Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38362e302f32342d3234203d3e20323639373239.roa
File:                     34352e3138312e38362e302f32342d3234203d3e20323639373239.roa (raw, json)
Hash identifier:          saqalEh8/X9UPa6PvtAEBUjLTUXfYNGr9SrXItZUJX4=
Subject key identifier:   51:AB:2F:A0:73:AB:C8:A8:D0:74:B8:7B:AD:08:32:47:61:44:7E:C6
Certificate issuer:       /CN=F8143F9E2D393A66C9D60429BD535353F0BAF150
Certificate serial:       79124909F1FC37B9ECF1C911D251113175111BE8
Authority key identifier: F8:14:3F:9E:2D:39:3A:66:C9:D6:04:29:BD:53:53:53:F0:BA:F1:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38362e302f32342d3234203d3e20323639373239.roa
Signing time:             Tue 05 Mar 2024 17:50:48 +0000
ROA not before:           Tue 05 Mar 2024 17:45:48 +0000
ROA not after:            Tue 04 Mar 2025 17:50:48 +0000
asID:                     269729
IP address blocks:        45.181.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:12:49:09:f1:fc:37:b9:ec:f1:c9:11:d2:51:11:31:75:11:1b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8143F9E2D393A66C9D60429BD535353F0BAF150
        Validity
            Not Before: Mar  5 17:45:48 2024 GMT
            Not After : Mar  4 17:50:48 2025 GMT
        Subject: CN=51AB2FA073ABC8A8D074B87BAD08324761447EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:38:dd:fc:c7:b2:13:be:a4:53:20:85:09:
                    61:25:3e:c0:d4:74:2b:b7:0c:c1:f3:8f:3a:a0:5c:
                    08:9b:c4:91:2f:72:cf:7f:4b:bd:bb:7f:c7:f4:1c:
                    8d:59:52:cc:24:75:56:97:80:47:b8:40:7f:96:c6:
                    b1:a9:01:3f:15:23:49:08:c2:25:13:43:06:12:86:
                    fc:22:aa:28:e8:66:f5:89:c1:81:a1:f9:a2:0e:5f:
                    b4:a4:d8:b6:03:38:f0:17:68:47:a8:f0:3d:0f:39:
                    d6:c0:db:67:73:12:7f:ab:3f:5c:c9:b9:7a:21:50:
                    34:6e:18:1b:3f:53:a8:33:71:80:7f:41:db:ff:cf:
                    e3:94:4e:17:f6:f7:06:64:40:af:85:33:25:9d:7c:
                    05:ea:38:69:10:87:2c:6f:5a:ae:3d:41:00:ea:e5:
                    05:b2:97:3b:55:3b:96:42:42:eb:79:25:67:54:44:
                    6f:03:8c:92:75:e7:52:d7:21:44:c0:e3:fb:3a:91:
                    05:30:fc:f0:1e:b7:69:e8:f1:83:17:9d:dd:86:b5:
                    7e:cd:a9:93:a1:d2:06:b4:c0:2d:3f:17:10:e2:7d:
                    ad:b9:87:ea:1e:f7:3f:98:62:2d:0a:05:4a:16:c9:
                    df:f1:e2:ba:23:e1:96:54:1e:82:75:d9:7c:aa:21:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:2F:A0:73:AB:C8:A8:D0:74:B8:7B:AD:08:32:47:61:44:7E:C6
            X509v3 Authority Key Identifier:
                keyid:F8:14:3F:9E:2D:39:3A:66:C9:D6:04:29:BD:53:53:53:F0:BA:F1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38362e302f32342d3234203d3e20323639373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:5b:98:4c:3f:e0:49:9f:a0:4c:34:63:5d:33:15:c4:3d:80:
         a5:b4:37:05:e1:3a:6b:2a:86:66:36:37:71:aa:ff:79:25:5c:
         f0:34:14:2c:a0:6e:05:f9:78:d8:5a:85:00:1d:37:0a:51:3d:
         23:64:50:24:0f:72:5a:b5:f2:2e:2e:e6:5e:a3:b5:5d:a4:d1:
         2f:2b:3c:8e:f1:e8:18:8e:8b:85:c7:a9:51:95:1e:79:1e:1d:
         e9:e6:70:46:8e:20:3f:4a:a1:41:da:e2:00:26:9f:e0:61:7f:
         a7:60:af:c1:cc:d8:a0:04:66:f4:59:ba:20:b7:a3:10:cb:30:
         27:68:16:31:46:64:6c:73:be:0c:ee:ab:d0:e4:8b:69:28:cd:
         2a:0c:42:13:a5:1d:c8:a5:c1:4b:ed:d1:a0:d1:29:c6:70:f5:
         34:bd:ce:b9:72:2d:fd:22:aa:00:7e:36:a3:db:85:c3:fb:f5:
         2a:89:e5:b0:fa:b9:b9:c1:3f:f6:45:31:0c:9a:73:95:8b:76:
         f9:df:93:65:bc:b8:09:65:cc:b2:68:e1:84:6d:63:8d:43:97:
         dd:f6:bc:47:00:a8:ce:d4:63:81:32:ff:bd:b9:f7:33:5b:f3:
         82:da:eb:c7:7a:8c:fd:d7:62:1e:2b:c9:b8:86:b4:79:44:48:
         cc:67:01:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org