Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A6727B82BBE0AD5AB1CBACC6DEFA41DC6E5395D061D53440E58C33D435D196/0/34352e3138332e3137392e302f32342d3234203d3e203634313231.roa
File:                     34352e3138332e3137392e302f32342d3234203d3e203634313231.roa (raw, json)
Hash identifier:          +Wtc0WNcidkUarePzvrSbJr/NE+tFwHd889+VTST2cw=
Subject key identifier:   A8:A6:BA:9B:FC:67:50:88:34:17:5A:7B:E8:3E:C0:BC:E2:1F:E2:60
Certificate issuer:       /CN=C929867F6E08758C87F2686BB464F4BE51AB9BB9
Certificate serial:       43926DBAAA9CE9775D494D101125033C9158ABDC
Authority key identifier: C9:29:86:7F:6E:08:75:8C:87:F2:68:6B:B4:64:F4:BE:51:AB:9B:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C929867F6E08758C87F2686BB464F4BE51AB9BB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A6727B82BBE0AD5AB1CBACC6DEFA41DC6E5395D061D53440E58C33D435D196/0/34352e3138332e3137392e302f32342d3234203d3e203634313231.roa
Signing time:             Tue 05 Mar 2024 17:51:42 +0000
ROA not before:           Tue 05 Mar 2024 17:46:42 +0000
ROA not after:            Tue 04 Mar 2025 17:51:42 +0000
asID:                     64121
IP address blocks:        45.183.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81A6727B82BBE0AD5AB1CBACC6DEFA41DC6E5395D061D53440E58C33D435D196/0/C929867F6E08758C87F2686BB464F4BE51AB9BB9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81A6727B82BBE0AD5AB1CBACC6DEFA41DC6E5395D061D53440E58C33D435D196/0/C929867F6E08758C87F2686BB464F4BE51AB9BB9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C929867F6E08758C87F2686BB464F4BE51AB9BB9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:92:6d:ba:aa:9c:e9:77:5d:49:4d:10:11:25:03:3c:91:58:ab:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C929867F6E08758C87F2686BB464F4BE51AB9BB9
        Validity
            Not Before: Mar  5 17:46:42 2024 GMT
            Not After : Mar  4 17:51:42 2025 GMT
        Subject: CN=A8A6BA9BFC67508834175A7BE83EC0BCE21FE260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e4:4b:eb:e1:13:84:15:f0:57:d8:46:a5:01:
                    5d:c2:85:98:ae:ff:a5:c1:d2:1e:86:93:cd:11:e2:
                    6e:a5:d0:fa:0e:4b:4b:28:75:80:4d:7d:57:07:71:
                    58:70:10:ab:fb:41:d2:5c:a9:84:71:c2:b7:8c:9e:
                    4b:c1:d2:71:cd:00:d3:52:1a:1e:24:33:d0:a5:cb:
                    0c:35:9b:06:10:fd:9e:89:43:ea:4c:ce:2d:b7:38:
                    88:6c:7e:01:33:1c:cf:9e:07:ff:e0:0d:30:53:8c:
                    a0:a5:0f:b3:94:93:d0:50:3c:6f:56:44:12:37:4f:
                    c0:d5:e7:91:20:96:c3:92:95:2f:5e:a3:1f:13:b7:
                    b6:e1:5c:b0:23:3b:e4:65:f9:39:e6:34:7d:3d:5c:
                    2e:12:0f:a3:b8:2a:30:c0:df:1e:fe:57:74:f0:67:
                    c0:44:35:0c:93:17:7e:25:94:6c:ab:d0:9c:bf:be:
                    28:09:46:06:99:79:bf:c9:73:14:ac:5e:8c:37:16:
                    2e:af:8b:29:15:df:f4:6f:b7:67:59:0b:2f:8b:0c:
                    81:83:c2:ae:9e:44:8c:8b:a0:4c:69:67:2b:73:7b:
                    a9:13:b8:30:f1:87:7d:4c:b1:bc:99:9e:cc:dd:70:
                    4f:11:8c:fe:8e:90:7c:89:b5:03:b6:2e:6b:2d:49:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A6:BA:9B:FC:67:50:88:34:17:5A:7B:E8:3E:C0:BC:E2:1F:E2:60
            X509v3 Authority Key Identifier:
                keyid:C9:29:86:7F:6E:08:75:8C:87:F2:68:6B:B4:64:F4:BE:51:AB:9B:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A6727B82BBE0AD5AB1CBACC6DEFA41DC6E5395D061D53440E58C33D435D196/0/C929867F6E08758C87F2686BB464F4BE51AB9BB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C929867F6E08758C87F2686BB464F4BE51AB9BB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A6727B82BBE0AD5AB1CBACC6DEFA41DC6E5395D061D53440E58C33D435D196/0/34352e3138332e3137392e302f32342d3234203d3e203634313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a3:9b:64:fa:9d:ba:82:0e:33:88:3f:10:49:3e:0a:30:18:
         cf:8c:50:2d:02:65:f5:7b:c9:ca:c5:cd:6d:03:bc:23:88:f2:
         67:cd:3d:a0:26:4d:c4:18:86:88:2c:53:9d:47:de:1d:08:49:
         33:b5:fe:b8:18:21:a5:87:4e:8b:65:47:df:52:03:7e:29:b8:
         f6:f5:3b:40:84:8c:88:85:95:8d:0e:8c:f1:a3:f7:a5:51:a1:
         3a:7d:e4:51:ba:ec:bd:62:0f:38:90:c3:af:23:98:1a:97:8a:
         d5:2e:fb:9e:1b:5e:fb:25:bd:0b:19:0f:e1:e3:10:e8:17:e0:
         b6:d7:a6:70:49:27:12:61:61:f6:e7:f5:33:44:45:15:13:c9:
         5d:75:96:2e:08:7b:bf:c3:3b:49:e6:84:15:ac:66:2a:59:7a:
         98:46:e6:33:fc:06:37:7c:fe:e2:4a:29:79:7b:ad:a8:72:0d:
         7d:5b:1a:0a:dd:4c:d7:c7:2f:c6:9e:e8:01:a8:14:32:51:3f:
         e8:52:fa:85:72:b9:e3:c1:4d:e4:1d:21:15:0c:64:e3:21:ac:
         ce:7f:ef:8e:75:0b:da:2d:48:ed:84:00:8f:5c:0f:64:47:49:
         88:9a:ab:af:f3:1d:8f:8c:3c:ae:57:d5:cd:5f:ec:3f:65:a4:
         05:cf:83:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org