Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38372e302f32342d3234203d3e20323639373239.roa
File:                     34352e3138312e38372e302f32342d3234203d3e20323639373239.roa (raw, json)
Hash identifier:          7h5h3N76dUrh1i9I/psESXtG+Q2+eHh/0Ry3zTyhvaY=
Subject key identifier:   34:EE:9C:C3:F6:6C:AE:74:DD:5B:D2:89:3B:34:5F:50:25:71:CD:55
Certificate issuer:       /CN=F8143F9E2D393A66C9D60429BD535353F0BAF150
Certificate serial:       09C060B97E5ABFD3D7C1DC72A775A55AB0067778
Authority key identifier: F8:14:3F:9E:2D:39:3A:66:C9:D6:04:29:BD:53:53:53:F0:BA:F1:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38372e302f32342d3234203d3e20323639373239.roa
Signing time:             Tue 05 Mar 2024 17:50:47 +0000
ROA not before:           Tue 05 Mar 2024 17:45:47 +0000
ROA not after:            Tue 04 Mar 2025 17:50:47 +0000
asID:                     269729
IP address blocks:        45.181.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c0:60:b9:7e:5a:bf:d3:d7:c1:dc:72:a7:75:a5:5a:b0:06:77:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8143F9E2D393A66C9D60429BD535353F0BAF150
        Validity
            Not Before: Mar  5 17:45:47 2024 GMT
            Not After : Mar  4 17:50:47 2025 GMT
        Subject: CN=34EE9CC3F66CAE74DD5BD2893B345F502571CD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:e1:77:6c:68:22:6b:d4:9d:84:03:ac:1b:
                    a6:e5:9f:50:46:d1:b5:0d:33:b4:cc:d3:06:3b:e0:
                    b5:19:c7:b8:49:2e:9a:50:b0:2b:d6:60:ea:e8:ac:
                    27:6c:91:bb:fe:07:85:1d:7d:8c:74:3a:16:7b:32:
                    f3:47:54:01:f6:e4:21:43:79:6f:15:09:c0:6e:34:
                    99:4d:06:bd:c5:f6:4a:8b:fd:55:54:03:b3:c3:40:
                    a2:96:f5:1b:7f:31:f3:73:7e:72:d5:7a:08:df:78:
                    ed:0a:4f:71:ef:e8:b4:af:6e:c2:5e:bf:a8:ce:52:
                    c8:96:08:60:63:a0:ee:8e:64:67:cb:89:85:01:b2:
                    23:3e:0d:e1:9a:fb:ce:b1:fa:fb:43:f4:f6:bc:72:
                    4d:a6:65:23:f0:d7:68:7a:0c:45:f6:56:d2:63:5a:
                    5f:87:93:2f:b9:b2:50:38:d7:b1:6c:5e:12:18:c7:
                    26:b1:e7:e2:6f:4e:e2:09:0f:5e:30:33:0a:bd:da:
                    c1:d6:3d:a3:c4:cd:8d:6f:85:a6:d5:2f:54:ed:9b:
                    5c:28:5b:3f:ec:1a:f2:3e:ad:d3:2c:8e:31:b4:a8:
                    d0:6d:8b:d0:a8:1d:65:d7:e0:04:4f:58:e7:29:42:
                    8f:26:b2:de:ce:51:21:f1:ae:51:3a:d7:2e:be:6a:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:9C:C3:F6:6C:AE:74:DD:5B:D2:89:3B:34:5F:50:25:71:CD:55
            X509v3 Authority Key Identifier:
                keyid:F8:14:3F:9E:2D:39:3A:66:C9:D6:04:29:BD:53:53:53:F0:BA:F1:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8143F9E2D393A66C9D60429BD535353F0BAF150.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5827E7E664580BF4993A2AFB0E6B754DC3AF3A6C55F278208D3B811653A486D6/0/34352e3138312e38372e302f32342d3234203d3e20323639373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:80:4c:db:ea:d5:36:f5:49:06:4f:11:4a:db:34:5e:d5:b3:
         bc:45:ce:c6:71:11:68:83:63:2c:08:c1:06:01:b4:e8:d1:a5:
         5f:ce:39:ff:fa:42:7f:37:47:00:30:3a:ec:5b:08:f3:a7:44:
         06:8c:62:18:86:d6:53:01:45:a8:db:3a:28:64:e8:59:b1:de:
         2d:d6:2d:96:87:97:25:5c:9c:ad:13:ea:7f:c4:a1:56:db:0e:
         5c:7d:59:30:a5:3c:2b:6a:81:f1:c8:00:c3:3a:54:2b:5b:1c:
         2c:c8:d1:ec:98:5e:6f:e1:0a:29:ea:33:69:7c:da:7c:98:c1:
         a3:db:c9:98:4b:92:79:62:07:28:a5:02:58:34:45:0a:c0:39:
         b2:11:a0:10:dc:18:be:c5:40:37:29:04:5d:fc:e1:65:bf:7a:
         b5:25:86:39:a3:ec:af:50:e1:58:7e:17:37:2b:2d:47:a4:ca:
         79:a8:7e:5b:50:59:63:f0:ea:72:a3:7f:3c:99:d9:2d:d5:7a:
         41:3e:06:37:df:e2:0e:fa:09:51:f8:66:02:61:bc:6f:4c:0a:
         a9:58:30:46:b9:1e:5a:17:ea:b3:3c:2c:fc:06:c2:1b:b1:b8:
         15:b2:11:cf:5c:c4:19:2f:54:ee:ec:97:f1:0b:5c:a5:d3:39:
         0a:05:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 19:57:42 2024 by rpki-client on console-ams.rpki-client.org