Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa
File:                     34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa (raw, json)
Hash identifier:          QEcv5jPRjRhMxrji6lIbhgxg5V0IWJ+2Jid2N+04b9E=
Subject key identifier:   DE:46:7F:46:46:74:3D:0E:B9:AF:04:A9:92:B1:0E:1F:66:9F:4D:80
Certificate issuer:       /CN=8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49
Certificate serial:       0BD1D064F928312C2F817A77C3B4E3E0FB2967
Authority key identifier: 8E:D5:C3:80:8B:FF:79:2A:EC:D4:ED:EE:DF:CE:E7:33:7D:B8:9C:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa
Signing time:             Tue 05 Mar 2024 17:56:23 +0000
ROA not before:           Tue 05 Mar 2024 17:51:23 +0000
ROA not after:            Tue 04 Mar 2025 17:56:23 +0000
asID:                     269849
IP address blocks:        45.180.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d1:d0:64:f9:28:31:2c:2f:81:7a:77:c3:b4:e3:e0:fb:29:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49
        Validity
            Not Before: Mar  5 17:51:23 2024 GMT
            Not After : Mar  4 17:56:23 2025 GMT
        Subject: CN=DE467F4646743D0EB9AF04A992B10E1F669F4D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:56:07:e1:f8:0a:aa:95:1d:7e:35:6c:b5:d7:
                    3a:8c:69:ca:2e:31:50:b2:44:04:11:77:8b:b0:a4:
                    e3:23:2c:97:8a:02:dc:96:47:34:b5:8b:80:6a:c9:
                    4f:00:82:ad:2e:7e:36:af:30:03:1a:23:cf:bc:87:
                    c6:36:ff:77:7e:95:e3:fb:b8:27:f2:37:b1:49:88:
                    b8:27:2a:79:37:5f:ac:1f:65:7c:51:c5:ae:ae:b7:
                    82:17:a3:d6:e1:d4:18:72:ee:1d:36:c6:77:3f:b9:
                    15:38:3e:91:28:4e:f0:20:b1:8b:a4:a3:fd:9d:d7:
                    81:f9:2c:b7:17:87:d7:81:66:14:80:05:a5:46:44:
                    a1:d9:99:a3:c6:c5:cd:e4:d4:36:a4:59:18:47:33:
                    57:e3:c5:89:13:81:40:77:da:11:aa:44:c7:92:f5:
                    e9:a1:0b:c1:97:0f:93:20:d3:92:25:1f:55:c5:67:
                    3f:13:e3:8e:16:1d:fc:b6:79:cc:a4:a2:e6:9a:db:
                    95:17:b3:d0:d8:b7:d4:a9:1d:d1:a5:28:09:1d:a9:
                    8c:a6:7e:68:8e:6d:36:ef:e9:3b:ca:0a:8f:5b:f0:
                    64:08:00:fc:99:10:2c:5d:8a:a9:41:20:2f:65:b0:
                    12:63:59:60:5c:06:1d:7f:dd:94:43:25:f9:c3:66:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:46:7F:46:46:74:3D:0E:B9:AF:04:A9:92:B1:0E:1F:66:9F:4D:80
            X509v3 Authority Key Identifier:
                keyid:8E:D5:C3:80:8B:FF:79:2A:EC:D4:ED:EE:DF:CE:E7:33:7D:B8:9C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8ED5C3808BFF792AECD4EDEEDFCEE7337DB89C49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EA083DD6037FBA4223988E02BFC662A9228300C255951BF63E83A48CF255774/0/34352e3138302e3137392e302f32342d3234203d3e20323639383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c0:a2:12:7a:b5:7a:db:af:a0:01:21:af:b7:9b:7e:19:3d:
         f2:5b:39:bd:db:38:84:11:ae:75:9a:b8:e8:63:7d:c5:43:f2:
         70:7f:e7:ef:3b:86:15:cf:a4:c5:71:ba:90:a4:7f:9a:32:48:
         a1:df:d6:e9:45:21:d1:70:fb:a0:ce:7c:07:e5:bc:6a:da:66:
         a7:00:9d:da:33:91:82:a9:b3:78:8c:d3:37:9a:93:b6:35:af:
         80:e0:32:3c:1c:6c:86:8e:3d:51:08:3a:4a:7b:f1:f8:cc:08:
         ee:e1:9b:da:a6:61:83:2c:64:a2:87:b5:6a:56:d2:12:d2:d8:
         e3:88:be:c4:1c:93:77:f8:c3:e6:34:99:34:94:fa:83:03:63:
         5f:85:ca:e4:8f:d5:52:9b:f8:90:3f:27:55:aa:27:53:78:1c:
         b3:5b:83:27:fc:3a:71:7a:ed:f3:dd:08:38:69:0d:47:1d:b4:
         49:4f:eb:94:0c:09:75:88:ed:d4:dc:fe:55:22:b2:cc:71:b7:
         dc:3b:f3:2c:4e:9e:a4:6b:83:95:e2:ab:81:87:12:7b:ef:a6:
         db:d7:d5:41:b4:0c:b5:49:62:d4:fc:4e:2d:d9:3d:31:40:18:
         09:d5:e3:3e:f8:5c:a3:57:10:a6:5d:3f:2b:2a:fb:86:1d:79:
         71:d6:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org