Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
File:                     34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa (raw, json)
Hash identifier:          d0C919K0JaTtOE06Zc4OgCW+UnmbncTkQKyn0Uh+a/Y=
Subject key identifier:   95:96:3A:CA:E1:AC:88:AF:D4:68:DA:D9:B6:AF:77:BF:24:62:07:BF
Certificate issuer:       /CN=2AA949233251849B5F79085FA81406E588FF36E5
Certificate serial:       6B0B5BDF11D4D64F871A55ED11B2B7C1B5417147
Authority key identifier: 2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa
Signing time:             Tue 05 Mar 2024 17:56:16 +0000
ROA not before:           Tue 05 Mar 2024 17:51:16 +0000
ROA not after:            Tue 04 Mar 2025 17:56:16 +0000
asID:                     269828
IP address blocks:        45.186.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0b:5b:df:11:d4:d6:4f:87:1a:55:ed:11:b2:b7:c1:b5:41:71:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA949233251849B5F79085FA81406E588FF36E5
        Validity
            Not Before: Mar  5 17:51:16 2024 GMT
            Not After : Mar  4 17:56:16 2025 GMT
        Subject: CN=95963ACAE1AC88AFD468DAD9B6AF77BF246207BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:76:ef:21:d6:20:a9:d3:59:da:a3:51:61:
                    0a:2f:56:d9:91:6f:2c:24:4a:57:25:0b:f2:8b:2c:
                    f6:72:ed:6b:9e:91:f7:95:7d:a2:96:c3:0f:af:03:
                    53:49:0a:01:58:10:8d:22:e9:fc:d6:ce:82:e1:9b:
                    d9:ee:6f:ba:af:c0:c4:05:cc:8e:b4:b5:c7:6b:f2:
                    d4:1f:bc:b1:b3:bb:d6:46:c1:3a:81:2a:ba:c6:30:
                    55:77:f5:9a:38:d4:5d:0b:47:23:32:7d:ba:fd:48:
                    94:d3:3c:1e:56:ba:c7:ba:ba:2c:ab:27:b3:c7:59:
                    1d:eb:05:13:e5:ff:b9:88:5c:05:12:67:76:51:97:
                    bd:ff:ca:f4:0d:1b:86:ac:36:39:16:e0:f8:51:e6:
                    e4:e6:10:e5:04:f8:53:a3:f1:e1:0d:14:67:f0:d8:
                    aa:74:d7:08:b1:4d:94:a0:bf:af:a8:65:25:dc:42:
                    61:07:47:4b:33:da:43:bc:24:ad:dc:0b:50:24:c5:
                    53:ff:f7:41:c0:9f:5a:5b:6f:6d:c5:61:55:35:c8:
                    8b:78:8f:4a:3e:b6:59:e6:57:f8:3b:67:c0:39:f4:
                    37:83:8f:3a:e8:a4:29:27:38:bf:c9:b9:bf:7b:50:
                    34:70:55:30:b0:a9:32:66:c8:8c:95:63:2c:b3:92:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:96:3A:CA:E1:AC:88:AF:D4:68:DA:D9:B6:AF:77:BF:24:62:07:BF
            X509v3 Authority Key Identifier:
                keyid:2A:A9:49:23:32:51:84:9B:5F:79:08:5F:A8:14:06:E5:88:FF:36:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/2AA949233251849B5F79085FA81406E588FF36E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AA949233251849B5F79085FA81406E588FF36E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/391F4C1FCBDFC918CFBC81A58CBE446A0D92D3D63E10C85DDBB3CF6EF5F48FBC/0/34352e3138362e3134382e302f32322d3234203d3e20323639383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:1a:de:c2:5e:ff:9b:1d:4f:64:30:4b:8c:90:3d:60:8f:
         8a:41:23:3f:3b:1a:2a:a0:94:06:4a:24:c0:83:b3:93:34:83:
         ff:4f:d8:e2:a0:3f:73:6a:a2:80:4b:34:c2:d5:93:12:ac:0f:
         91:09:fd:c0:71:61:91:94:38:e5:09:d0:11:fc:bc:68:60:23:
         9d:c7:fa:ea:8d:2a:a6:a1:16:89:9d:db:3f:cd:b3:fa:ce:fe:
         a6:71:1c:cb:53:86:fe:14:7b:e1:10:59:09:c8:3a:41:34:36:
         50:22:31:5b:fc:b5:0f:b5:c6:4f:a6:bd:94:fd:f6:30:4d:1a:
         e5:a6:ce:15:f8:d5:b6:fd:ba:47:91:12:5d:ad:9c:44:ec:1b:
         9f:31:da:b9:b1:45:57:90:9d:b8:2f:8c:62:24:61:58:a3:6d:
         d7:6b:9d:b6:e9:bc:29:f4:00:a3:52:09:78:86:8f:18:d9:68:
         4e:6e:26:e1:8b:3e:66:14:6f:32:47:cf:c5:4f:8a:ed:b7:66:
         18:35:a9:7a:80:65:12:9e:a8:bf:61:16:72:ec:26:ea:28:35:
         28:a4:1b:1e:1a:d9:60:3c:81:0d:55:73:1e:6a:5d:7c:2a:c4:
         c1:a1:5b:56:08:f0:a2:30:5e:ef:57:5d:39:f9:15:b2:6c:a7:
         4e:01:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:45 2024 by rpki-client on console-fra.rpki-client.org