Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3133302e302f32342d3234203d3e203532343638.roa
File:                     34352e3138352e3133302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          GUOWkeVqI25z+tZm+WE6NEvybLeOuYEewRt4eqY8UqE=
Subject key identifier:   CC:A7:34:31:39:97:CF:A6:C8:C5:2F:94:80:16:87:A3:C9:E4:69:64
Certificate issuer:       /CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
Certificate serial:       444A2E218AA9A8866E54CC7302C35B91E4F08EF4
Authority key identifier: E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3133302e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:52:28 +0000
ROA not before:           Tue 05 Mar 2024 17:47:28 +0000
ROA not after:            Tue 04 Mar 2025 17:52:28 +0000
asID:                     52468
IP address blocks:        45.185.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.crl
                          rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4a:2e:21:8a:a9:a8:86:6e:54:cc:73:02:c3:5b:91:e4:f0:8e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
        Validity
            Not Before: Mar  5 17:47:28 2024 GMT
            Not After : Mar  4 17:52:28 2025 GMT
        Subject: CN=CCA734313997CFA6C8C52F94801687A3C9E46964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:53:af:e7:a3:61:de:d0:f3:53:f6:94:db:
                    01:f6:45:90:38:b8:e5:5a:4f:88:8e:22:31:b1:2d:
                    00:02:57:64:b9:f2:a9:39:cc:0f:cd:9a:a4:e1:df:
                    1c:0e:05:f3:b2:da:ba:dc:b5:46:7b:b1:d7:1b:e6:
                    1e:44:13:a7:47:cd:71:d8:c4:17:b8:52:32:af:0c:
                    ea:31:27:1a:cd:ea:96:9a:ea:23:81:86:11:56:bb:
                    20:be:23:58:49:34:73:3f:ea:b7:fc:2b:6f:d6:f6:
                    ea:00:76:6d:3f:1b:cb:43:f0:73:74:8e:71:c5:53:
                    bc:aa:75:c7:ae:55:7e:d2:9c:db:f4:e7:6a:f0:40:
                    64:72:94:3d:6c:22:f2:79:08:47:e4:15:e1:3c:b4:
                    eb:c2:da:e9:a7:06:45:35:cf:93:df:14:a3:3c:b2:
                    b4:f6:98:a2:ac:78:c4:f9:ee:59:fc:41:47:8f:77:
                    8e:f1:8f:28:d1:4e:6c:60:72:fc:64:56:f1:bf:38:
                    62:da:0f:25:97:33:c7:a9:94:1d:68:9c:79:91:08:
                    ba:75:23:dd:bd:2a:d2:60:ad:25:ce:67:44:a4:ab:
                    9b:fb:1e:16:a7:8a:d3:b2:9a:21:1c:fb:59:ae:c7:
                    ce:b2:44:1c:5f:b2:77:0a:08:d7:00:1e:ca:3a:3e:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A7:34:31:39:97:CF:A6:C8:C5:2F:94:80:16:87:A3:C9:E4:69:64
            X509v3 Authority Key Identifier:
                keyid:E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3133302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:13:c0:4b:20:a3:94:94:79:08:0f:db:c9:67:d7:f5:bd:d1:
         5c:f6:e5:50:c8:3f:37:82:3b:44:42:81:71:ca:3c:0d:91:70:
         80:6c:92:ad:23:47:8c:10:9b:0d:67:a5:21:66:23:77:75:b9:
         00:a2:ef:30:bb:de:c1:28:cd:9f:24:57:db:a1:87:53:92:4e:
         0e:3d:6c:22:b9:44:81:30:c5:f4:4b:42:ed:1a:ad:af:28:e3:
         7e:c0:91:40:75:65:a6:f5:d8:5f:8a:d5:9f:14:c3:15:39:58:
         17:30:1a:65:af:fc:15:e9:de:7c:de:ba:9b:27:1c:90:98:97:
         5e:32:c9:a1:2d:db:04:28:ba:45:ff:38:74:9a:0a:8a:6f:2c:
         68:38:bc:fa:40:db:9d:79:67:d8:18:0d:b4:9b:6d:5b:5a:9b:
         52:b6:9a:dd:95:5e:56:4c:ba:ce:ea:9d:50:9b:d6:0b:cb:53:
         43:3f:77:12:fe:6c:a9:28:3c:dc:f5:03:d1:2d:81:84:db:1d:
         f3:10:18:34:f6:66:ea:e8:43:5a:49:ac:90:71:26:74:f2:ed:
         6d:83:53:18:90:60:f0:5d:aa:2c:0d:52:48:5c:38:51:5e:9f:
         35:e5:ca:9d:0e:65:a0:06:34:09:6a:3b:7f:7f:4b:f8:27:cf:
         53:e6:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 16:43:21 2024 by rpki-client on console-ams.rpki-client.org