Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa
File:                     34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa (raw, json)
Hash identifier:          iH5G9vakssJOX4RixfowEz5IKQ6NgaH4pywMiHxyzFI=
Subject key identifier:   97:B5:B6:41:1D:37:ED:0A:34:2A:51:23:71:71:C5:57:16:5C:B8:A2
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       5E80ABC1554A8F87E325FB3CC49E3BB02B799CFF
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa
Signing time:             Sat 16 Mar 2024 17:05:00 +0000
ROA not before:           Sat 16 Mar 2024 17:00:00 +0000
ROA not after:            Sat 15 Mar 2025 17:05:00 +0000
asID:                     269818
IP address blocks:        45.184.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:80:ab:c1:55:4a:8f:87:e3:25:fb:3c:c4:9e:3b:b0:2b:79:9c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Mar 16 17:00:00 2024 GMT
            Not After : Mar 15 17:05:00 2025 GMT
        Subject: CN=97B5B6411D37ED0A342A51237171C557165CB8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:25:7e:fc:8d:94:0a:6e:3f:4b:8a:46:7f:
                    fd:3d:7a:12:81:56:28:6f:46:6d:7c:0d:ea:21:86:
                    27:e4:0e:ae:d2:b7:53:d2:26:4a:6c:54:0a:e6:e4:
                    fb:90:79:23:a0:18:83:da:11:56:e0:8d:3b:10:17:
                    c8:9c:dd:7d:2d:bf:0e:58:eb:14:75:fa:53:1a:7c:
                    0e:d2:00:2d:51:ed:5b:e4:97:c5:32:7d:0b:8b:a6:
                    f3:2b:97:21:e7:b2:9c:48:dd:09:b3:f5:29:5b:b7:
                    88:24:5a:52:51:b0:7a:89:b6:15:57:22:89:67:7e:
                    e8:e9:22:f1:78:0b:ed:bc:71:c4:74:49:9b:66:02:
                    0f:e0:22:a3:e9:49:34:43:61:0d:ed:be:7d:44:7e:
                    8c:79:08:3f:6a:ec:b1:7c:09:1c:6f:c5:67:55:94:
                    c7:c4:36:fe:c7:3f:66:5a:6e:3e:4b:58:1b:08:cf:
                    5c:11:1e:b6:4f:e4:23:c1:5a:06:c0:34:5b:d2:62:
                    41:a1:22:68:98:ee:c0:d6:29:de:fb:a5:46:4f:eb:
                    87:89:97:46:45:9a:b6:e9:ea:92:79:75:40:cd:cd:
                    ad:a4:ce:5b:bc:6a:80:25:6c:30:76:89:51:3e:89:
                    9e:71:df:dd:0d:48:d1:87:32:ed:10:ba:12:15:77:
                    46:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:B6:41:1D:37:ED:0A:34:2A:51:23:71:71:C5:57:16:5C:B8:A2
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32332d3233203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:e3:fa:ab:f0:36:d8:14:74:56:11:44:4a:49:d8:4f:6e:f5:
         80:a7:5a:25:b1:84:30:95:d8:cd:92:af:86:bf:2e:93:04:aa:
         34:93:11:b1:16:0e:89:7e:b8:83:ba:97:64:67:c1:b3:00:12:
         a5:64:2b:37:ed:ec:fe:98:b7:6a:b1:62:fa:f9:52:37:00:fa:
         5f:a4:00:0b:47:bc:6b:5d:c1:ba:26:58:55:97:e8:59:39:72:
         19:73:3a:6f:0e:e3:90:1e:df:77:ae:21:9c:5f:9e:2a:15:19:
         38:9b:f7:7b:64:8c:da:1d:ef:70:60:d5:63:f2:b8:d1:c3:5c:
         af:6d:a2:c1:ca:8d:b5:76:14:ce:11:75:ab:e6:17:92:b6:2c:
         36:5d:48:2c:86:d5:4f:a1:bc:8b:b6:51:81:f7:a5:37:2b:e4:
         41:da:3b:77:ac:05:e8:12:bd:59:fa:c5:13:63:c1:de:be:18:
         ef:65:f1:35:ca:55:72:33:c0:36:f1:24:e8:d8:02:4f:57:d0:
         ff:7e:50:4d:0d:a4:66:a5:58:4f:19:e1:c1:32:10:5f:2b:19:
         ee:b1:87:c8:f1:23:b9:23:b1:7d:86:28:fa:ec:e3:18:74:3d:
         90:0a:0e:bc:d4:da:e4:20:2f:0c:5c:0c:b3:a3:df:67:70:c9:
         79:7f:ef:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org