Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235312e302f32342d3234203d3e20323639373832.roa
File:                     34352e3138342e3235312e302f32342d3234203d3e20323639373832.roa (raw, json)
Hash identifier:          cyMN27qC52yAbSd/bbWgWQl1I7x0Lkjc2dohLMHY90o=
Subject key identifier:   75:27:C8:77:FC:FC:26:90:AA:14:6B:2D:6E:6D:B9:A5:D4:D3:33:1D
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       60DE12112BD181D68F018CF4CFC161A1C6FFF044
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235312e302f32342d3234203d3e20323639373832.roa
Signing time:             Tue 05 Mar 2024 17:44:29 +0000
ROA not before:           Tue 05 Mar 2024 17:39:29 +0000
ROA not after:            Tue 04 Mar 2025 17:44:29 +0000
asID:                     269782
IP address blocks:        45.184.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:de:12:11:2b:d1:81:d6:8f:01:8c:f4:cf:c1:61:a1:c6:ff:f0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Mar  5 17:39:29 2024 GMT
            Not After : Mar  4 17:44:29 2025 GMT
        Subject: CN=7527C877FCFC2690AA146B2D6E6DB9A5D4D3331D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b3:69:6b:74:6f:97:15:fa:a6:5b:19:24:92:
                    f2:26:42:41:f1:19:0a:67:12:ae:22:73:02:d3:4c:
                    82:83:18:f1:d7:8d:9b:c7:38:cf:56:ce:dd:10:73:
                    c7:a2:7d:4e:6e:f0:ef:6a:bb:eb:a3:03:44:c4:50:
                    11:9c:b0:5b:22:1c:c0:a9:c9:bd:82:fa:ef:a7:9e:
                    a0:29:75:4c:65:83:59:6f:7a:71:57:ea:18:74:b9:
                    3b:0f:e9:f1:49:8e:65:65:e2:95:26:c9:68:0a:92:
                    db:86:e7:09:c0:13:1a:b6:e3:8c:57:ee:07:77:46:
                    99:a4:1b:19:57:c3:0d:5b:87:79:b4:e2:e5:26:9a:
                    2d:7e:15:50:bc:16:12:c7:6a:d3:20:eb:bc:55:c8:
                    fe:8c:89:20:23:45:50:f7:85:8e:6f:db:03:af:af:
                    60:ca:13:05:b8:44:85:62:ac:3c:ee:20:5c:a3:b9:
                    ab:d8:52:38:74:3a:0d:cb:2b:91:68:a7:03:d9:48:
                    8c:2a:0d:e9:2e:c0:b0:26:3d:d3:9f:bc:fe:a6:e6:
                    03:47:ef:b6:fa:7e:18:57:25:49:e1:3f:4e:58:e0:
                    2a:8c:21:f8:c9:2b:be:83:00:34:3f:e5:d9:47:7d:
                    0a:80:44:31:de:ef:bc:a9:84:e1:eb:91:2f:8b:0e:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:C8:77:FC:FC:26:90:AA:14:6B:2D:6E:6D:B9:A5:D4:D3:33:1D
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235312e302f32342d3234203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:58:f4:70:81:53:62:28:ad:5c:4f:da:10:9e:99:9e:ba:2e:
         7c:8a:75:48:6f:36:13:63:af:ee:3e:65:c2:88:5a:cd:bd:22:
         33:4b:be:68:da:3d:c7:58:56:5e:da:09:66:0a:f7:7f:2d:f6:
         6d:b3:f9:36:8f:7d:c5:86:af:ca:4b:28:5a:37:e5:fc:bc:b9:
         01:8d:0e:4c:08:58:57:f5:ca:c6:86:95:71:b1:ae:26:88:62:
         54:44:df:ef:e2:71:15:8d:39:83:54:86:97:7e:08:41:ce:d6:
         ae:5b:26:21:61:8c:61:4b:45:30:30:54:d0:c8:f3:25:c0:cb:
         87:36:30:cb:89:8c:8f:d3:13:ec:01:38:72:36:e9:13:d7:a8:
         8e:93:78:b7:86:19:5d:a0:51:29:9f:ca:7a:c4:07:b4:29:f3:
         68:f6:6c:40:67:44:1d:8e:71:95:75:25:b9:9e:f1:fd:a5:fb:
         c2:66:39:c8:94:a8:24:ac:fc:93:fb:03:07:e1:e2:c1:fe:97:
         86:b7:8e:7e:ae:bb:cd:df:bd:20:dc:d6:54:b5:40:1e:e1:e5:
         43:e3:39:38:26:c1:cf:19:e1:4d:d2:55:49:3c:59:2a:82:9e:
         5d:d3:16:b7:01:10:fd:0c:49:d8:e6:b8:fd:c7:0e:53:08:f5:
         7c:92:a8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 08:05:08 2024 by rpki-client on console-fra.rpki-client.org