:09:ce:db:
         14:93:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:11:10 2024 by rpki-client on console-fra.rpki-client.org