Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/34352e3136312e3133322e302f32322d3234203d3e203237393833.roa
File:                     34352e3136312e3133322e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          199I4bcGbxq5inGtwWqfSyNWPyiKWbrnKTKZfxQQqcw=
Subject key identifier:   F0:9E:B0:4F:66:3B:70:73:18:9F:00:F2:B4:23:16:C3:35:BF:23:06
Certificate issuer:       /CN=A330BD21030D07AFF1FBD97CD56DA2E61D2817FB
Certificate serial:       327AB8D83900D2FDE099CA3E9772CE94D00E4ADA
Authority key identifier: A3:30:BD:21:03:0D:07:AF:F1:FB:D9:7C:D5:6D:A2:E6:1D:28:17:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/34352e3136312e3133322e302f32322d3234203d3e203237393833.roa
Signing time:             Tue 05 Mar 2024 17:45:11 +0000
ROA not before:           Tue 05 Mar 2024 17:40:11 +0000
ROA not after:            Tue 04 Mar 2025 17:45:11 +0000
asID:                     27983
IP address blocks:        45.161.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7a:b8:d8:39:00:d2:fd:e0:99:ca:3e:97:72:ce:94:d0:0e:4a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A330BD21030D07AFF1FBD97CD56DA2E61D2817FB
        Validity
            Not Before: Mar  5 17:40:11 2024 GMT
            Not After : Mar  4 17:45:11 2025 GMT
        Subject: CN=F09EB04F663B7073189F00F2B42316C335BF2306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:86:e3:fc:4a:5b:70:a1:74:3b:06:89:e9:
                    d0:48:92:ef:d3:86:96:6b:e9:4d:e8:a2:06:c9:3d:
                    f3:8a:5c:30:b3:f9:46:a8:2d:a6:45:3c:a9:17:9a:
                    d2:04:53:73:a4:8a:33:4f:57:88:d3:00:75:ea:99:
                    7b:42:ab:68:e2:7e:90:9b:26:57:f2:54:4c:c8:62:
                    88:13:38:8f:ad:91:cc:d7:fe:ce:39:9c:27:82:fe:
                    0c:90:60:b1:d6:fd:13:37:9b:53:c4:fd:b2:0b:3d:
                    d2:c1:dd:99:60:57:0d:3d:f6:8e:93:4c:58:40:71:
                    ac:1d:58:ef:6b:b6:7c:88:ff:f3:e0:d0:cb:63:18:
                    13:22:a1:1f:46:ac:01:a6:c2:57:4d:c0:8c:b8:b4:
                    cf:b6:2f:77:90:e3:22:9d:e0:6d:1c:f8:fa:0f:73:
                    bb:f4:df:86:3e:81:37:e2:0f:c6:f2:42:4e:8d:4c:
                    52:ad:94:f5:d6:a8:17:2b:d3:c0:b7:73:3e:52:b1:
                    9b:5e:ef:08:87:3a:9f:55:6f:24:8f:d4:b9:c0:87:
                    5c:64:0a:37:c8:08:1b:ab:fa:6d:33:35:ab:a7:58:
                    4d:50:17:9c:3a:c2:ae:b3:5b:eb:6f:18:3c:0c:3b:
                    4d:91:b4:e3:37:c7:c7:25:51:11:6c:a4:57:35:31:
                    d0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9E:B0:4F:66:3B:70:73:18:9F:00:F2:B4:23:16:C3:35:BF:23:06
            X509v3 Authority Key Identifier:
                keyid:A3:30:BD:21:03:0D:07:AF:F1:FB:D9:7C:D5:6D:A2:E6:1D:28:17:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A330BD21030D07AFF1FBD97CD56DA2E61D2817FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3686CD8A969604D0D5B19FAE7F9309F785C327E550C07CE374F3E8C2E347ED5/0/34352e3136312e3133322e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:ce:c9:4c:64:c6:b8:32:62:e8:67:61:76:01:56:4e:bc:35:
         bb:dc:2d:ef:19:d7:aa:ca:c0:c1:30:9c:85:ad:11:a1:94:bc:
         6e:1d:35:77:5f:16:74:01:15:b2:db:b6:3d:ee:54:be:a9:6a:
         2f:a6:e6:76:5b:f5:9f:a7:92:30:57:f8:99:af:4b:ee:1a:19:
         bc:8b:ee:55:0f:70:ba:05:18:c0:97:6c:15:80:c5:cb:ee:61:
         1b:f5:e7:10:57:d5:9a:eb:ec:9d:d5:34:59:28:b4:a8:12:43:
         3d:30:a8:e8:95:f0:c0:b5:a8:38:53:38:cd:03:ae:b5:62:ff:
         8e:31:cf:36:00:f0:e5:8a:a1:06:3d:53:4c:ba:fc:e8:50:42:
         6f:50:ed:09:73:55:53:89:74:51:21:8c:2e:65:8b:5f:1c:5a:
         91:18:f9:85:32:75:c5:00:0c:06:d5:4b:3a:af:d9:22:ac:1b:
         a5:74:11:95:38:92:f7:2e:03:9a:13:83:f0:41:c9:0f:3b:7a:
         fc:b6:15:58:d8:22:d5:b2:0d:99:85:bf:db:7e:8a:37:2c:b9:
         6f:a7:29:69:c6:17:23:cd:be:be:53:3d:f1:16:ee:b6:17:c5:
         44:8b:c0:ea:bc:fd:63:92:1d:d1:6d:d5:8f:ac:49:67:b8:4e:
         04:89:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:55 2024 by rpki-client on console-fra.rpki-client.org