Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa
File:                     34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa (raw, json)
Hash identifier:          iIcZrVZ2jiINTqVpF4jCc8fNcboQ4MVCIqXNk4JwLI0=
Subject key identifier:   7E:7D:18:F4:21:24:B3:7E:63:6A:A2:81:43:2B:C2:CF:CA:0F:B0:AE
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       2151B9CE1992253301BE12798C657F45F677AC8A
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa
Signing time:             Tue 05 Mar 2024 17:54:25 +0000
ROA not before:           Tue 05 Mar 2024 17:49:25 +0000
ROA not after:            Tue 04 Mar 2025 17:54:25 +0000
asID:                     269818
IP address blocks:        45.184.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:b9:ce:19:92:25:33:01:be:12:79:8c:65:7f:45:f6:77:ac:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Mar  5 17:49:25 2024 GMT
            Not After : Mar  4 17:54:25 2025 GMT
        Subject: CN=7E7D18F42124B37E636AA281432BC2CFCA0FB0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:26:8b:32:16:5f:53:b3:a5:52:c9:af:a9:69:
                    10:11:b7:3a:53:c3:3a:76:ac:52:54:1d:7d:c2:56:
                    01:38:95:82:d7:90:f3:05:e9:9a:09:8c:8c:ab:83:
                    74:e8:d2:44:b5:c2:74:55:e5:09:67:c1:55:34:04:
                    a7:52:ba:ec:6d:bf:86:7c:f1:e2:5e:68:0e:aa:cc:
                    80:d6:81:2f:57:f0:41:99:0f:6c:48:1b:e7:5b:71:
                    d5:71:79:25:93:c2:ef:9f:a0:e2:2e:8f:d7:40:39:
                    d8:e7:21:50:43:42:b5:c4:67:79:f1:5d:75:b8:6a:
                    3e:da:61:26:1f:d3:01:6f:97:ed:64:8c:66:65:56:
                    56:ed:cd:68:31:6b:71:60:33:bf:18:36:fc:6c:e0:
                    bc:b0:c0:28:8a:fc:51:f4:1c:89:1d:83:d1:51:3f:
                    42:09:14:30:94:95:6f:5b:6a:24:e9:c4:0e:3f:a8:
                    05:82:df:ab:8d:b1:3c:7d:b4:63:dd:89:04:9f:c2:
                    86:e2:41:ac:46:54:a9:71:bf:a3:52:25:8b:8d:af:
                    96:09:02:a4:4e:77:4e:d1:e5:86:a4:70:a1:93:3a:
                    a1:e6:7d:42:97:ad:6c:57:a4:29:1c:28:ab:4c:71:
                    36:92:b6:95:d6:92:26:fa:74:1c:e2:2d:d3:c0:f5:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7D:18:F4:21:24:B3:7E:63:6A:A2:81:43:2B:C2:CF:CA:0F:B0:AE
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135352e302f32342d3234203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:38:50:94:bd:10:0b:d0:52:48:1d:d8:f1:87:3a:37:8e:2e:
         94:c4:89:55:b3:63:8a:4f:71:e7:1b:83:f2:a2:80:6c:33:7c:
         7b:22:67:6b:48:ec:e7:e2:f1:39:dd:24:bb:3f:4a:38:1b:b9:
         3f:dc:39:19:10:e7:54:e2:9e:6d:48:3a:ce:ea:43:c5:f6:fd:
         e9:11:7a:25:30:17:f4:c5:1a:81:12:aa:cc:81:b5:ea:6a:c3:
         56:ed:65:f6:9f:db:04:88:30:16:60:b2:6d:be:64:51:4e:1e:
         fc:c8:0a:dd:46:20:da:db:4c:85:5b:72:02:16:db:d3:36:7d:
         45:66:b5:50:1f:77:10:ae:d0:ad:06:fc:72:36:1b:20:ef:48:
         e0:1c:45:1f:de:01:f9:3d:ab:c7:72:d4:a9:e6:c5:cf:e3:8b:
         68:00:c8:d1:66:ef:e9:b6:18:db:2d:81:27:de:48:73:48:e7:
         21:af:e5:c0:18:b5:d0:a0:f8:5e:1f:77:e9:65:4d:20:56:a0:
         d8:11:ec:fc:df:d1:64:a7:17:d1:e8:7b:72:10:74:c8:fa:d5:
         a6:51:b6:5a:23:06:8d:96:85:07:3e:f6:c4:fe:28:24:bd:f3:
         81:09:f0:fb:d6:61:ba:5d:59:be:7e:42:0d:89:e4:3e:dc:d5:
         bd:65:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org