Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/3c54ee1427307ca327d480c61c6b2bee4cb5bf52.roa
File:                     3c54ee1427307ca327d480c61c6b2bee4cb5bf52.roa (raw, json)
Hash identifier:          hrVzcXoM2xubLVyD1zuzB+yVun22oO5trS/zQ8KCQxI=
Subject key identifier:   E1:14:6E:A6:AF:3A:AF:07:2B:6A:0F:FC:D2:E0:9B:8B:FA:3E:84:DF
Certificate issuer:       /CN=4da24f95f9e14009eadf64141dc9a803fece4656
Certificate serial:       146106
Authority key identifier: 03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/3c54ee1427307ca327d480c61c6b2bee4cb5bf52.roa
Signing time:             Thu 07 Sep 2023 19:20:59 +0000
ROA not before:           Wed 06 Sep 2023 19:20:58 +0000
ROA not after:            Sun 07 Sep 2025 19:20:58 +0000
asID:                     265768
IP address blocks:        45.173.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 03 Mar 2024 21:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1335558 (0x146106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da24f95f9e14009eadf64141dc9a803fece4656
        Validity
            Not Before: Sep  6 19:20:58 2023 GMT
            Not After : Sep  7 19:20:58 2025 GMT
        Subject: CN=3c54ee1427307ca327d480c61c6b2bee4cb5bf52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:ea:6c:ef:41:7f:ff:1f:5f:08:47:ec:61:
                    eb:86:68:89:e8:72:aa:de:6b:7a:aa:10:33:36:4a:
                    7d:c3:3f:6f:df:b5:fd:18:78:d6:f7:5b:5f:38:36:
                    28:98:84:f2:cc:fe:8d:80:57:f9:4a:fe:55:eb:9b:
                    3e:ff:19:55:07:dd:c6:46:28:81:b9:07:e7:13:cb:
                    da:54:00:6e:fc:b0:6d:d0:7d:ae:69:c4:68:56:f0:
                    57:d4:a4:f0:f9:34:95:43:2c:ff:a9:06:70:41:a4:
                    a1:a3:29:8b:bd:d4:74:df:50:7f:08:b0:a5:92:9c:
                    fc:a9:8e:cb:35:4f:e5:65:c0:6f:e8:9a:9a:3f:58:
                    d2:c8:15:c4:4d:92:85:76:c6:c4:20:21:66:66:4a:
                    e9:d5:dc:99:b0:76:a5:85:fb:dc:dc:60:96:73:0c:
                    50:8f:47:a6:3b:f8:5c:93:45:a6:c4:0a:78:a7:6b:
                    67:50:74:d3:c2:76:e9:ba:a4:06:b7:c6:23:8a:2e:
                    ba:40:d7:c6:15:44:45:ee:f9:16:f1:28:e2:e9:ec:
                    8c:d1:5b:15:6d:1d:16:29:28:a5:16:d1:14:eb:23:
                    73:49:50:52:e2:99:15:14:0a:67:29:e6:5e:b4:24:
                    eb:42:ee:7c:75:46:dc:69:3d:e3:44:76:9b:6a:78:
                    6e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:14:6E:A6:AF:3A:AF:07:2B:6A:0F:FC:D2:E0:9B:8B:FA:3E:84:DF
            X509v3 Authority Key Identifier:
                keyid:03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/3c54ee1427307ca327d480c61c6b2bee4cb5bf52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:24:0b:0c:34:60:b6:4a:88:03:e2:68:63:34:2a:96:d5:9c:
         fb:aa:b2:7e:4e:4e:19:a5:e8:c7:b6:19:41:4a:6d:31:1e:e2:
         cc:b9:eb:c3:2f:79:c1:9b:bd:2e:4b:65:a5:63:d9:6e:b9:4a:
         0e:d6:bf:be:89:71:0e:d0:76:e8:e1:23:15:31:90:8e:3c:05:
         25:bf:0a:2f:19:0c:ef:79:75:dd:23:e7:9a:89:76:02:1a:d6:
         2e:b0:84:8b:96:81:2b:21:71:7c:48:a3:83:4a:16:c2:e4:8d:
         23:b5:77:3b:b7:e4:9e:03:e8:94:c1:40:f3:87:4f:42:27:fc:
         26:b1:d9:3f:cb:22:17:59:63:fd:26:c5:01:6d:4d:a8:29:5c:
         3d:46:ef:de:5e:e6:37:e2:08:75:ed:e9:c4:65:04:50:2d:1d:
         5f:fd:7a:1e:6a:ef:f0:d1:02:4d:41:09:82:39:43:f5:21:c8:
         63:d8:f0:67:09:3c:2a:16:6e:ac:ac:27:51:e4:12:75:cf:7e:
         1d:f4:63:b4:8c:24:30:e0:d0:34:c9:73:1f:e2:77:0c:89:60:
         07:16:15:a8:a0:fa:e2:1e:d0:c5:bc:75:d7:1f:7c:c5:b2:46:
         bd:ce:0d:8c:17:e1:b6:6a:c3:86:99:17:50:e9:1f:84:c5:cf:
         8f:64:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 22:07:54 2024 by rpki-client on console-fra.rpki-client.org