Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
File:                     34352e3136372e31322e302f32322d3234203d3e203133393539.roa (raw, json)
Hash identifier:          N3ed7vn5wXej7rmij2EmpbNJRRTKMnyVUKPwATv5RCI=
Subject key identifier:   19:1C:41:C3:1D:33:2F:29:59:D4:23:3F:CD:13:B0:5A:2C:01:87:C8
Certificate issuer:       /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial:       2C849158751E737F4C00FF3267EA34090E85A95E
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa
Signing time:             Tue 05 Mar 2024 18:01:21 +0000
ROA not before:           Tue 05 Mar 2024 17:56:21 +0000
ROA not after:            Tue 04 Mar 2025 18:01:21 +0000
asID:                     13959
IP address blocks:        45.167.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:84:91:58:75:1e:73:7f:4c:00:ff:32:67:ea:34:09:0e:85:a9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
        Validity
            Not Before: Mar  5 17:56:21 2024 GMT
            Not After : Mar  4 18:01:21 2025 GMT
        Subject: CN=191C41C31D332F2959D4233FCD13B05A2C0187C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:38:ac:c7:0b:2d:64:1f:ac:fb:be:4d:6e:
                    89:2c:1a:8b:7d:48:b3:19:6b:f2:eb:2c:4f:06:b5:
                    59:20:82:f8:1e:22:8e:a2:04:3b:b5:2a:67:64:61:
                    7c:b0:0b:ca:33:52:b1:7f:c3:e8:88:e0:f7:b0:77:
                    29:38:13:e5:95:95:7b:da:79:82:74:13:5b:03:54:
                    7b:9d:32:cf:c6:76:d1:36:c5:06:33:9f:c5:e5:24:
                    e6:bf:2c:f6:1e:94:7a:38:5d:a2:9c:0f:14:e6:9e:
                    9b:e1:51:84:b5:44:a9:94:f4:27:b3:f0:17:fe:dd:
                    e0:86:4a:84:f9:36:99:30:11:80:d8:99:37:6e:f4:
                    ba:99:2b:b3:47:15:ea:ab:1b:23:ff:75:e5:a1:4c:
                    c3:48:ad:d9:52:57:72:18:5c:73:d8:b1:13:a7:68:
                    06:6f:c9:c6:4c:36:7e:d2:af:20:91:03:01:92:04:
                    77:91:66:d7:40:8d:1d:da:58:04:bc:ee:97:10:82:
                    ba:e0:61:73:6f:4e:e3:75:ec:be:28:16:55:c5:ea:
                    3e:4a:98:f0:95:a9:e6:d9:81:6b:d3:31:67:b9:b8:
                    fa:de:b7:33:06:0b:12:86:0e:07:bc:03:46:e1:c6:
                    97:b1:84:cc:09:47:cb:3d:b3:4b:b6:4e:4b:75:b4:
                    fb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1C:41:C3:1D:33:2F:29:59:D4:23:3F:CD:13:B0:5A:2C:01:87:C8
            X509v3 Authority Key Identifier:
                keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:95:13:25:6d:3b:52:5c:b4:2e:1f:ec:9f:d2:55:ad:93:b5:
         6d:d5:1d:77:72:4a:f7:ea:c0:10:6a:15:78:ec:3a:51:e4:aa:
         39:8b:05:b8:3d:e4:71:9c:76:3e:9b:71:7f:31:97:3e:5e:45:
         18:45:bd:23:d9:b2:2c:17:dd:13:c1:de:16:f5:aa:73:66:9e:
         d1:42:24:b8:a2:14:9b:bf:d6:96:f8:9f:da:ce:28:e6:d0:8c:
         d0:ff:3d:66:99:5b:75:81:44:30:4e:d9:a6:2f:a5:e1:3c:85:
         14:22:ad:c9:d2:f8:76:69:0e:dc:84:7c:e4:db:b8:47:d9:99:
         f5:71:20:cb:f8:3d:25:19:b6:2d:dc:62:1d:0a:67:19:db:68:
         b3:06:cb:9f:45:0b:88:d2:df:a9:72:d3:18:91:c5:a4:01:ec:
         0b:c5:66:e0:4a:4b:2c:94:c8:ee:b3:f0:b8:63:74:0c:2a:97:
         d2:a4:58:c6:60:97:4f:68:99:cb:bb:2c:53:b3:1d:96:db:9a:
         7f:ae:12:ce:3f:a5:7b:c8:fa:02:3c:0c:10:71:77:29:d4:71:
         51:e2:c8:97:5d:5f:46:c7:c1:bf:f1:b0:4d:ce:94:d3:20:8d:
         08:15:56:60:6b:29:f4:26:ad:be:fc:69:15:38:af:5c:03:2c:
         0f:aa:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org