Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/34352e3138332e3134302e302f32322d3234203d3e20323634383234.roa
File:                     34352e3138332e3134302e302f32322d3234203d3e20323634383234.roa (raw, json)
Hash identifier:          8iLzquK1KFo4BkQuUI95Q4GGXY7PdH9ybYFYBJC14qY=
Subject key identifier:   1F:46:A6:F8:C2:6F:1E:94:DB:6C:E4:93:E4:85:62:91:E9:AF:C3:9E
Certificate issuer:       /CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
Certificate serial:       3D34A8687B031A0EBD6708D2EFB623240D28DFF6
Authority key identifier: 2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/34352e3138332e3134302e302f32322d3234203d3e20323634383234.roa
Signing time:             Tue 05 Mar 2024 17:47:58 +0000
ROA not before:           Tue 05 Mar 2024 17:42:58 +0000
ROA not after:            Tue 04 Mar 2025 17:47:58 +0000
asID:                     264824
IP address blocks:        45.183.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:34:a8:68:7b:03:1a:0e:bd:67:08:d2:ef:b6:23:24:0d:28:df:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C06B6FA6CB2B8122FB58DC52543671093B05FAA
        Validity
            Not Before: Mar  5 17:42:58 2024 GMT
            Not After : Mar  4 17:47:58 2025 GMT
        Subject: CN=1F46A6F8C26F1E94DB6CE493E4856291E9AFC39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:b1:13:7d:31:0d:2c:04:f5:53:d9:89:d4:
                    44:d1:d5:8f:e3:7b:d7:84:13:7b:84:7c:db:d9:7f:
                    49:da:32:ff:71:59:15:29:45:0b:a0:f5:5f:cd:ed:
                    bf:fd:d8:c4:44:f0:ba:49:80:e1:5d:e6:0a:ac:8f:
                    19:53:c5:d2:be:d1:74:28:e0:e6:a0:c4:eb:86:94:
                    cb:61:75:a5:82:c9:fa:e8:1a:24:01:f6:b8:b5:12:
                    b9:94:36:56:bb:39:36:9c:70:a6:06:bf:a1:0a:92:
                    f6:f9:3a:a6:e0:f8:3f:2d:58:5f:c8:cc:f4:e9:64:
                    bd:06:5d:5e:1b:7a:03:e7:bd:c8:43:25:5b:0c:ae:
                    6e:95:1f:1f:3b:fb:14:45:2a:ae:0d:70:01:67:3c:
                    76:0e:56:1a:59:86:65:5a:81:fd:10:a3:89:9c:98:
                    f3:f2:46:e1:66:12:8b:86:14:2e:75:a2:7f:51:e4:
                    88:80:53:0c:d9:5f:af:8c:6a:fc:eb:35:05:6a:77:
                    67:37:68:d9:e8:d5:ff:bb:5e:77:26:83:bb:56:27:
                    30:1d:81:7c:c8:31:92:51:2f:2c:04:7c:80:92:9e:
                    4d:df:2f:12:58:0f:d4:13:af:3b:75:d6:df:29:1f:
                    55:93:dc:8a:85:6e:04:61:14:c4:07:d2:d5:9d:5f:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:A6:F8:C2:6F:1E:94:DB:6C:E4:93:E4:85:62:91:E9:AF:C3:9E
            X509v3 Authority Key Identifier:
                keyid:2C:06:B6:FA:6C:B2:B8:12:2F:B5:8D:C5:25:43:67:10:93:B0:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C06B6FA6CB2B8122FB58DC52543671093B05FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C93BD0C3E3A7B3D66E8412CBCB6BB212360244FD495BAF9B59613AD8A1F5E162/0/34352e3138332e3134302e302f32322d3234203d3e20323634383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:f3:f9:88:b5:8a:47:09:36:33:fd:25:07:76:a9:22:38:34:
         23:ae:29:22:eb:42:9d:5b:9d:1e:1b:9a:0f:d0:07:90:46:5b:
         a6:f1:86:eb:5f:52:1c:0d:00:73:66:9d:0d:f2:0c:e1:fc:c2:
         2a:cd:f3:d2:26:00:0e:e1:3c:9c:13:d7:72:2f:73:a3:2e:e9:
         3e:3b:d1:94:3e:47:27:95:c7:e4:d6:e6:3c:1e:c3:ae:a4:64:
         6d:82:37:9d:80:8d:88:5d:bb:a2:b7:74:37:b5:1b:bb:7a:4a:
         4f:ca:24:a7:7a:af:c6:49:f0:40:21:2b:04:61:54:44:8c:4a:
         75:a8:a6:60:a0:2b:92:3c:39:c0:3c:95:4d:eb:39:be:e1:7e:
         80:45:58:a6:a8:1c:87:d6:5c:b7:66:e6:35:ce:e1:bc:dc:04:
         d7:1f:d2:06:f2:50:cd:9c:25:0d:91:42:9d:3c:e0:dd:ef:a3:
         ed:ac:01:bb:43:3c:f1:48:1f:57:4c:f3:f3:05:f5:01:cc:21:
         be:40:41:2e:e3:42:f2:93:6e:65:a8:f5:77:98:e1:23:b5:6f:
         98:64:4b:a8:7c:93:9b:92:ed:da:43:78:9b:6b:47:29:34:8d:
         22:f0:54:e8:07:cd:6d:af:58:de:5a:e5:1b:76:f7:6f:c5:ae:
         df:a5:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:24 2024 by rpki-client on console-fra.rpki-client.org