Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/34352e342e3136342e302f32322d3234203d3e20323636373439.roa
File:                     34352e342e3136342e302f32322d3234203d3e20323636373439.roa (raw, json)
Hash identifier:          U1ZLLuI65q93oXbGh5AY0LWtBVdVjvTNa8lf1Tkb86o=
Subject key identifier:   54:C8:7A:FC:F4:C6:FF:A3:75:FB:D2:5C:71:7C:82:C1:82:AE:B0:BB
Certificate issuer:       /CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
Certificate serial:       5F1321361340636A12DE333DC34D0FFFF25F1AA0
Authority key identifier: F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/34352e342e3136342e302f32322d3234203d3e20323636373439.roa
Signing time:             Tue 05 Mar 2024 18:11:20 +0000
ROA not before:           Tue 05 Mar 2024 18:06:20 +0000
ROA not after:            Tue 04 Mar 2025 18:11:20 +0000
asID:                     266749
IP address blocks:        45.4.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:13:21:36:13:40:63:6a:12:de:33:3d:c3:4d:0f:ff:f2:5f:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50
        Validity
            Not Before: Mar  5 18:06:20 2024 GMT
            Not After : Mar  4 18:11:20 2025 GMT
        Subject: CN=54C87AFCF4C6FFA375FBD25C717C82C182AEB0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:64:f1:a4:5a:f6:ba:49:73:dd:b3:aa:46:c6:
                    f6:0a:2c:44:7c:1e:3b:32:0c:90:68:51:fb:df:44:
                    92:30:0c:b7:c2:bb:b3:c3:02:bd:a8:1e:03:53:77:
                    85:f6:8c:b8:59:9c:82:75:61:9d:a9:37:f1:9c:8c:
                    6e:60:5c:e3:63:9f:65:3e:4d:32:84:6c:a4:34:bd:
                    6f:61:2c:dc:ae:41:06:45:ed:bc:82:ee:a2:07:ff:
                    23:a5:29:bc:a8:d9:67:6b:8c:a3:1a:28:ce:b0:49:
                    30:34:5b:3c:3c:62:03:06:af:c0:69:05:46:42:78:
                    e8:ba:55:8f:11:ed:f2:f2:42:e3:cd:7c:54:8e:b7:
                    6a:92:fa:05:75:58:d8:ee:40:bf:c2:14:c2:af:a3:
                    49:29:34:51:24:93:01:40:40:83:fa:ae:23:5c:a9:
                    fe:fc:30:78:4e:0d:61:e1:ee:c9:88:17:6c:75:cd:
                    27:57:d1:f1:3e:2f:02:cf:b0:86:6e:e2:59:2c:37:
                    63:11:db:a2:40:7e:96:89:fa:3a:3a:7b:f4:a7:72:
                    ec:66:70:4d:b4:32:45:31:b1:b1:c9:cf:70:e9:98:
                    a0:32:a4:3f:22:31:da:7a:00:52:82:e4:80:55:a8:
                    62:bc:c3:70:ed:62:a9:50:bc:9a:2f:09:99:98:d7:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:7A:FC:F4:C6:FF:A3:75:FB:D2:5C:71:7C:82:C1:82:AE:B0:BB
            X509v3 Authority Key Identifier:
                keyid:F6:EA:46:D0:0B:DF:AF:1D:0E:67:F0:FB:53:FA:A2:DD:CB:FC:DF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6EA46D00BDFAF1D0E67F0FB53FAA2DDCBFCDF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C92E06C6D0F8D0FD8567496E773080989CBEE389757E57101747A2ECAA9932A8/0/34352e342e3136342e302f32322d3234203d3e20323636373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:34:a2:d4:8c:09:12:af:89:e4:99:c3:b2:79:c3:fd:5e:0d:
         4f:04:9d:e4:19:28:bd:a5:a0:96:74:f4:0e:6e:b4:f0:ea:16:
         17:87:b8:a6:6a:6c:a4:f7:91:23:0f:80:93:97:5b:04:73:de:
         69:70:ee:3d:11:6d:b0:4b:d1:75:92:42:7b:8b:cc:5c:7c:a3:
         01:9f:cb:c6:3f:7f:b7:ab:c1:c5:f2:cf:72:b3:ac:d9:80:1f:
         db:68:d4:52:e4:35:51:09:8e:43:13:9f:99:a6:8b:32:34:f5:
         02:97:4a:9c:5b:e1:a9:2d:2a:86:f6:ef:af:df:35:00:04:58:
         3b:b9:3e:05:30:d7:09:6c:45:af:05:07:f3:74:47:2e:ff:04:
         27:38:c4:ee:f1:2f:20:a2:1b:f8:69:74:40:65:88:e5:f9:97:
         67:c4:77:30:02:f9:bd:aa:6e:6e:97:7b:83:21:7a:a5:8e:28:
         6e:e9:4c:09:2f:e2:a1:ab:aa:bd:3c:65:ee:12:bb:55:21:88:
         ac:15:a6:a8:22:b8:41:a2:3a:28:62:a5:f2:f9:79:ba:b7:ec:
         98:46:25:62:d1:1d:84:c9:71:3b:00:db:01:6a:f9:08:e2:c8:
         aa:3d:04:00:8a:97:26:4a:86:21:3e:32:be:07:0a:e3:ab:54:
         19:d0:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org