Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/34352e3138372e37362e302f32322d3234203d3e20323635383136.roa
File:                     34352e3138372e37362e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          ba1/Oe7q1ZfjnuFDhqwPQKBxkW2EROcUN4LSCDg6FYM=
Subject key identifier:   DB:F5:07:A4:74:E1:08:D5:1B:2C:CC:98:1D:2A:25:3A:46:BB:81:6D
Certificate issuer:       /CN=8024515E87ADB4FD7907828213723907FEEA0D2A
Certificate serial:       65AD486FAFDE8C1F697649847CD4159E2D708779
Authority key identifier: 80:24:51:5E:87:AD:B4:FD:79:07:82:82:13:72:39:07:FE:EA:0D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8024515E87ADB4FD7907828213723907FEEA0D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/34352e3138372e37362e302f32322d3234203d3e20323635383136.roa
Signing time:             Tue 05 Mar 2024 17:49:00 +0000
ROA not before:           Tue 05 Mar 2024 17:44:00 +0000
ROA not after:            Tue 04 Mar 2025 17:49:00 +0000
asID:                     265816
IP address blocks:        45.187.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/8024515E87ADB4FD7907828213723907FEEA0D2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/8024515E87ADB4FD7907828213723907FEEA0D2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8024515E87ADB4FD7907828213723907FEEA0D2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:48:6f:af:de:8c:1f:69:76:49:84:7c:d4:15:9e:2d:70:87:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8024515E87ADB4FD7907828213723907FEEA0D2A
        Validity
            Not Before: Mar  5 17:44:00 2024 GMT
            Not After : Mar  4 17:49:00 2025 GMT
        Subject: CN=DBF507A474E108D51B2CCC981D2A253A46BB816D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:de:46:a4:a6:98:00:88:21:b2:73:a7:bb:
                    6f:3c:87:3d:7f:7e:13:cc:f7:1f:ef:53:83:ab:ee:
                    88:6f:e9:21:28:1f:04:55:34:cf:69:74:0a:1f:6a:
                    60:42:d2:20:ed:15:bc:cf:42:79:31:40:a1:72:c4:
                    d4:b7:59:92:c6:07:0c:51:b7:f1:3d:9d:38:cb:a6:
                    8e:f3:01:66:2f:15:fb:1f:8b:4f:c5:fd:73:3f:a2:
                    10:d7:1b:31:43:eb:33:09:02:d7:e6:9e:61:3b:f2:
                    b2:23:20:cf:8c:7b:31:52:99:c3:55:e6:22:85:b3:
                    9a:da:35:70:f7:dc:b0:97:a3:62:8a:ad:6e:4f:67:
                    76:46:5f:ac:9c:2b:e4:16:8f:a2:26:e3:3d:84:23:
                    1a:26:53:d6:b7:e8:42:b9:81:cc:7e:c0:1c:bb:7b:
                    4e:fa:e8:8d:37:9a:be:2c:b5:ad:d2:e4:65:ba:ab:
                    fd:67:47:c1:f1:c7:e6:ca:90:5d:b5:fc:75:4d:d6:
                    a7:fa:d6:25:7e:63:85:30:8e:d1:fa:48:15:5f:88:
                    e4:e5:03:9b:97:a9:a5:d7:b2:4f:25:b8:1e:04:5a:
                    80:c8:e2:f9:ae:78:0f:e2:99:15:c6:26:b8:63:b8:
                    36:9c:08:ed:c7:ed:27:c4:96:40:9f:28:a1:f2:06:
                    9b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F5:07:A4:74:E1:08:D5:1B:2C:CC:98:1D:2A:25:3A:46:BB:81:6D
            X509v3 Authority Key Identifier:
                keyid:80:24:51:5E:87:AD:B4:FD:79:07:82:82:13:72:39:07:FE:EA:0D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/8024515E87ADB4FD7907828213723907FEEA0D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8024515E87ADB4FD7907828213723907FEEA0D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/34352e3138372e37362e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:62:23:3d:20:7f:df:db:4d:8d:b4:7b:76:8f:7a:bf:6f:
         10:ef:cc:af:ee:61:bb:30:87:25:fb:c3:99:16:c0:8c:e4:78:
         82:11:38:66:df:0e:cf:03:f8:53:b8:c8:9d:85:34:df:64:09:
         3d:f8:0b:9d:73:cc:93:71:a7:12:d3:ca:d2:3d:3d:a6:09:4a:
         be:2b:15:0a:7d:14:d2:79:22:a5:24:5f:0e:10:05:05:54:fe:
         10:ee:50:8f:7a:60:12:97:92:9f:fc:35:9a:de:11:8d:27:c4:
         9a:b7:17:e6:a8:02:b6:d8:e4:6b:62:16:1d:81:9a:78:72:de:
         2d:db:1a:fc:7a:d9:f0:f4:0c:c4:8f:81:8c:f1:d5:01:b8:f6:
         51:7c:c3:d6:79:28:72:12:23:78:8a:e1:5e:60:65:43:6b:a3:
         d8:40:13:5b:6f:b9:12:cb:6f:a0:b1:9d:40:9b:5f:55:88:27:
         f0:f8:5b:97:d1:1d:a0:6b:b5:59:fb:da:7f:0d:c8:48:b5:47:
         20:99:8e:b0:be:48:dc:84:9b:95:6c:8d:68:ee:47:59:5e:dc:
         06:cd:0d:a0:95:2f:6d:af:3c:e9:d5:d0:82:bc:17:d1:0d:42:
         03:d5:40:36:3f:0a:8c:ef:52:2e:4a:20:65:4c:76:34:59:93:
         d6:55:b6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:59 2024 by rpki-client on console-fra.rpki-client.org