Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa
File:                     34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          rvdgdR+sdo8bCMSnx4XgrMo4d9bPr2dPCbrAaLeRJ4A=
Subject key identifier:   63:4F:A5:BC:A4:C6:1A:5D:E9:45:FF:04:97:18:DC:04:36:F9:F2:81
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       160DCCAF33F19D69BC607589D0634646D896906F
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa
Signing time:             Mon 15 Apr 2024 14:05:00 +0000
ROA not before:           Mon 15 Apr 2024 14:00:00 +0000
ROA not after:            Mon 14 Apr 2025 14:05:00 +0000
asID:                     264646
IP address blocks:        45.181.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0d:cc:af:33:f1:9d:69:bc:60:75:89:d0:63:46:46:d8:96:90:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Apr 15 14:00:00 2024 GMT
            Not After : Apr 14 14:05:00 2025 GMT
        Subject: CN=634FA5BCA4C61A5DE945FF049718DC0436F9F281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:5e:f7:90:de:b4:a4:c5:f3:c2:06:8e:41:
                    87:34:8d:f3:82:ab:27:22:28:65:ab:b0:00:3c:24:
                    ed:27:85:6e:49:6e:aa:40:25:6c:99:11:03:b1:0c:
                    7d:a2:ff:d7:46:96:fa:95:85:e8:1e:4d:a5:1f:92:
                    0b:4c:7d:4b:d8:d8:ce:55:09:a3:05:74:03:a4:ee:
                    e0:41:7b:bd:eb:97:66:ec:19:68:fd:b1:a3:c2:27:
                    a5:e7:46:7c:9c:1d:98:5e:43:69:1a:17:08:60:53:
                    38:48:0f:d2:c1:f7:a1:5e:96:49:85:cd:88:18:1b:
                    c4:aa:3f:27:4a:1b:f1:20:73:0c:88:7f:f2:5c:77:
                    c3:e8:96:fe:e5:9c:0a:ba:20:eb:45:e6:45:bc:9a:
                    a3:14:43:c5:96:b9:3d:38:a9:87:e6:3a:db:40:80:
                    42:50:3c:52:05:94:b9:7a:15:2a:35:02:bc:11:17:
                    ef:4b:f2:90:87:41:5e:c6:89:9f:60:68:a4:af:b8:
                    ca:7b:b6:7b:69:80:c9:a5:11:60:49:05:13:12:99:
                    ef:59:d5:11:e0:4c:00:16:a3:c7:33:6a:69:e8:1c:
                    1d:e0:43:12:49:28:d9:ec:f4:26:d5:06:b3:7f:2f:
                    71:3e:b5:4e:ee:97:20:28:d5:5f:b1:5f:68:98:90:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4F:A5:BC:A4:C6:1A:5D:E9:45:FF:04:97:18:DC:04:36:F9:F2:81
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:81:40:64:22:cb:c1:2c:72:ea:17:d8:fd:ef:d3:6b:5a:1d:
         f4:73:6f:97:ab:41:44:92:c3:e9:4d:7a:ed:18:45:9e:a5:73:
         18:12:cd:a7:68:18:b4:8c:dd:f3:d9:4c:49:da:b3:c0:83:0d:
         a3:df:63:c9:3f:94:a2:96:c5:98:7f:c6:17:84:a8:7b:5d:bb:
         cd:3b:f2:9e:69:96:5e:d0:dc:cb:61:8e:bd:a5:75:54:fb:53:
         9c:53:4a:73:fc:66:1b:a4:38:f7:52:5b:8b:d8:06:22:12:18:
         85:0e:2c:3e:39:9f:f0:e9:89:99:34:df:4f:4f:a1:72:5d:80:
         5a:44:50:a6:45:dd:8c:71:f4:26:d0:1e:4c:d0:6f:c2:07:58:
         e0:4b:91:af:2a:67:e2:2a:de:fd:41:aa:d6:d1:f1:36:56:97:
         a0:2c:c2:b2:4a:49:f0:91:a5:4c:e1:a9:9e:dd:46:46:3a:1a:
         9a:7a:86:a8:c6:6c:e2:51:3c:72:03:84:40:0d:13:fd:75:5e:
         fc:d6:e3:16:51:5f:57:90:ab:d7:83:57:21:15:e2:b8:05:c5:
         9c:2e:31:7c:d8:66:2e:64:c4:dd:06:9d:ad:fc:8b:4c:c0:c9:
         b1:3a:07:58:74:dd:10:72:33:2e:96:3c:93:06:a4:c5:07:50:
         55:7a:ad:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:39:55 2024 by rpki-client on console-ams.rpki-client.org