Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138322e34312e302f32342d3234203d3e20323639373436.roa
File:                     34352e3138322e34312e302f32342d3234203d3e20323639373436.roa (raw, json)
Hash identifier:          /35A/0zdLBgjVB2NvARwEywQEo1ldjkh/sgp61Wdlcg=
Subject key identifier:   FA:10:E7:D2:A3:96:0F:7F:06:B1:AB:A5:42:6F:80:18:8A:17:44:9B
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       3170FABC40C9C528CB1D5D9DE3A58031FDB38817
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138322e34312e302f32342d3234203d3e20323639373436.roa
Signing time:             Mon 15 Apr 2024 14:05:00 +0000
ROA not before:           Mon 15 Apr 2024 14:00:00 +0000
ROA not after:            Mon 14 Apr 2025 14:05:00 +0000
asID:                     269746
IP address blocks:        45.182.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:fa:bc:40:c9:c5:28:cb:1d:5d:9d:e3:a5:80:31:fd:b3:88:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Apr 15 14:00:00 2024 GMT
            Not After : Apr 14 14:05:00 2025 GMT
        Subject: CN=FA10E7D2A3960F7F06B1ABA5426F80188A17449B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:a5:82:71:b4:f8:e8:ff:cf:80:20:15:7a:
                    83:c1:d5:4a:4c:51:99:bd:7f:bd:08:16:84:3c:2c:
                    3d:5e:b8:a9:f1:a3:22:15:c3:96:ae:77:15:72:90:
                    18:08:d3:1a:d6:a7:20:66:31:da:45:b5:e7:0b:2e:
                    82:0f:27:45:cd:85:3a:2d:31:38:61:8a:f8:1a:58:
                    fd:9d:41:e8:dd:95:69:ce:d2:5e:3d:07:cd:4b:94:
                    fa:6c:ef:cf:7d:2a:a8:7e:c3:e6:81:c5:ca:ad:eb:
                    d7:0b:98:01:aa:f8:72:e9:a0:db:6e:f6:ad:9d:54:
                    1c:f4:0f:a0:59:65:b4:a5:f1:b2:c9:bc:65:c2:ec:
                    a6:28:c3:e3:3a:5b:e3:a8:5f:80:47:84:0e:db:25:
                    a5:55:02:3d:a6:86:54:4c:22:ae:da:e8:ce:61:27:
                    27:a0:81:76:e2:b4:08:8e:17:e5:17:6a:78:8c:41:
                    5e:3a:a7:4b:bc:5c:ff:5e:ce:ca:54:cb:0b:06:2e:
                    38:6f:62:dd:14:b3:ca:1a:f2:13:3b:6f:b8:31:b6:
                    32:d6:af:b8:d3:19:54:32:d8:9c:2e:cc:67:51:fd:
                    3b:0b:ba:01:61:99:bb:f1:c6:d9:83:55:f9:91:fd:
                    3c:1d:42:c9:df:95:5a:cf:b8:40:2c:1f:96:dc:4b:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:10:E7:D2:A3:96:0F:7F:06:B1:AB:A5:42:6F:80:18:8A:17:44:9B
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/34352e3138322e34312e302f32342d3234203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b0:c9:07:4e:aa:63:cb:99:c8:ff:54:db:07:d6:93:10:26:
         7d:ff:83:15:cf:19:73:f2:60:18:1e:3e:9e:18:f7:26:be:c7:
         4e:37:63:95:6d:f8:41:96:68:d7:ec:de:f8:61:85:66:c8:89:
         93:12:d7:69:7c:9a:5c:d9:3e:87:ae:d1:89:41:a3:f9:d5:9c:
         4f:b6:42:28:2c:0a:ab:7d:63:ab:04:ac:bc:7f:d7:92:8a:cb:
         76:3c:95:2c:7d:39:9b:fd:57:1f:89:7d:93:26:97:cc:c7:07:
         37:be:c5:f1:3e:99:08:56:8d:59:70:5d:e9:8a:14:b7:39:f1:
         c3:a3:46:53:57:d9:c9:09:fc:7b:74:67:cd:a7:f3:2a:bd:17:
         d9:cd:2c:3d:d5:66:82:f2:c7:59:70:56:c3:ef:70:75:48:4d:
         5e:76:7c:dc:a9:3f:89:e3:9d:ff:9b:c9:b5:2d:f0:49:60:b4:
         a0:5b:43:45:1f:95:d3:f7:fe:33:e8:0e:e6:b1:fa:4c:38:7d:
         db:85:04:5f:c0:df:b6:0a:07:3d:c6:98:e9:77:a2:02:af:6c:
         68:1d:09:24:57:6e:06:80:b3:ce:36:87:01:0b:15:d1:42:d2:
         69:68:68:73:f5:e8:ad:a0:cc:c8:89:f8:54:70:db:da:0c:0e:
         a7:ac:ed:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org