Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/34352e3138362e31322e302f32322d3234203d3e20323639383136.roa
File:                     34352e3138362e31322e302f32322d3234203d3e20323639383136.roa (raw, json)
Hash identifier:          8rXNPkMN8eN02/yHNFuJ9j85KJl11qKgRoWagsfwRKc=
Subject key identifier:   1F:79:D3:2D:72:AB:F7:FB:B5:0C:8C:0D:9D:AB:2D:F1:FF:26:89:1A
Certificate issuer:       /CN=2A6F12C7D0ED80CAAC6A041574B354411BC7D940
Certificate serial:       5D15ED3874553AD2E918C279C90AA2F6169AB970
Authority key identifier: 2A:6F:12:C7:D0:ED:80:CA:AC:6A:04:15:74:B3:54:41:1B:C7:D9:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/34352e3138362e31322e302f32322d3234203d3e20323639383136.roa
Signing time:             Tue 05 Mar 2024 17:53:37 +0000
ROA not before:           Tue 05 Mar 2024 17:48:37 +0000
ROA not after:            Tue 04 Mar 2025 17:53:37 +0000
asID:                     269816
IP address blocks:        45.186.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:15:ed:38:74:55:3a:d2:e9:18:c2:79:c9:0a:a2:f6:16:9a:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A6F12C7D0ED80CAAC6A041574B354411BC7D940
        Validity
            Not Before: Mar  5 17:48:37 2024 GMT
            Not After : Mar  4 17:53:37 2025 GMT
        Subject: CN=1F79D32D72ABF7FBB50C8C0D9DAB2DF1FF26891A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:e1:c8:db:ae:a3:02:88:85:98:04:fa:75:
                    71:16:5a:24:33:c3:0c:67:b3:f2:1e:19:8a:7e:df:
                    d6:7c:b6:86:b7:6d:55:d6:89:a7:b4:5c:84:39:12:
                    ce:0e:1d:7e:b5:9c:06:fc:56:43:2b:3c:3e:86:cf:
                    01:da:54:fb:69:9e:7a:d1:05:a9:e0:8e:f9:15:47:
                    17:46:88:b8:2d:e0:d0:74:08:b1:1c:48:7b:1a:e6:
                    62:0c:a2:9c:1c:b9:32:fc:b3:ef:01:ba:0a:5c:84:
                    4c:a2:44:ea:e7:a9:88:a7:35:04:03:ea:30:56:95:
                    bd:3b:50:0a:f0:cf:69:e9:d4:ef:a1:11:6f:bd:ee:
                    29:0f:b4:f1:10:3a:01:a9:9b:62:e2:bf:76:f7:47:
                    21:06:13:c7:8d:f5:be:a4:db:9b:6d:0e:43:d9:c9:
                    9f:53:ba:38:f4:59:58:49:10:bd:c9:62:4a:08:3f:
                    6e:5a:d8:1f:1a:95:3a:be:e0:65:24:c7:ec:ef:40:
                    76:34:28:c4:a9:da:5d:17:01:55:cb:84:a6:bc:8a:
                    45:df:9b:59:19:75:10:28:1a:60:ba:25:2d:21:fe:
                    ea:4f:a5:45:9f:bd:19:0b:d9:93:a8:cb:17:3c:3f:
                    ca:7c:b2:54:5b:32:22:eb:3e:99:d2:4e:93:4a:f7:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:79:D3:2D:72:AB:F7:FB:B5:0C:8C:0D:9D:AB:2D:F1:FF:26:89:1A
            X509v3 Authority Key Identifier:
                keyid:2A:6F:12:C7:D0:ED:80:CA:AC:6A:04:15:74:B3:54:41:1B:C7:D9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2A6F12C7D0ED80CAAC6A041574B354411BC7D940.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E499583CC9C8EE2E3743439FCD93C2FC487B3E90C3D5E2AE61A2CCB6208D71C9/0/34352e3138362e31322e302f32322d3234203d3e20323639383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         f5:7a:60:49:ba:42:49:b8:7c:87:55:36:09:fc:a3:c7:57:5e:
         0a:3f:e5:a3:18:f2:72:09:1c:68:73:a8:39:3e:d4:c8:7e:c5:
         55:b0:d6:08:ee:ff:83:c0:2e:66:af:d5:14:a1:01:1a:c5:ac:
         11:05:fc:1c:d5:3b:32:4d:84:52:a3:48:a3:84:5e:fa:e8:f3:
         9c:50:31:a3:1c:12:d9:ad:8c:26:c7:1d:97:fa:9a:3b:ea:51:
         fb:76:2a:62:92:af:f6:f9:5f:31:b4:bd:62:f0:e4:98:5d:92:
         8a:8b:7c:60:b9:d8:37:6b:d3:d5:26:49:68:c2:65:c0:14:0c:
         40:5c:45:a9:bb:0f:2a:f4:a4:a3:f4:c6:37:f4:d3:7d:e2:a9:
         e1:8b:cf:aa:13:b1:4b:bd:30:38:e4:21:c1:71:be:af:36:74:
         31:74:f0:1f:70:90:3e:60:d4:64:ff:bc:7f:c8:b7:0c:61:ef:
         87:19:c1:1d:56:9d:6b:0a:4a:54:d7:a6:28:61:c9:1e:d1:62:
         8a:7e:e0:42:16:80:b4:48:1a:28:3c:5e:ac:f3:76:63:52:39:
         06:0c:4d:00:32:d2:6c:fc:99:89:cf:73:5a:eb:27:60:e5:38:
         23:16:29:39:79:15:1e:81:b7:ff:7e:6c:77:48:5a:35:72:e2:
         e2:9b:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org