Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137392e302f32342d3234203d3e20323639393738.roa
File:                     3138392e34352e3137392e302f32342d3234203d3e20323639393738.roa (raw, json)
Hash identifier:          6R4uT9Rg3IOoi3ph4WlT2O6pxRaUIP0oJhR/xHIjRR0=
Subject key identifier:   8A:58:22:D9:30:E5:13:F4:63:48:B1:B2:1C:38:6E:66:D4:41:0C:54
Certificate issuer:       /CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
Certificate serial:       1CE1D3C9758AD961AFD2ACD424170312FACEB340
Authority key identifier: 6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137392e302f32342d3234203d3e20323639393738.roa
Signing time:             Tue 05 Mar 2024 18:17:13 +0000
ROA not before:           Tue 05 Mar 2024 18:12:13 +0000
ROA not after:            Tue 04 Mar 2025 18:17:13 +0000
asID:                     269978
IP address blocks:        189.45.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e1:d3:c9:75:8a:d9:61:af:d2:ac:d4:24:17:03:12:fa:ce:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A3360A7AAF500169AA1D3966EF9EDFA825A544E
        Validity
            Not Before: Mar  5 18:12:13 2024 GMT
            Not After : Mar  4 18:17:13 2025 GMT
        Subject: CN=8A5822D930E513F46348B1B21C386E66D4410C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:99:0d:63:f2:b2:da:75:bf:96:c5:60:54:
                    54:a7:be:b8:9b:8f:63:81:81:eb:b7:ce:b8:dc:cc:
                    2b:8d:bf:e6:19:c9:e8:e5:80:8d:6a:d9:88:7e:b4:
                    2a:50:8c:86:b9:af:59:d3:ad:b1:ff:71:1c:7d:d7:
                    4c:0e:dc:9b:bc:a7:ed:b4:88:02:5e:f4:8e:b6:9a:
                    9a:8c:23:18:ee:17:b3:41:7d:27:6b:97:19:aa:e4:
                    e3:ba:f9:52:39:59:9a:5b:c4:95:a1:58:25:f2:31:
                    b9:65:3d:57:25:86:f3:ec:e7:d3:7d:f8:09:20:b5:
                    2a:c6:ad:9d:37:0a:f6:26:cd:a4:4b:6b:71:27:ce:
                    1e:57:5a:bd:0e:23:a7:13:46:62:e1:44:e3:04:d3:
                    dc:69:f3:e9:78:e3:c0:38:72:e9:bc:13:0f:6e:2a:
                    e0:45:64:86:24:0b:61:c9:f0:0a:2b:e8:3b:0b:21:
                    37:84:bd:c7:07:64:35:1e:22:7b:d1:ee:8d:6e:4e:
                    0a:7a:5f:d2:ab:58:62:9f:8b:6a:9e:0b:d3:9e:e4:
                    61:6f:1e:8a:28:d1:8e:e7:8e:46:84:87:02:ab:79:
                    e2:25:73:6d:1b:f3:bf:ff:89:52:87:2e:c7:58:35:
                    03:ba:83:fe:c4:71:e5:bc:c5:1c:0c:9d:5a:f1:f0:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:58:22:D9:30:E5:13:F4:63:48:B1:B2:1C:38:6E:66:D4:41:0C:54
            X509v3 Authority Key Identifier:
                keyid:6A:33:60:A7:AA:F5:00:16:9A:A1:D3:96:6E:F9:ED:FA:82:5A:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A3360A7AAF500169AA1D3966EF9EDFA825A544E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B5CCFD453A229B9F6C4385704CBADA93C76B2F2844CCD556677C12D8C7A97C1/0/3138392e34352e3137392e302f32342d3234203d3e20323639393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.45.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:d1:17:c1:83:65:bd:c9:dd:dc:f7:1e:e7:1d:99:86:44:
         c2:3b:09:e9:32:a1:de:8d:30:4c:5b:ed:2a:cc:ee:58:e9:51:
         ac:8b:ff:5d:b2:85:68:50:12:42:73:2f:b6:f8:19:f5:ce:80:
         8e:9c:dd:73:04:db:ad:09:2e:5b:e7:68:2f:c7:d9:ed:21:b7:
         8c:67:a2:1f:90:f3:f6:c5:dd:53:d0:3f:06:26:43:02:fc:04:
         13:d4:41:ce:0a:82:97:38:99:2f:0e:32:90:9d:4a:97:0b:bf:
         61:24:9b:97:e2:b7:d2:a5:8f:b5:25:d2:72:8a:91:2f:5b:6e:
         81:9b:00:45:8a:a3:78:4c:90:69:8f:8c:6d:15:ab:59:33:85:
         97:a7:ef:14:ba:de:8f:cf:79:42:40:23:d1:11:51:e5:91:3e:
         8e:6a:7b:48:96:00:ee:65:64:1c:8a:ac:2d:e2:11:9e:12:fb:
         06:af:2f:53:21:81:a9:38:af:07:dc:ea:67:76:49:06:e6:37:
         2e:33:16:a3:5d:9d:64:8b:73:39:72:c6:ac:f2:a0:ea:7a:15:
         b9:fb:69:e7:74:9b:8d:71:b4:a6:3a:66:6e:be:96:7e:2e:e2:
         18:fb:f9:d3:ef:9a:eb:8c:10:c1:9b:33:e9:ce:9c:7b:a4:eb:
         cf:b3:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 01:28:37 2024 by rpki-client on console-fra.rpki-client.org