Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa
File:                     34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa (raw, json)
Hash identifier:          BQJNV2xpz0sQwrJzOyK5PZ2JP7P9O3kKV2IHoRoT2sQ=
Subject key identifier:   0F:AF:29:16:D4:C2:2E:44:96:B4:70:4C:C5:E6:1A:E0:01:2E:F2:7A
Certificate issuer:       /CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
Certificate serial:       509BC562B70A00A4ECC076297239C93CBAB115D0
Authority key identifier: 8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa
Signing time:             Tue 05 Mar 2024 17:43:10 +0000
ROA not before:           Tue 05 Mar 2024 17:38:10 +0000
ROA not after:            Tue 04 Mar 2025 17:43:10 +0000
asID:                     269734
IP address blocks:        45.180.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9b:c5:62:b7:0a:00:a4:ec:c0:76:29:72:39:c9:3c:ba:b1:15:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
        Validity
            Not Before: Mar  5 17:38:10 2024 GMT
            Not After : Mar  4 17:43:10 2025 GMT
        Subject: CN=0FAF2916D4C22E4496B4704CC5E61AE0012EF27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:cb:55:21:3c:61:04:b3:c4:f0:f5:b8:11:
                    b4:e6:ae:2f:13:9c:5d:51:47:c0:40:04:01:e3:12:
                    1f:c8:9d:ad:1a:79:c1:b3:48:80:ba:a2:ae:ec:c6:
                    e9:e9:ad:bc:d9:2d:ae:91:30:be:f9:55:c8:64:64:
                    67:7a:39:29:03:87:1c:b1:4f:90:5b:c7:b3:14:37:
                    5b:24:ad:47:3a:e0:9f:31:d0:2c:ab:99:8c:7b:d4:
                    23:f3:f5:a2:4a:d6:54:93:38:23:7e:33:fd:20:dc:
                    3a:26:dc:49:a5:53:68:6d:ee:31:d1:8d:65:30:b5:
                    91:2e:db:e8:e3:af:3e:f3:96:7e:57:59:68:3d:8d:
                    e1:28:49:37:31:6f:0a:99:a7:f6:ca:60:6b:23:ad:
                    06:bb:3e:a7:1a:eb:90:ef:49:4e:20:4d:74:4a:5a:
                    b1:ad:b2:2c:9f:cf:56:fd:76:fb:86:52:5b:ad:9e:
                    bf:d0:55:5f:26:25:e4:0c:ec:6a:07:35:98:43:e1:
                    df:1b:4a:74:e1:0c:b9:93:b6:45:c4:06:4c:48:78:
                    b5:6e:66:1e:ef:5e:28:dd:92:c0:49:6f:25:ef:a3:
                    f5:52:b0:0a:5d:6d:56:a1:5a:e6:69:42:57:7b:d3:
                    7f:68:58:25:94:45:65:38:d4:a5:f5:57:21:80:72:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:29:16:D4:C2:2E:44:96:B4:70:4C:C5:E6:1A:E0:01:2E:F2:7A
            X509v3 Authority Key Identifier:
                keyid:8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:25:cb:dc:52:48:d9:4a:59:ba:c0:d6:87:d5:43:a3:e1:16:
         d4:c9:f7:af:5e:24:1c:db:7b:ef:b8:62:23:82:ee:31:81:7e:
         42:3d:f6:f0:01:c9:2f:fa:99:0e:db:b4:c7:82:21:d7:0d:04:
         f1:6a:f3:1d:b9:66:42:dc:fb:2d:58:60:4f:68:49:ee:7a:2d:
         da:82:f2:d7:34:3d:66:d5:5d:b8:88:fd:2a:8a:e6:df:68:7e:
         99:f7:55:e3:67:b9:f5:f7:8d:0d:db:b7:da:81:c9:ae:9a:17:
         17:c7:46:04:ca:70:07:cd:9a:47:bf:ba:c0:af:01:ff:e2:89:
         a1:f0:93:93:0e:a8:55:7c:85:3d:b8:ba:1b:61:38:b8:57:22:
         06:bc:c1:76:72:f9:cd:fe:57:44:0d:65:65:70:c5:49:32:ef:
         52:d2:35:50:6a:8e:16:ed:38:da:4d:3b:6e:42:1f:94:1e:ab:
         96:67:3e:4c:03:6d:86:ae:84:8d:61:35:2f:b3:0f:ac:90:bb:
         b5:cf:d4:03:19:5f:35:bc:d0:f1:cf:d2:fd:e1:11:fb:aa:65:
         8c:b7:2d:da:e7:81:9c:67:9c:d3:d3:38:38:31:9e:70:99:44:
         a0:46:1e:19:60:70:6b:5a:bd:07:2b:2c:f6:52:8b:00:a9:af:
         6e:50:17:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org