Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138322e34312e302f32342d3234203d3e20323634363436.roa
File:                     34352e3138322e34312e302f32342d3234203d3e20323634363436.roa (raw, json)
Hash identifier:          w0Gwgh8VYxXwG2zTvI0OJ0+4ivJveComUusXPn4AUOw=
Subject key identifier:   DE:65:28:59:F1:A5:5B:3D:D0:16:CB:48:EE:DE:E6:9D:93:59:7E:B1
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       2770BC4D7CC6B9B2D5FAE799F9D1385B0FE109FD
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138322e34312e302f32342d3234203d3e20323634363436.roa
Signing time:             Mon 15 Apr 2024 13:55:00 +0000
ROA not before:           Mon 15 Apr 2024 13:50:00 +0000
ROA not after:            Mon 14 Apr 2025 13:55:00 +0000
asID:                     264646
IP address blocks:        45.182.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:70:bc:4d:7c:c6:b9:b2:d5:fa:e7:99:f9:d1:38:5b:0f:e1:09:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Apr 15 13:50:00 2024 GMT
            Not After : Apr 14 13:55:00 2025 GMT
        Subject: CN=DE652859F1A55B3DD016CB48EEDEE69D93597EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:9c:c4:bf:1c:99:d9:d2:d0:f2:2b:22:70:
                    a5:d6:08:34:24:49:1e:72:2f:05:c7:08:e4:14:06:
                    5f:0d:82:8b:8e:21:ee:f5:1d:bc:92:18:2d:39:30:
                    11:7f:e5:c2:a7:e4:80:09:b6:36:f4:b4:7f:7c:66:
                    9a:8f:85:93:96:79:bd:f9:dd:7c:5f:ef:7e:ca:b9:
                    47:6b:dd:bc:15:15:5c:64:d5:be:40:fb:09:dc:4f:
                    e8:be:47:13:1d:72:e7:aa:66:8c:d2:61:fb:5b:90:
                    83:a5:7e:6a:54:82:2f:60:8a:0e:60:74:3c:61:5e:
                    be:6d:cb:a8:66:52:f9:2c:95:50:b2:3b:f6:90:cf:
                    2b:83:b2:4f:a2:64:97:7b:65:70:d5:6d:25:57:74:
                    7b:13:89:de:c4:1b:0f:54:b8:4b:49:ec:93:fb:32:
                    d9:f4:fb:c0:a4:1b:97:74:5e:2f:99:43:a6:3e:f9:
                    77:63:57:74:56:7c:d0:62:3d:1d:8b:62:d5:d4:9c:
                    fb:f2:86:84:63:da:fa:d3:20:a7:82:e5:22:c2:36:
                    c5:0a:0c:c6:07:44:bb:2e:88:05:26:42:72:cd:e2:
                    85:c2:62:01:99:67:d4:23:82:31:06:97:cb:cf:20:
                    35:3e:b1:a4:bc:7d:b6:f6:36:61:c8:83:e2:9c:52:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:65:28:59:F1:A5:5B:3D:D0:16:CB:48:EE:DE:E6:9D:93:59:7E:B1
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138322e34312e302f32342d3234203d3e20323634363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:07:3c:20:76:0f:b3:ff:07:3e:58:f7:fe:11:11:e3:b3:4a:
         40:0f:96:d0:9e:61:70:e4:3e:67:e3:03:94:aa:43:84:24:94:
         6b:ae:3f:69:e5:90:2b:0c:38:b2:d7:89:a4:f1:a4:a5:8a:3f:
         ae:b1:ce:47:89:f6:00:38:08:a9:fe:9e:18:c2:2a:04:af:93:
         0d:0e:b5:94:82:5b:54:1c:e4:a8:58:bc:78:ec:90:3a:6b:f0:
         94:04:4c:cf:c0:01:ec:2b:63:2e:1e:f3:b1:a3:c9:e1:bd:a1:
         18:5f:a2:55:a6:78:46:0e:1e:e2:ca:dd:78:55:89:59:1f:f2:
         6e:de:5d:87:cf:1d:2f:2e:f3:a1:30:ae:65:1b:d7:98:9a:bb:
         d6:5b:12:a6:2b:0c:74:73:b5:bc:a9:21:1d:3f:3b:98:43:2b:
         c4:8a:df:76:5c:f8:72:d4:dd:70:6f:8f:fa:74:26:ea:03:5c:
         08:6b:cc:47:15:20:c5:c7:fa:57:ae:e8:a1:f5:a7:a4:eb:af:
         b0:2d:14:5c:5b:d9:3f:e5:62:12:8a:d2:2c:f2:5b:8f:f1:01:
         ea:03:ce:21:5b:80:c6:a8:14:f3:00:69:05:0f:00:f2:5d:5e:
         c2:2a:00:f7:c0:ed:0e:12:ef:a5:57:51:e4:61:8f:97:7c:91:
         1e:74:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:31:48 2024 by rpki-client on console-fra.rpki-client.org