Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32352e302f32342d3234203d3e20323639383134.roa
File:                     34352e3138362e32352e302f32342d3234203d3e20323639383134.roa (raw, json)
Hash identifier:          zESTRo+ttJ6Pgf6ki5NWIFp6UmTMxY10ea0fDQM0YQw=
Subject key identifier:   E0:C5:3E:8A:B8:35:6E:FA:44:89:32:53:31:06:71:C8:12:27:8E:AC
Certificate issuer:       /CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
Certificate serial:       0EAA1B51FE8944CAEF9F18036790D9454789F455
Authority key identifier: 8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32352e302f32342d3234203d3e20323639383134.roa
Signing time:             Tue 05 Mar 2024 17:52:56 +0000
ROA not before:           Tue 05 Mar 2024 17:47:56 +0000
ROA not after:            Tue 04 Mar 2025 17:52:56 +0000
asID:                     269814
IP address blocks:        45.186.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:aa:1b:51:fe:89:44:ca:ef:9f:18:03:67:90:d9:45:47:89:f4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
        Validity
            Not Before: Mar  5 17:47:56 2024 GMT
            Not After : Mar  4 17:52:56 2025 GMT
        Subject: CN=E0C53E8AB8356EFA44893253310671C812278EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:d0:de:47:35:30:eb:d6:01:21:c3:b7:fe:
                    e9:36:d8:27:d6:89:6f:6f:5b:04:11:52:62:40:7a:
                    50:9b:be:4e:a6:de:85:eb:42:b8:0c:6d:9b:af:d0:
                    17:1f:6d:6a:a9:36:dc:e2:a4:d3:90:eb:9e:07:1f:
                    f8:91:87:7e:fe:e9:6e:8f:0a:72:4d:2a:3d:72:fd:
                    1c:82:7a:95:93:ff:b7:de:12:6f:8e:4e:10:74:48:
                    b6:f6:6b:85:f1:22:61:48:74:e0:a0:60:75:e9:70:
                    be:2b:3a:5e:3a:d2:98:b0:5e:74:40:a6:85:fe:c2:
                    fa:a1:59:4d:0e:f1:0c:47:26:c2:9a:b7:0b:2e:8f:
                    1f:24:84:d6:de:ab:9d:27:91:d5:ec:f0:a1:2e:70:
                    a4:4e:d8:8b:f3:d4:a7:09:8d:7a:cd:1b:33:ba:43:
                    cb:3a:09:ae:be:05:02:af:8d:cd:26:65:8b:49:f2:
                    67:e8:15:54:f2:12:c3:51:b9:17:35:7e:02:de:b6:
                    40:55:25:83:af:37:f0:1a:d8:98:98:f3:3a:26:ab:
                    18:a6:3c:48:09:e5:e0:b4:bb:7b:3d:6e:05:51:da:
                    1a:6b:9e:60:6f:4e:24:a7:1c:d0:12:f0:73:a5:4b:
                    fc:ad:ec:a9:36:bd:07:40:64:68:45:5c:a3:54:6a:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:3E:8A:B8:35:6E:FA:44:89:32:53:31:06:71:C8:12:27:8E:AC
            X509v3 Authority Key Identifier:
                keyid:8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32352e302f32342d3234203d3e20323639383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:22:a1:30:70:2c:13:27:37:f0:9f:99:5c:70:e2:75:17:
         b6:f3:e1:20:04:75:0d:71:a1:bd:cd:ac:15:22:2a:78:5f:d9:
         f8:e5:28:51:cf:15:84:56:19:ea:2f:92:40:08:41:f8:8d:ea:
         f8:0d:86:ea:56:72:aa:88:d2:1b:dd:8b:92:ce:ca:b1:f7:f1:
         14:70:bb:fa:d9:e4:91:fd:b0:13:73:06:47:4d:67:ae:d4:0c:
         d1:8d:da:4d:df:30:9f:c2:da:d6:fb:0d:dc:d8:34:46:0d:5b:
         86:02:c0:d7:46:f8:ea:f1:c0:0b:18:89:63:7e:ec:63:d4:2e:
         d4:bf:42:bc:99:43:ba:71:d4:04:90:f2:1a:76:1d:68:98:35:
         a8:a0:82:2a:bb:d0:3b:4d:cd:45:e9:e4:6e:62:92:e1:a6:cb:
         35:7a:be:16:b8:42:ff:64:c4:f0:60:cd:0a:88:a7:b0:83:15:
         2c:1c:ff:01:7c:da:3a:20:73:d4:47:f4:53:e0:8e:57:bb:86:
         88:11:f8:a2:c2:5c:35:d9:85:ae:b4:6f:16:a4:cd:16:76:a5:
         89:1e:bf:ca:f0:7e:f2:b0:4c:4b:33:64:91:3a:ff:69:45:0b:
         ee:bd:11:5f:8d:30:1e:2c:26:b3:22:6d:9b:96:12:a5:02:92:
         af:e6:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:09:37 2024 by rpki-client on console-fra.rpki-client.org