Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa
File:                     34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa (raw, json)
Hash identifier:          IoHO8OSiLLmBsggwkFKWz5VRpHvLKqTlgN5/nOQkh2Y=
Subject key identifier:   0D:81:A7:C7:65:74:12:D9:91:02:E7:EC:CF:EF:51:F1:02:5D:48:88
Certificate issuer:       /CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
Certificate serial:       46D664F0E0BE7BBBB7243A394C0F95E282EDA03C
Authority key identifier: C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa
Signing time:             Wed 17 Apr 2024 14:05:00 +0000
ROA not before:           Wed 17 Apr 2024 14:00:00 +0000
ROA not after:            Wed 16 Apr 2025 14:05:00 +0000
asID:                     269881
IP address blocks:        45.190.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d6:64:f0:e0:be:7b:bb:b7:24:3a:39:4c:0f:95:e2:82:ed:a0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659
        Validity
            Not Before: Apr 17 14:00:00 2024 GMT
            Not After : Apr 16 14:05:00 2025 GMT
        Subject: CN=0D81A7C7657412D99102E7ECCFEF51F1025D4888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:7c:b5:60:e8:cd:18:52:d8:31:65:13:1b:
                    7c:7f:ba:94:54:7a:35:0a:8a:2b:c8:ac:29:f5:ad:
                    f9:c1:71:e3:1f:cb:23:8f:e1:02:4e:6b:d4:35:c9:
                    c1:33:fa:6e:0b:6c:c1:41:49:2a:9e:3a:71:13:3c:
                    b0:e2:fd:cd:61:76:a6:f2:07:77:84:5d:95:9b:9b:
                    82:f5:2c:f7:5f:7a:6a:05:4d:55:7c:6f:ed:b0:fb:
                    7d:19:14:a3:fb:ac:e4:d3:be:64:36:74:36:39:4b:
                    92:46:ed:94:85:af:33:2e:0f:8e:68:4b:01:77:91:
                    97:e8:bc:6e:fc:5c:72:a9:d5:f2:70:b8:06:9d:7f:
                    dd:c5:09:2f:86:5e:1f:b2:fb:b5:38:cd:50:19:01:
                    b4:53:f4:f3:75:65:24:c2:17:02:41:15:5a:f4:a5:
                    d5:f9:d1:b6:be:83:86:da:b9:5b:2f:f4:e5:d3:2a:
                    09:dd:44:f3:46:49:c2:d8:0f:b2:1b:08:fa:78:54:
                    be:c2:0b:28:d3:67:1a:f4:a4:3c:b7:f3:47:ce:77:
                    30:2d:ea:a6:60:b7:67:b1:ce:4b:16:2d:7b:ef:88:
                    21:2a:83:6e:3f:04:cd:43:e5:3f:88:73:66:50:db:
                    19:0c:8b:29:bf:a9:17:5b:f8:d9:b0:36:a8:a5:92:
                    95:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:81:A7:C7:65:74:12:D9:91:02:E7:EC:CF:EF:51:F1:02:5D:48:88
            X509v3 Authority Key Identifier:
                keyid:C1:B7:5D:01:0A:CA:4B:0B:A2:08:6A:26:4F:1A:E1:FD:0F:0C:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C1B75D010ACA4B0BA2086A264F1AE1FD0F0CC659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3E9A4991FD842D5666DF3203FD2F467140DE08AB96328CA6460CE440A581B88/0/34352e3139302e3136342e302f32322d3232203d3e20323639383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:19:90:07:d5:c4:63:30:e2:9c:e6:4a:ea:1c:4f:ce:c5:
         f0:58:bf:c2:34:e1:0b:cc:56:70:aa:d8:80:56:d8:c3:85:cd:
         c8:63:71:9e:b0:22:30:5e:07:15:ec:c4:cf:3c:88:5c:8e:63:
         0b:ff:01:b3:c6:1f:e9:c6:73:7a:b6:fc:10:c6:ab:2c:e5:3f:
         e3:ce:70:11:4d:4b:6a:80:25:ac:ab:1c:ed:05:2e:2a:aa:64:
         3e:bd:8b:10:8d:c2:04:b7:d5:8d:b7:b2:b8:5e:f2:87:4e:41:
         1f:5a:10:f4:a4:40:39:a9:19:5c:9c:86:5e:93:12:38:f9:3b:
         8f:3c:8a:c9:f2:1a:ff:98:04:3b:ef:ee:36:21:76:53:68:62:
         a9:19:25:59:ad:58:16:fd:c5:a7:14:5a:66:be:4f:07:6a:78:
         6e:6c:c4:d8:98:59:7d:8d:d5:ee:1b:65:9f:98:2f:73:5e:f8:
         f8:9b:2d:3d:23:e5:27:bb:de:5e:ae:bb:c3:64:f0:77:b2:b1:
         73:80:73:7b:07:1e:ac:d2:7e:a9:8d:0f:84:b5:60:7e:95:8e:
         fc:b6:65:c1:22:22:74:ff:33:32:57:b7:ed:c7:f2:40:01:0d:
         cb:42:80:08:e5:e8:ca:56:5b:7b:43:7c:0a:e7:ab:9c:68:60:
         c0:d6:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:33 2024 by rpki-client on console-fra.rpki-client.org