Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/134cc2f64d1de9a598d568d8b89ddc6233c21f64.roa
File:                     134cc2f64d1de9a598d568d8b89ddc6233c21f64.roa (raw, json)
Hash identifier:          l/7TYzdr9Sm36zLfDPXqNjNjfJqjVaK7uK1roCnmVJo=
Subject key identifier:   6F:8C:DA:AF:E5:28:9F:EA:39:06:F3:F2:22:84:30:AF:6F:90:E2:3C
Certificate issuer:       /CN=8aec635f7c32dec3e47f35d9bf70a3f73064cc1d
Certificate serial:       13C0BB
Authority key identifier: 5B:98:D0:F7:54:24:AD:81:25:81:F6:98:38:FD:CB:43:3F:B2:9D:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/134cc2f64d1de9a598d568d8b89ddc6233c21f64.roa
Signing time:             Fri 07 Jul 2023 15:06:56 +0000
ROA not before:           Thu 06 Jul 2023 15:06:56 +0000
ROA not after:            Mon 07 Jul 2025 15:06:56 +0000
asID:                     271816
IP address blocks:        45.7.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 02:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294523 (0x13c0bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aec635f7c32dec3e47f35d9bf70a3f73064cc1d
        Validity
            Not Before: Jul  6 15:06:56 2023 GMT
            Not After : Jul  7 15:06:56 2025 GMT
        Subject: CN=134cc2f64d1de9a598d568d8b89ddc6233c21f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7d:0e:12:11:a3:d7:5c:16:61:f2:49:07:b7:
                    c1:f9:3d:e9:6c:d7:38:9e:28:ae:af:24:b3:38:bc:
                    04:14:ad:65:a8:7d:65:b9:0d:7a:c6:c2:e8:40:1c:
                    5f:64:52:f7:8f:a8:88:b7:2c:7a:a8:1d:74:8e:94:
                    71:73:0e:2d:9f:6b:f6:97:53:87:c7:08:c2:c2:db:
                    b6:2e:95:00:bf:8d:d6:95:28:d4:30:03:f8:35:44:
                    b2:84:6e:bc:73:ef:a5:79:41:53:b5:d5:24:08:4b:
                    c3:3d:22:12:9e:9f:0d:f2:15:ec:2a:65:8b:d9:18:
                    74:7d:21:41:59:e8:94:f4:c7:24:5b:3c:e4:03:95:
                    9d:88:03:39:da:16:a2:fc:ed:ea:56:ea:bb:f9:06:
                    46:17:5e:14:90:65:77:d0:1e:81:24:49:b9:2b:92:
                    a1:e6:1d:e1:97:54:37:cd:bc:2c:e7:48:8b:9e:7c:
                    76:59:97:a1:a5:75:95:b3:8f:cc:e8:7e:0a:72:01:
                    f7:28:22:c8:54:2c:e6:ca:f3:0a:67:ff:e7:56:29:
                    b4:b0:f7:0a:df:41:c4:7c:61:6b:02:33:ee:bf:25:
                    f6:dd:e2:47:28:60:65:1d:10:99:d3:30:e5:a6:99:
                    ec:e6:f0:00:25:65:1e:dc:0c:41:f7:37:33:fa:fc:
                    33:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:DA:AF:E5:28:9F:EA:39:06:F3:F2:22:84:30:AF:6F:90:E2:3C
            X509v3 Authority Key Identifier:
                keyid:5B:98:D0:F7:54:24:AD:81:25:81:F6:98:38:FD:CB:43:3F:B2:9D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/134cc2f64d1de9a598d568d8b89ddc6233c21f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ac173dd-4722-4f7f-a9eb-eeb4bb98afe1/8aec635f7c32dec3e47f35d9bf70a3f73064cc1d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:56:d4:a7:b7:03:7f:73:9f:0b:fd:74:9d:45:8f:d4:9c:b6:
         86:d2:da:15:a9:b6:3c:0b:95:69:6d:00:c2:b9:96:e0:d3:04:
         3f:c3:70:3f:5e:64:9e:55:e3:52:4d:98:fa:47:d7:bb:c0:34:
         8b:ca:5c:d7:97:03:dc:ef:cd:6d:cb:6f:83:3a:28:93:1d:b9:
         5e:cc:79:f3:78:fa:3f:7c:e6:70:a8:86:98:a6:84:7c:38:f1:
         04:3a:54:89:ee:86:91:51:cf:62:c5:e2:69:bd:d9:73:73:ab:
         9e:1d:68:de:21:0e:8f:8c:2b:76:2b:ec:1b:b7:b6:4b:d7:ae:
         d7:1b:c2:70:8f:6b:ad:d8:fe:96:3f:1a:24:34:2c:0e:7a:b7:
         3d:d8:ad:f2:35:55:2c:90:76:41:a9:23:9c:36:2f:47:94:c7:
         a0:43:e8:51:a7:59:cb:ab:3e:e7:1a:53:bd:a8:b0:58:8c:3b:
         21:c6:61:65:7a:4c:19:f5:9b:76:87:66:4e:97:a6:94:2a:38:
         51:30:46:fd:ed:9f:29:c4:f0:8f:93:9d:97:c6:be:21:d4:9f:
         2b:67:8f:2c:3f:94:18:32:76:e7:2e:bd:1c:27:78:20:b9:a5:
         53:60:ba:2c:cf:88:ee:19:32:1b:3f:37:da:8c:3c:57:11:17:
         8c:b6:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 09:52:45 2024 by rpki-client on console-fra.rpki-client.org