Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa
File:                     34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa (raw, json)
Hash identifier:          zr8Me3YuI+hRivE6VnAlNOpQX56bwmGIg3dShUq66GA=
Subject key identifier:   67:8D:4A:DD:02:83:FF:B1:B5:1C:6E:54:C5:F9:0D:34:B1:8B:F4:6A
Certificate issuer:       /CN=F15C92F2D5C12CCAF83CD43DE611DC7D6257E097
Certificate serial:       15EBA4AAB3DBE67620ABF9B83DA186ED4D1A2E9C
Authority key identifier: F1:5C:92:F2:D5:C1:2C:CA:F8:3C:D4:3D:E6:11:DC:7D:62:57:E0:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa
Signing time:             Tue 05 Mar 2024 17:40:07 +0000
ROA not before:           Tue 05 Mar 2024 17:35:07 +0000
ROA not after:            Tue 04 Mar 2025 17:40:07 +0000
asID:                     263201
IP address blocks:        45.182.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:eb:a4:aa:b3:db:e6:76:20:ab:f9:b8:3d:a1:86:ed:4d:1a:2e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F15C92F2D5C12CCAF83CD43DE611DC7D6257E097
        Validity
            Not Before: Mar  5 17:35:07 2024 GMT
            Not After : Mar  4 17:40:07 2025 GMT
        Subject: CN=678D4ADD0283FFB1B51C6E54C5F90D34B18BF46A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:d0:be:6d:3c:71:b7:a2:c6:e2:5b:0a:42:
                    ce:82:06:e0:4d:1e:7a:04:49:06:4d:a7:1e:84:fc:
                    0d:0c:c4:4c:da:43:82:6d:4a:b5:46:31:e4:29:6d:
                    40:a1:b3:a1:ab:bc:86:e3:42:b0:f6:31:0d:55:48:
                    91:f0:6b:76:c7:7c:c6:9b:d0:54:ae:1e:6e:27:47:
                    17:37:8b:36:1a:c4:f5:70:9b:d4:5f:7a:59:e4:06:
                    20:00:99:5d:0c:fd:e8:34:54:66:db:25:fd:b0:d4:
                    75:f2:11:ac:51:7a:57:6c:9e:bd:3f:86:f4:aa:8f:
                    5e:1d:c6:10:50:b2:29:58:69:d4:61:51:8d:f8:82:
                    22:97:24:16:8a:14:87:cd:56:62:f7:c2:cb:6b:b0:
                    6f:85:03:41:2a:66:76:89:fc:60:51:4a:4b:e7:63:
                    65:dc:7b:cb:8b:66:3a:57:f9:3a:f1:e5:e2:56:1e:
                    6e:c6:02:6d:8f:1d:3f:c4:a3:b7:59:59:2a:d7:2f:
                    ca:34:24:45:f3:01:05:e6:e4:48:c7:a4:e6:20:41:
                    98:43:01:aa:1d:aa:d1:96:af:7c:54:82:4f:c4:91:
                    e3:4d:60:a0:9d:f5:e0:df:dc:9c:43:49:ab:46:03:
                    b8:1b:e3:5c:07:92:a2:04:f1:cf:2c:d5:f1:26:c5:
                    ad:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8D:4A:DD:02:83:FF:B1:B5:1C:6E:54:C5:F9:0D:34:B1:8B:F4:6A
            X509v3 Authority Key Identifier:
                keyid:F1:5C:92:F2:D5:C1:2C:CA:F8:3C:D4:3D:E6:11:DC:7D:62:57:E0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F15C92F2D5C12CCAF83CD43DE611DC7D6257E097.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0343781255D8C52305E47674F87851B622E8E84FDEBDC24E36B1A6A2C63DE0/0/34352e3138322e3134322e302f32342d3234203d3e20323633323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:36:6f:ae:15:5a:e3:7b:95:9e:1c:a8:ce:48:d4:64:db:
         20:f6:45:e2:c6:39:d6:6c:fa:ab:03:85:b7:60:cb:ac:0d:37:
         3e:e8:50:5c:af:89:1f:07:09:f9:14:86:b2:2e:3a:38:e3:7d:
         1c:b6:70:1d:ec:e2:c8:48:98:61:a0:8d:77:1c:45:5c:71:ac:
         32:b3:62:b5:0b:20:04:97:bc:a0:39:54:4a:8b:38:6b:1d:ec:
         ea:8e:ea:39:8d:1a:ff:4b:7d:59:af:85:2b:77:45:3e:9e:ea:
         da:ef:aa:47:9a:c5:b9:dd:f0:cd:c0:d0:93:fb:74:43:ec:4b:
         98:f2:da:ab:c4:d4:dd:ba:64:2c:2a:ae:d6:3a:34:0e:02:6a:
         1a:e2:80:ff:b3:0c:ae:10:a8:0a:53:d6:35:01:aa:0c:b5:b2:
         ff:fc:09:89:e2:82:fd:06:7e:70:52:52:d9:32:ab:42:9b:90:
         9f:73:c5:70:a8:0d:b8:33:b3:47:32:fc:a1:dc:ec:da:3e:7c:
         4a:3c:14:32:b6:1c:49:fe:ec:26:cb:c7:10:85:5d:99:1d:07:
         d4:ab:f9:4b:2d:bd:e2:12:47:0e:f4:61:b6:60:68:f4:cd:5f:
         e9:43:ef:fb:da:4d:d5:a9:5c:e8:e3:01:b3:f7:12:16:c3:3b:
         29:e0:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org