Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138322e302f32332d3233203d3e203237393531.roa
File:                     34352e352e3138322e302f32332d3233203d3e203237393531.roa (raw, json)
Hash identifier:          G24L+DKH031xbwV9RLWwNvyGutjJkxv7vPs4pDKQWpQ=
Subject key identifier:   D5:0E:15:25:AF:BB:39:54:C2:C5:23:E6:83:16:8B:E6:82:F5:04:A3
Certificate issuer:       /CN=D418292B880E84CA0C2BFDA04321A946B3478A05
Certificate serial:       0EFB6F33CC533D645A2372D2CF104B3D76B58307
Authority key identifier: D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138322e302f32332d3233203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 18:19:49 +0000
ROA not before:           Tue 05 Mar 2024 18:14:49 +0000
ROA not after:            Tue 04 Mar 2025 18:19:49 +0000
asID:                     27951
IP address blocks:        45.5.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:fb:6f:33:cc:53:3d:64:5a:23:72:d2:cf:10:4b:3d:76:b5:83:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D418292B880E84CA0C2BFDA04321A946B3478A05
        Validity
            Not Before: Mar  5 18:14:49 2024 GMT
            Not After : Mar  4 18:19:49 2025 GMT
        Subject: CN=D50E1525AFBB3954C2C523E683168BE682F504A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:e3:b4:a5:f9:b9:2b:29:43:d0:70:02:8b:
                    e3:7b:22:43:72:13:2c:7b:2d:a5:b0:fe:06:cc:b4:
                    d9:fe:2f:f7:f1:00:0a:d5:17:f8:2c:20:56:09:08:
                    bd:bb:1d:ab:4e:fb:9e:74:82:a7:41:f3:b7:f8:8f:
                    95:c1:b9:93:6a:d0:ba:40:b5:e5:a0:2d:19:26:3e:
                    6e:22:0a:a4:cb:40:1d:b4:c8:c8:cb:56:cd:96:ed:
                    f3:f3:ce:f8:bb:bd:cc:3b:12:a8:f9:c6:3e:3a:4b:
                    9d:1c:2b:92:f2:45:d8:9e:99:a3:e3:91:99:1a:0f:
                    48:0a:c3:7d:34:8c:dc:4b:1d:9c:58:70:2e:ae:e7:
                    8e:37:5e:b6:74:3c:36:e2:50:8b:22:41:e4:c2:e8:
                    e3:80:38:95:23:71:0e:31:1b:37:6c:0f:90:1d:cf:
                    c9:04:cb:33:b2:70:15:6e:45:76:3c:6a:ef:cb:fd:
                    8f:4e:5d:89:05:d3:4c:ed:08:d0:61:a0:fc:4d:64:
                    d2:a9:d0:ce:b6:3c:ab:d4:8e:ab:b6:81:23:a3:ae:
                    e6:aa:77:0e:b7:e7:ef:fe:2c:1f:08:2f:73:aa:a0:
                    b4:21:75:10:14:23:fe:74:20:65:66:b9:00:64:fd:
                    7c:22:b1:66:c0:3e:01:d0:cf:d3:b3:5a:95:a7:c3:
                    f7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0E:15:25:AF:BB:39:54:C2:C5:23:E6:83:16:8B:E6:82:F5:04:A3
            X509v3 Authority Key Identifier:
                keyid:D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138322e302f32332d3233203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:42:af:35:d0:ff:c5:bf:cc:2c:f6:98:16:29:58:7b:fc:3c:
         17:b0:8f:80:76:ad:f6:b6:24:49:41:70:12:1a:30:1d:dd:1c:
         46:84:d4:0a:b2:59:e5:02:d9:d4:e8:93:8e:4d:7f:df:eb:e1:
         c7:01:23:d4:6d:5b:f6:5b:4a:c5:3b:6f:af:ad:58:5c:ae:51:
         80:23:9f:ee:86:e2:c8:8a:5c:26:3a:b2:dc:d1:d9:93:e8:5a:
         5c:09:b0:5d:74:64:f8:75:f0:6c:3a:fd:ae:2c:cd:5e:80:fd:
         11:2f:48:92:e5:81:19:b5:51:7e:cf:70:a7:19:c8:ae:b3:20:
         84:6b:ec:7b:9c:3e:a1:59:22:1f:cb:2d:be:d0:14:6e:39:f4:
         19:c0:f0:2f:1d:ca:e5:ac:58:1a:41:08:d4:7a:71:3d:2a:02:
         77:b0:d3:f2:6e:c3:72:f7:d8:c0:25:eb:7c:74:0a:e9:a1:46:
         2e:58:d5:dd:11:81:f5:ef:6c:41:c3:1c:94:68:51:d4:4c:ac:
         09:7a:8c:ac:b0:e1:19:dc:93:07:8a:ae:47:6c:0c:f5:93:a4:
         47:d8:1f:04:2f:35:a2:91:22:9f:49:27:56:3e:cc:e4:84:1f:
         ca:6f:b1:ae:be:9e:3c:49:e5:cc:a0:33:08:24:0d:cb:e9:f7:
         ff:e5:f8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:24 2024 by rpki-client on console-fra.rpki-client.org