Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa
File:                     34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          oZDwZtVb4igOHDIf6vprXW2Ha3fdV3k6CQ/OGV+Nt2o=
Subject key identifier:   CE:6D:B2:7D:10:A5:C2:DF:D5:8C:FB:C3:C0:E5:71:21:4C:90:63:08
Certificate issuer:       /CN=260895D787D39C6EC70E61B3A77A0B956804C253
Certificate serial:       14159B5CCF48B7B0849DAA16D9D7181FF9E14B33
Authority key identifier: 26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 05 Mar 2024 18:22:11 +0000
ROA not before:           Tue 05 Mar 2024 18:17:11 +0000
ROA not after:            Tue 04 Mar 2025 18:22:11 +0000
asID:                     264836
IP address blocks:        45.228.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:15:9b:5c:cf:48:b7:b0:84:9d:aa:16:d9:d7:18:1f:f9:e1:4b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260895D787D39C6EC70E61B3A77A0B956804C253
        Validity
            Not Before: Mar  5 18:17:11 2024 GMT
            Not After : Mar  4 18:22:11 2025 GMT
        Subject: CN=CE6DB27D10A5C2DFD58CFBC3C0E571214C906308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ed:72:8c:27:ea:55:73:71:2a:f4:87:e2:a1:
                    86:21:d0:f4:bc:2b:e4:b2:9e:76:58:f5:8d:ef:5c:
                    87:50:d3:95:b5:08:bf:4a:cf:3c:98:a4:80:64:29:
                    d5:d7:c2:18:f5:cb:50:9a:74:dc:77:b3:e3:be:1d:
                    5d:53:f2:05:99:d4:f9:f4:31:f6:06:e0:c2:2e:2f:
                    fa:26:c6:68:de:a7:4c:0a:2c:ff:5d:9d:c9:a4:cd:
                    9b:d7:c9:c0:a9:e7:eb:de:4f:47:ab:61:83:45:0e:
                    08:4e:7a:70:82:b2:29:f1:78:5f:d0:0b:4b:d7:72:
                    7e:ee:2b:b1:45:72:82:9c:cc:27:d4:0d:55:5c:3d:
                    f6:78:7c:9c:8f:ff:a7:08:8b:e1:1e:ac:80:71:7c:
                    b1:1b:2f:6e:69:91:c1:cc:96:06:f8:67:2e:43:ed:
                    0a:f3:24:7e:07:39:8b:d1:81:f8:5f:46:d6:2c:7a:
                    9d:7c:6f:96:d4:d9:77:c9:d9:1e:44:3d:29:bf:14:
                    1f:fe:ec:71:80:03:c3:2d:e1:ce:13:f4:d6:6f:60:
                    56:54:7e:a1:38:41:19:d0:6f:8b:ba:44:f7:b0:35:
                    d5:57:46:9d:33:67:f3:ae:f2:65:c3:70:b7:3d:c5:
                    3f:b2:52:e7:28:a2:b5:5d:48:81:97:96:d4:e8:4b:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6D:B2:7D:10:A5:C2:DF:D5:8C:FB:C3:C0:E5:71:21:4C:90:63:08
            X509v3 Authority Key Identifier:
                keyid:26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:d4:c5:7b:d1:f2:46:ab:4a:1e:42:ae:e4:49:f7:9e:f8:
         86:3f:87:91:96:2a:d0:13:8c:d7:0b:e7:ad:b6:0e:12:06:2e:
         82:d1:e0:75:ab:c4:69:08:c5:91:23:32:b8:f5:ed:26:a7:6b:
         a3:40:3d:9a:61:18:4a:c9:21:1a:83:5a:40:8c:97:c7:4b:50:
         a1:b5:b3:d8:51:66:9c:4e:03:e6:a8:57:a1:90:92:9b:32:46:
         d1:c3:22:1c:af:04:52:94:28:d2:6a:a2:34:8d:ce:88:db:7f:
         6b:bc:dc:4a:61:37:86:29:1e:7f:16:c2:f9:76:d1:0e:5a:11:
         68:d5:bf:9b:aa:26:11:b5:f8:f3:eb:2f:7f:ce:b1:d3:a3:af:
         c8:d1:93:a0:ca:7e:4e:56:63:03:8a:83:e5:f1:4b:03:e4:1c:
         5c:9e:de:68:11:54:91:e7:9d:8f:9f:cc:bb:e3:a2:9b:7a:ac:
         ae:c4:c2:4e:08:ff:2f:c7:f1:3b:2f:de:75:a4:94:2c:92:54:
         6a:be:3a:65:a8:95:a8:eb:b2:d0:17:84:f1:27:b3:66:4d:26:
         36:19:3a:86:cc:0a:18:61:f2:ea:81:0e:e0:02:da:0f:34:ea:
         91:00:ce:26:79:1e:68:41:31:4a:a7:51:f7:31:5f:8f:2a:0c:
         5a:a9:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org