Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa
File:                     34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa (raw, json)
Hash identifier:          w+TXgwCaXSPrEVyxXNsmoqbDiBUc11Di5o5Js8tZeKk=
Subject key identifier:   F3:E2:99:09:1E:61:29:F1:8B:3A:5B:55:59:5E:9B:FE:E8:C3:8B:40
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       0CCDD21E51FF013A912B86228EE41681582962B6
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:25 +0000
ROA not before:           Tue 05 Mar 2024 17:39:25 +0000
ROA not after:            Tue 04 Mar 2025 17:44:25 +0000
asID:                     269782
IP address blocks:        45.184.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cd:d2:1e:51:ff:01:3a:91:2b:86:22:8e:e4:16:81:58:29:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:25 2024 GMT
            Not After : Mar  4 17:44:25 2025 GMT
        Subject: CN=F3E299091E6129F18B3A5B55595E9BFEE8C38B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fa:99:10:4a:bd:10:89:82:51:57:6d:04:3b:
                    be:b3:62:20:6e:dd:f5:93:63:49:69:65:ac:4a:3e:
                    08:3e:8b:63:91:05:c2:8d:69:be:71:04:82:b8:51:
                    cf:bc:3d:10:99:75:9f:96:a4:87:4e:25:70:48:5f:
                    9b:18:27:49:84:86:12:23:5f:10:bb:5f:13:db:53:
                    ed:fa:ce:13:cb:a1:60:e0:81:1e:93:20:60:7a:0d:
                    20:ca:f5:c8:96:5c:b8:d9:12:96:f2:30:73:5f:84:
                    15:2a:10:67:b3:7f:29:d3:d2:34:15:cf:b5:8f:03:
                    b4:2e:3c:de:a2:a8:47:76:d5:2a:3f:7b:1d:57:db:
                    3e:4d:3d:9b:a6:bb:d2:17:cc:41:5c:b6:58:b3:c3:
                    af:46:dd:76:d0:75:31:89:2b:47:e3:17:5f:af:32:
                    7a:16:11:b1:15:06:27:1a:94:88:97:8c:51:74:36:
                    97:a2:f5:44:c5:c6:86:e1:29:c7:31:f9:86:d4:c9:
                    c0:56:77:4a:f4:df:e3:7a:7b:cc:0c:52:16:35:28:
                    6e:6f:a9:2e:40:c9:f0:73:6b:5f:9d:16:dc:2b:ee:
                    f8:5c:67:f2:e8:8c:2f:37:53:b0:6b:c7:2a:10:60:
                    3a:fe:c0:f2:d8:d4:c0:7a:34:30:14:95:f6:08:4d:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:99:09:1E:61:29:F1:8B:3A:5B:55:59:5E:9B:FE:E8:C3:8B:40
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:3d:ed:3e:0f:d8:f2:ad:51:26:f1:89:8d:bd:75:d8:9b:d6:
         81:db:f1:bf:93:c9:d6:0b:c7:4c:22:6a:d4:b0:05:97:4d:a7:
         d3:c1:be:0c:db:ec:4f:63:ae:3c:c4:c2:81:c7:39:df:06:d8:
         ba:b7:a8:1d:70:a9:03:32:a0:5a:de:90:0c:50:51:a9:2c:ef:
         ef:f6:ed:0b:4d:f8:02:09:76:45:4b:8e:af:cc:9e:60:bb:c5:
         38:38:a6:f7:23:65:57:38:29:fe:8a:d9:a5:59:f3:72:f6:8e:
         33:60:03:2b:98:9f:67:fd:71:ce:d1:a4:40:17:e6:bb:0f:a8:
         36:f4:31:09:fe:7d:4c:b3:a9:81:0c:ad:1e:54:d6:18:68:39:
         69:69:ed:81:74:5d:00:fe:73:d0:46:18:53:fb:1e:3a:0b:9b:
         f4:c2:ef:52:ef:e9:12:f8:c2:d8:04:ca:3a:6c:31:4a:3a:f3:
         f9:fc:0e:ee:b7:09:e8:a9:05:d8:17:75:af:18:97:9b:c9:21:
         70:17:97:8c:2f:21:4a:71:68:27:82:10:5d:94:bf:a6:b6:46:
         74:12:c3:97:2a:59:3f:3d:b2:86:32:85:93:23:13:19:cc:f5:
         ab:c0:cb:11:15:51:a5:43:41:5b:8b:c1:98:89:d5:5a:85:9c:
         1d:54:98:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:43 2024 by rpki-client on console-fra.rpki-client.org