Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/34352e3138342e3130382e302f32332d3233203d3e20323639373833.roa
File:                     34352e3138342e3130382e302f32332d3233203d3e20323639373833.roa (raw, json)
Hash identifier:          2dK0n1i8trlG21GYIpEtbkvWZEVdUaOlBtyzC3Btj+M=
Subject key identifier:   5F:0B:F2:FF:13:EA:33:FB:92:D6:49:5D:39:DC:51:BE:A5:D3:E8:02
Certificate issuer:       /CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
Certificate serial:       642D303113DD44425F96B21F4F67A6831B755223
Authority key identifier: E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/34352e3138342e3130382e302f32332d3233203d3e20323639373833.roa
Signing time:             Tue 05 Mar 2024 17:44:10 +0000
ROA not before:           Tue 05 Mar 2024 17:39:10 +0000
ROA not after:            Tue 04 Mar 2025 17:44:10 +0000
asID:                     269783
IP address blocks:        45.184.108.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:2d:30:31:13:dd:44:42:5f:96:b2:1f:4f:67:a6:83:1b:75:52:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93
        Validity
            Not Before: Mar  5 17:39:10 2024 GMT
            Not After : Mar  4 17:44:10 2025 GMT
        Subject: CN=5F0BF2FF13EA33FB92D6495D39DC51BEA5D3E802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c8:30:d9:70:f5:ae:6a:73:9a:41:1d:fa:ba:
                    25:03:37:d1:58:b6:60:aa:61:36:3d:72:7d:08:b2:
                    ad:c1:68:65:a4:ff:11:cc:f0:45:6f:e7:d8:11:14:
                    b3:7d:ec:2d:f9:a3:87:3c:a3:c1:ab:53:87:0b:6b:
                    7d:8a:73:e1:3c:d7:f8:1a:37:1f:bf:a1:75:cb:a2:
                    f6:c0:33:a2:74:ed:d7:e4:b7:03:3d:b6:a1:b4:04:
                    95:7c:9c:98:99:0c:08:58:6c:3f:55:65:22:12:2b:
                    9b:af:61:ab:40:b4:80:6a:4a:18:42:52:08:eb:a4:
                    c3:67:45:b9:69:72:d0:fc:d6:ff:9d:27:6c:87:02:
                    d3:7f:a8:8b:39:61:b0:26:d4:5a:60:32:c0:63:92:
                    81:e7:ef:f8:e8:fd:be:5c:07:85:45:34:85:a8:54:
                    5e:dd:ce:dc:68:f6:26:15:1a:59:76:13:a0:7a:b0:
                    80:06:60:9e:e9:4b:75:e2:16:d0:95:3c:3c:72:73:
                    56:7c:f9:f9:79:d7:0c:88:bc:11:36:ea:cb:94:22:
                    51:a9:67:a7:de:63:3a:37:41:ad:f7:8a:6a:99:f9:
                    66:e5:77:e0:32:a7:73:da:69:2c:12:25:81:ff:04:
                    d1:46:9d:c7:16:c4:dd:cf:0f:0a:41:99:5f:d3:f0:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0B:F2:FF:13:EA:33:FB:92:D6:49:5D:39:DC:51:BE:A5:D3:E8:02
            X509v3 Authority Key Identifier:
                keyid:E5:A9:09:25:49:B8:3C:DF:7A:FA:AC:8B:F8:A5:65:0A:DC:B9:8E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A9092549B83CDF7AFAAC8BF8A5650ADCB98E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08E2B67FD2222202F8DCE64C065E8CD22782259DB967480BEB326F797C12327C/0/34352e3138342e3130382e302f32332d3233203d3e20323639373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:62:6c:df:6a:f4:de:83:61:d4:8c:9b:93:b9:c5:cc:72:2f:
         80:12:a1:27:4e:b5:5b:99:40:2d:46:56:22:d7:8b:a9:a3:c4:
         35:c0:ad:21:9a:87:ed:93:f7:25:b9:11:5a:e8:ad:77:38:16:
         0c:1b:8e:29:5b:a4:06:28:de:cd:40:c5:7e:25:2b:b2:01:ca:
         3e:03:99:b1:30:40:c8:e5:d6:fc:9f:6c:82:9a:11:2d:6c:bc:
         f2:70:a0:ec:9f:0e:b0:aa:7e:10:e8:47:fc:be:be:28:92:59:
         d0:00:2d:c4:d4:29:b8:36:63:a3:08:7b:d9:0a:fb:be:b1:90:
         e4:43:bb:0a:92:8f:10:94:c2:a5:17:47:46:20:93:65:04:77:
         da:2f:89:71:1d:28:01:b1:60:15:6b:7d:a2:0c:17:76:22:d5:
         78:be:c6:32:13:7b:e0:69:82:82:a8:70:f6:71:0d:28:e1:0e:
         51:59:53:9a:08:9a:ff:16:37:f4:d0:28:56:64:2d:bb:60:69:
         6d:35:a8:c8:51:1d:c8:31:69:14:fd:57:2d:a1:9e:9a:14:65:
         27:b0:f3:9a:0d:09:a4:66:e5:84:77:49:4c:fa:26:8b:89:a4:
         2a:8c:aa:63:9e:45:5d:a9:cf:70:44:aa:69:58:16:da:15:05:
         da:c6:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org