Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/34352e3137342e32342e302f32322d3234203d3e20323633373534.roa
File:                     34352e3137342e32342e302f32322d3234203d3e20323633373534.roa (raw, json)
Hash identifier:          IVEf85qYKcqoQ+AyaLJGt7uxW0Rkj6n13Wnc5tyZC/A=
Subject key identifier:   E3:46:92:A7:27:32:51:E8:55:A0:71:36:D6:3F:FC:B1:C2:91:D0:8C
Certificate issuer:       /CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
Certificate serial:       1369E4498647C3256EB93364D7EF8FA57006057A
Authority key identifier: C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/34352e3137342e32342e302f32322d3234203d3e20323633373534.roa
Signing time:             Tue 05 Mar 2024 18:16:51 +0000
ROA not before:           Tue 05 Mar 2024 18:11:51 +0000
ROA not after:            Tue 04 Mar 2025 18:16:51 +0000
asID:                     263754
IP address blocks:        45.174.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:69:e4:49:86:47:c3:25:6e:b9:33:64:d7:ef:8f:a5:70:06:05:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C111E22B88AB3DF713ECEF3B43D97197F14347D7
        Validity
            Not Before: Mar  5 18:11:51 2024 GMT
            Not After : Mar  4 18:16:51 2025 GMT
        Subject: CN=E34692A7273251E855A07136D63FFCB1C291D08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:6c:9f:94:9c:16:ca:74:54:fe:c7:47:da:
                    f4:0e:28:26:9f:8d:ca:73:65:29:24:04:77:7f:23:
                    1b:3a:7f:8a:16:a6:be:65:5a:10:85:ad:c4:5a:43:
                    c7:96:38:d0:64:a6:02:93:45:b0:cb:b4:37:da:fa:
                    0d:fa:a9:17:0c:1a:70:9e:38:39:2c:a3:d0:bb:6c:
                    0a:d8:dd:54:9f:c2:3d:77:e2:97:69:60:fe:7e:58:
                    9f:0e:91:5a:e5:9a:4b:7f:09:17:6c:2b:86:96:c5:
                    99:40:c9:1d:9e:66:89:08:86:62:1e:7c:5f:de:39:
                    f8:b4:46:6d:c3:d4:5d:ed:d8:30:cc:1d:d2:2a:67:
                    a1:38:4d:9e:d3:ca:1d:cc:18:96:e3:bc:4b:76:d2:
                    5e:7c:e5:e1:ba:91:18:f0:1c:4b:5e:52:e5:47:91:
                    f2:8a:d8:db:16:b8:64:78:ea:17:06:7c:c1:42:8f:
                    3c:60:8a:1a:5d:f6:97:cf:ce:24:37:d7:89:2f:6c:
                    7b:43:18:bd:3a:00:c4:f8:69:67:bb:4e:8c:0c:5a:
                    f3:29:25:0a:72:87:39:99:13:2c:49:4a:c3:39:0a:
                    4e:92:e4:44:e8:87:58:88:75:ef:88:67:32:c4:17:
                    cb:e5:7c:5d:7f:fd:72:a1:cc:6e:5a:f2:ba:5d:a0:
                    06:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:46:92:A7:27:32:51:E8:55:A0:71:36:D6:3F:FC:B1:C2:91:D0:8C
            X509v3 Authority Key Identifier:
                keyid:C1:11:E2:2B:88:AB:3D:F7:13:EC:EF:3B:43:D9:71:97:F1:43:47:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C111E22B88AB3DF713ECEF3B43D97197F14347D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5C6355BF8BBA02AFDEC01740418CBDA52FAFD119E16D539C11CA99768EA977F/0/34352e3137342e32342e302f32322d3234203d3e20323633373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:9d:a8:0d:3c:e0:8e:df:ee:be:92:50:02:75:dd:e3:f4:cb:
         9e:93:6b:4f:08:9f:3b:ec:dc:b8:69:31:6d:9f:1b:cf:c0:b4:
         0d:db:a2:52:7f:c6:65:6b:0b:0d:c6:c1:8f:27:9e:ef:75:d1:
         4d:a7:c1:68:43:b7:6d:35:38:9d:19:b5:e2:8a:d5:50:3e:f4:
         44:8a:19:51:47:fb:4f:17:ff:4f:ee:0d:32:2f:8d:c4:bf:54:
         c9:fc:5b:e9:48:69:18:be:02:96:bc:3c:09:14:d2:45:c8:d6:
         d4:40:cc:90:46:2e:fc:2f:f7:0d:7a:52:70:fd:5a:18:18:79:
         3c:99:e9:b2:ba:cf:1d:81:fe:e6:a6:f2:6f:ce:92:de:19:b2:
         c7:7c:b9:64:39:2a:d1:02:77:d1:cb:ff:94:dd:b2:04:2a:35:
         5d:c1:a9:d8:57:55:d6:77:ca:8c:2b:0e:a6:e0:b7:88:62:b1:
         19:f0:d7:41:d5:b7:f5:f6:a2:f6:8c:c5:8f:5b:c8:9c:ed:63:
         e6:22:4d:c4:c0:8c:1e:0f:83:4b:0c:79:c9:35:35:8c:cc:70:
         02:36:89:d7:5f:9d:c0:d7:25:32:34:7e:3c:da:0e:29:23:5c:
         85:53:f3:d1:76:ed:2d:52:ae:ab:3a:5c:88:51:c1:d5:c8:5d:
         52:51:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org