Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/34352e3137392e3134302e302f32322d3234203d3e20323637393136.roa
File:                     34352e3137392e3134302e302f32322d3234203d3e20323637393136.roa (raw, json)
Hash identifier:          V6DCI9N1eVWzX8tus4Xi4bquHZZME9scXQ48/O0EBWU=
Subject key identifier:   3A:4F:D2:DA:B6:4A:E6:9E:C3:9B:14:18:F9:9C:4D:BE:F0:E0:BE:FE
Certificate issuer:       /CN=E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB
Certificate serial:       2E265AC2AEA357BC165AB8CE2557D6A33243E8B9
Authority key identifier: E5:FD:EB:C9:B3:A4:90:E0:C7:6F:16:D6:8D:7E:13:0C:A5:DF:A8:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/34352e3137392e3134302e302f32322d3234203d3e20323637393136.roa
Signing time:             Tue 05 Mar 2024 18:03:13 +0000
ROA not before:           Tue 05 Mar 2024 17:58:13 +0000
ROA not after:            Tue 04 Mar 2025 18:03:13 +0000
asID:                     267916
IP address blocks:        45.179.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:26:5a:c2:ae:a3:57:bc:16:5a:b8:ce:25:57:d6:a3:32:43:e8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB
        Validity
            Not Before: Mar  5 17:58:13 2024 GMT
            Not After : Mar  4 18:03:13 2025 GMT
        Subject: CN=3A4FD2DAB64AE69EC39B1418F99C4DBEF0E0BEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:80:69:57:2e:f4:9f:d0:56:c2:09:b0:1a:
                    34:80:3c:55:8a:d0:3d:7c:20:f1:e2:7a:04:de:53:
                    8c:82:96:3a:8e:e5:12:05:6e:d3:cc:f5:09:26:db:
                    91:55:3e:fe:41:8c:f9:12:35:13:66:53:f2:4e:c1:
                    c4:ed:2b:de:cf:32:07:df:d8:b9:94:7e:20:a1:a3:
                    c5:3b:60:98:42:1f:73:0a:7d:c2:95:cd:06:a1:e7:
                    69:13:84:90:46:ca:47:51:dd:23:51:3c:35:1d:87:
                    cb:1f:b0:64:dd:56:44:c5:46:a2:69:db:db:21:6b:
                    71:3e:b4:fa:67:2f:87:da:fd:7c:7b:75:ef:04:63:
                    8e:58:d4:f6:c6:56:77:31:27:1b:91:14:fa:5a:8f:
                    24:57:41:c3:2d:7b:bf:cf:65:76:5a:86:03:42:ec:
                    ee:3c:ec:3b:93:c6:e8:f9:a1:bb:2e:71:f8:25:79:
                    fb:c0:2f:d7:ba:f8:f4:2d:40:5b:03:b9:26:fa:87:
                    f1:3e:e9:cf:02:4a:61:80:48:01:e8:5a:4e:67:fc:
                    d1:f4:e3:fa:0b:80:ec:2c:da:5c:85:60:57:cb:b9:
                    5d:32:3c:e1:60:c5:5f:fc:7a:7c:d0:53:fe:14:38:
                    c1:62:b3:cf:d4:d2:67:51:c9:fe:ae:39:ca:08:20:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:D2:DA:B6:4A:E6:9E:C3:9B:14:18:F9:9C:4D:BE:F0:E0:BE:FE
            X509v3 Authority Key Identifier:
                keyid:E5:FD:EB:C9:B3:A4:90:E0:C7:6F:16:D6:8D:7E:13:0C:A5:DF:A8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5FDEBC9B3A490E0C76F16D68D7E130CA5DFA8DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2DF674C07459D5A2C265B41759760556180EE516F846EEB822C213E63DF8C38/0/34352e3137392e3134302e302f32322d3234203d3e20323637393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:ed:7f:6a:15:c7:78:a1:d4:5b:69:af:7f:25:70:6f:0b:
         81:97:bb:05:02:7c:a2:46:e1:16:77:79:30:21:72:3a:c2:26:
         05:f1:96:66:d3:9b:08:90:b5:db:2c:ed:9f:3f:6a:37:19:58:
         c6:3c:dd:ce:34:a0:7b:82:01:79:96:47:b1:b3:fb:9e:c1:e6:
         38:b7:53:25:72:de:e7:1d:e0:31:60:8a:9c:7d:e0:b7:03:54:
         67:2f:21:65:3a:61:46:3a:86:e3:14:48:79:f5:78:b0:20:b1:
         1e:d9:fe:65:e4:6e:de:49:ae:dc:e6:23:de:7d:64:f1:ea:6d:
         42:2b:92:79:c3:2d:4f:59:18:cd:e0:69:38:0f:5c:c4:88:2d:
         9b:30:db:6d:ec:98:b5:d0:15:31:ac:81:0f:49:b5:fd:f8:c3:
         1d:f7:db:3b:48:1f:eb:c3:83:17:03:57:1b:79:30:8c:bd:76:
         82:b6:13:f4:c8:50:84:57:bc:e3:8f:9a:98:b6:dd:57:42:a0:
         3b:a3:78:62:0b:72:e7:cc:bd:5e:42:d1:a0:cd:ad:8d:0f:08:
         66:e8:11:05:a7:6e:8b:ba:cc:d7:57:c7:75:d5:31:f9:42:79:
         2e:77:3d:1a:fe:36:b6:f0:70:aa:a3:c5:c3:02:d1:72:b5:41:
         78:91:94:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org