Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135332e302f32342d3234203d3e20323639383138.roa
File:                     34352e3138342e3135332e302f32342d3234203d3e20323639383138.roa (raw, json)
Hash identifier:          O8V+Zqb/3H9lO73zhH1HofTS0Ua89M6csHIEPTdgoso=
Subject key identifier:   5D:89:F6:8B:D2:74:32:9D:BE:83:DF:63:1E:C1:36:FD:3E:EB:56:53
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       029BC0BB3C1D89D6DF2B00DA39E55011DAC759B4
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135332e302f32342d3234203d3e20323639383138.roa
Signing time:             Tue 05 Mar 2024 17:54:25 +0000
ROA not before:           Tue 05 Mar 2024 17:49:25 +0000
ROA not after:            Tue 04 Mar 2025 17:54:25 +0000
asID:                     269818
IP address blocks:        45.184.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9b:c0:bb:3c:1d:89:d6:df:2b:00:da:39:e5:50:11:da:c7:59:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Mar  5 17:49:25 2024 GMT
            Not After : Mar  4 17:54:25 2025 GMT
        Subject: CN=5D89F68BD274329DBE83DF631EC136FD3EEB5653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:4c:7d:a3:e3:50:20:c1:e2:cd:e9:d9:05:
                    77:fa:87:07:23:8f:49:27:56:ae:0d:79:77:15:5e:
                    a4:44:d5:45:a4:e7:81:43:80:fd:1d:11:eb:e4:c2:
                    a1:a6:d7:47:c9:67:9a:a2:e8:d8:cb:6b:61:7a:9f:
                    2e:63:94:f4:54:44:41:10:39:33:ff:fa:d3:43:a9:
                    03:a0:3b:d9:44:ca:59:88:74:e8:10:bc:c6:57:75:
                    84:a5:e1:bc:41:94:91:a7:17:b4:19:1b:2e:11:b2:
                    eb:e0:62:1e:9a:c2:a9:54:12:a8:00:7a:73:e9:a2:
                    50:5f:9d:aa:7a:e3:71:37:df:9a:71:89:c9:ac:47:
                    23:6d:4f:de:a5:b5:a2:0d:e7:4c:17:1f:82:19:35:
                    7c:5c:97:79:2d:3d:31:5e:59:1d:0f:6b:4f:bb:5d:
                    ca:0d:24:2c:cf:17:c2:14:a5:e0:31:a8:90:75:2c:
                    e6:b9:1e:f6:f3:60:c3:f9:44:85:f8:35:c1:84:e0:
                    61:3a:3f:4b:c5:37:9a:ba:16:a0:88:90:db:79:6d:
                    60:9d:ff:2f:36:5a:b3:4c:73:68:2c:5f:59:2d:4e:
                    e2:04:85:5f:31:95:9e:1f:b4:1b:03:da:f5:8c:2a:
                    52:a2:49:b9:ad:cc:d2:22:ce:7b:bf:5f:30:7c:4a:
                    c9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:F6:8B:D2:74:32:9D:BE:83:DF:63:1E:C1:36:FD:3E:EB:56:53
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135332e302f32342d3234203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:4a:cb:a3:bd:15:f1:e2:3d:2c:44:d7:d5:60:b8:7a:ea:d3:
         f8:a3:5f:7d:c6:d5:f7:c2:61:44:2c:00:ac:7f:49:9c:b8:25:
         f0:20:9e:f8:e8:44:9c:9c:33:86:99:a0:35:16:68:12:78:d4:
         6e:27:0d:c5:ee:7c:98:d5:eb:5e:df:c0:fe:f9:68:4f:e6:1d:
         e3:a1:51:04:84:2c:85:d4:1c:30:8b:dd:3e:6a:97:17:b8:89:
         29:94:ed:ce:30:9d:00:5c:14:79:7c:e1:40:47:de:d4:97:41:
         fd:9d:90:35:45:27:38:5f:15:00:0a:0c:24:ea:91:55:ee:c8:
         e0:ec:e6:34:ee:a2:11:db:20:0e:f1:02:9b:10:ca:68:c5:96:
         42:9a:e0:c4:b8:09:bc:95:82:1f:56:4e:bf:60:23:ae:2a:7a:
         96:20:d7:98:4d:bc:b4:b8:3b:4a:8d:fb:b1:26:ff:c8:ff:3b:
         81:65:b3:51:6d:54:5a:d4:45:65:dc:ef:95:88:e6:82:b0:e4:
         39:8c:38:24:3f:ec:28:85:01:b1:9b:20:21:2f:3c:67:3d:8a:
         fc:40:f0:fc:cc:1d:c4:ea:c6:99:f7:e1:f4:c6:e0:0f:cf:d6:
         08:2a:bb:42:e6:10:83:7b:cb:7f:be:ef:ee:a9:cd:6b:3d:dd:
         08:11:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:29 2024 by rpki-client on console-fra.rpki-client.org