Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132382e302f32342d3234203d3e203532343638.roa
File:                     34352e3138352e3132382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          2Bx1Jhdids3pgCbTFRNhq0sJzuuNQBcxo/9Myl/RgfY=
Subject key identifier:   AD:5C:03:2E:35:CD:F2:65:B0:66:A6:50:CE:86:77:DF:59:D7:57:E3
Certificate issuer:       /CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
Certificate serial:       0B89F1BF7551127527D6DE5695646DED0C1866AA
Authority key identifier: E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132382e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:52:28 +0000
ROA not before:           Tue 05 Mar 2024 17:47:28 +0000
ROA not after:            Tue 04 Mar 2025 17:52:28 +0000
asID:                     52468
IP address blocks:        45.185.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.crl
                          rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:89:f1:bf:75:51:12:75:27:d6:de:56:95:64:6d:ed:0c:18:66:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
        Validity
            Not Before: Mar  5 17:47:28 2024 GMT
            Not After : Mar  4 17:52:28 2025 GMT
        Subject: CN=AD5C032E35CDF265B066A650CE8677DF59D757E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5c:5d:35:4e:17:06:fd:70:45:9c:c9:92:17:
                    f2:99:93:af:05:b5:b3:51:8e:56:d4:92:cc:45:07:
                    b4:13:89:74:d2:fd:81:9f:0c:6f:61:35:d2:8c:7e:
                    95:89:f9:6d:c2:04:3a:b3:fb:23:15:95:a3:f3:ad:
                    2e:8b:10:a8:c1:69:71:50:bc:bf:d5:11:3f:d7:64:
                    6a:55:00:31:ec:67:bd:07:d4:d3:c7:fe:38:42:b0:
                    35:e2:01:80:c4:f3:72:fc:8a:cc:8d:83:63:c6:e9:
                    fc:bb:7a:bb:44:0a:34:0a:e3:46:9c:ce:29:73:47:
                    8d:6d:4b:81:62:b5:c7:c5:bb:4e:18:88:d0:5b:e6:
                    23:f6:6f:da:55:88:49:8d:82:0f:09:e4:30:0d:b1:
                    4c:ac:9b:89:bb:63:fd:0a:2e:8d:e5:f2:2f:d0:cc:
                    62:cf:09:be:c2:5e:3a:58:df:82:6e:d2:26:f4:a7:
                    78:c0:21:d7:df:cc:b1:bd:a0:07:72:e0:f5:13:47:
                    d2:1f:68:cf:cc:14:b3:43:a3:49:86:86:e0:41:28:
                    ac:55:50:0c:b7:72:4a:67:58:0b:a4:d2:34:98:92:
                    4d:22:60:e7:a1:50:c2:70:c7:d9:6c:a9:fa:e3:f9:
                    65:82:31:e3:2f:2a:2c:b1:dd:29:ed:e4:1c:36:35:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5C:03:2E:35:CD:F2:65:B0:66:A6:50:CE:86:77:DF:59:D7:57:E3
            X509v3 Authority Key Identifier:
                keyid:E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:58:08:46:63:93:95:c2:ee:71:0b:bd:18:89:e6:cb:0b:0c:
         15:b3:5f:8e:90:92:14:82:ea:98:97:8a:d9:e2:3f:fe:f8:e3:
         0b:32:4e:8b:38:6a:ff:cb:29:83:5a:96:d0:f3:79:8e:fc:87:
         55:b3:8f:16:e4:22:7b:20:32:37:15:98:87:a9:91:9e:e9:b0:
         70:a1:a3:d8:29:f3:1a:bf:47:90:9f:4d:93:a8:1b:5c:c7:d5:
         47:c4:54:25:d6:18:a1:2f:20:fa:98:01:3e:9b:6e:e6:37:d7:
         b1:e5:52:fa:93:ba:e4:c2:65:a8:0e:33:28:f7:15:f8:a8:e5:
         3f:59:f6:e8:90:9a:da:6b:63:88:6b:48:4b:c7:8b:8a:c1:39:
         6d:1e:03:cb:c1:b2:da:e4:70:2e:38:ff:45:94:6d:ef:ac:8f:
         e4:59:b7:1f:76:1d:df:e5:ec:48:c1:35:70:38:32:bd:94:fa:
         91:23:a2:c7:53:89:3e:8a:94:ae:da:0b:f8:5f:6f:f4:7c:8c:
         7f:ab:5d:5d:6b:3b:cb:27:c2:93:1c:17:31:1e:ca:ae:80:4b:
         00:09:d1:67:8c:88:e4:82:a0:a8:5d:9f:64:16:22:6a:e4:ef:
         c6:9d:cb:a1:00:64:1e:13:ea:57:fd:2f:3c:12:cc:70:45:f1:
         cd:54:01:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org