Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa
File:                     34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa (raw, json)
Hash identifier:          HnSVDfrnGybnDsTHT6Mcqlq/Qv7ofBMZjdrpeJGyl/k=
Subject key identifier:   83:23:B6:6B:14:3A:2B:B4:02:80:6F:CF:FB:9E:A0:70:6E:AC:74:45
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       43C894D132D51E1C71B2FC4CDE6103E8438AD6C5
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa
Signing time:             Tue 05 Mar 2024 18:05:37 +0000
ROA not before:           Tue 05 Mar 2024 18:00:37 +0000
ROA not after:            Tue 04 Mar 2025 18:05:37 +0000
asID:                     269746
IP address blocks:        45.181.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c8:94:d1:32:d5:1e:1c:71:b2:fc:4c:de:61:03:e8:43:8a:d6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Mar  5 18:00:37 2024 GMT
            Not After : Mar  4 18:05:37 2025 GMT
        Subject: CN=8323B66B143A2BB402806FCFFB9EA0706EAC7445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:06:8a:1b:19:18:51:fa:4e:54:b6:45:31:
                    b7:80:90:1b:41:56:ef:7d:69:6e:2f:5f:d5:e0:9f:
                    bf:87:a1:83:be:5d:96:c0:fa:06:c4:dd:9e:f9:4b:
                    77:4e:87:da:6d:c8:fa:a4:1e:65:d8:ad:a8:9b:a4:
                    a2:7d:fb:51:91:1b:f7:c8:95:50:fb:19:c8:c9:b1:
                    da:b2:71:67:80:4f:75:04:d6:c3:5c:8a:f6:7d:4c:
                    b9:fa:f6:91:fc:78:13:a3:3a:4c:f6:db:1a:9e:4c:
                    c9:e2:67:83:88:50:1a:d0:9c:f2:d5:2b:15:f6:d0:
                    9b:03:aa:f9:05:a9:d1:eb:e0:d5:f0:c3:48:ca:a5:
                    df:da:f1:10:de:30:3d:39:48:1e:32:15:ac:6e:0e:
                    8c:06:5e:0e:14:b9:ce:4a:15:92:b2:31:3e:77:05:
                    12:20:e3:4f:f5:5b:c0:37:6e:68:23:ba:38:5a:46:
                    4e:8d:1a:82:9c:49:34:da:b8:0e:a5:41:92:96:5c:
                    ae:64:dd:65:91:40:19:be:d7:86:f1:67:b5:f9:1c:
                    df:67:e9:e7:30:9e:9d:cc:f4:2b:12:24:09:06:9c:
                    57:99:69:26:93:0e:f8:5e:85:44:e9:8b:2b:4c:08:
                    0b:36:a2:ed:11:d8:07:57:f6:da:65:3d:ed:21:75:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:B6:6B:14:3A:2B:B4:02:80:6F:CF:FB:9E:A0:70:6E:AC:74:45
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138312e3230342e302f32332d3234203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:8d:a3:9d:c2:6b:db:65:ed:f0:cc:a2:d0:8a:25:47:3f:cd:
         2e:7d:4f:7f:c6:14:4a:f1:d7:e7:ba:9a:9d:a1:79:5d:ec:e2:
         3f:0d:e5:e3:04:73:01:5f:73:92:97:bc:49:9e:56:1b:1b:76:
         3a:f2:a2:c8:35:2a:b6:da:5c:e2:ff:12:72:c0:7e:6b:1f:ac:
         33:9f:8c:e6:56:a2:16:2c:22:f2:4c:5c:23:de:df:7d:75:18:
         8c:1d:06:c3:ee:9c:36:58:59:c8:92:78:31:32:61:d7:b9:e2:
         7e:6a:24:1f:a0:b7:ab:a7:cf:95:9b:35:22:d0:2e:9a:20:b7:
         13:3d:6a:c0:d1:98:ec:88:d1:58:92:4c:58:b4:e1:37:76:c6:
         23:78:3c:55:a9:b6:25:6e:1f:fd:94:7a:64:62:9a:82:5f:59:
         f2:da:96:e0:02:1b:89:4f:4d:02:2a:09:e2:32:e1:9e:bf:a9:
         0a:00:d2:1f:fe:55:8c:2a:75:a9:ee:6b:f7:c3:31:25:ff:a3:
         ca:b0:9a:53:d4:b2:87:4e:38:c9:b4:67:e5:5e:4e:3a:c5:25:
         6e:3b:c2:19:3b:03:e4:7e:7c:36:81:ec:f5:c4:41:af:fb:77:
         94:2f:a4:04:c5:12:89:ba:39:10:d1:3a:d9:3b:32:da:b0:2a:
         08:7b:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org