Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36312e302f32342d3234203d3e20323733303233.roa
File:                     34352e3138332e36312e302f32342d3234203d3e20323733303233.roa (raw, json)
Hash identifier:          E3F5/16Mv5OjAy84brYHDXMMYmOkPPI+nLOTB6n1RQc=
Subject key identifier:   09:54:DA:40:1D:30:B8:C2:64:53:CC:87:19:6B:78:60:19:D0:0A:9B
Certificate issuer:       /CN=352876AA3B7BD34529C4806D306052CF8D3D5515
Certificate serial:       5EC18E2D850FE6492BAF2CACB93A07673A3F3C97
Authority key identifier: 35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36312e302f32342d3234203d3e20323733303233.roa
Signing time:             Tue 05 Mar 2024 17:43:43 +0000
ROA not before:           Tue 05 Mar 2024 17:38:43 +0000
ROA not after:            Tue 04 Mar 2025 17:43:43 +0000
asID:                     273023
IP address blocks:        45.183.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl
                          rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Jun 2024 18:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c1:8e:2d:85:0f:e6:49:2b:af:2c:ac:b9:3a:07:67:3a:3f:3c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352876AA3B7BD34529C4806D306052CF8D3D5515
        Validity
            Not Before: Mar  5 17:38:43 2024 GMT
            Not After : Mar  4 17:43:43 2025 GMT
        Subject: CN=0954DA401D30B8C26453CC87196B786019D00A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:0a:83:58:53:3d:7b:ad:33:7a:b3:1e:37:
                    a6:47:a4:43:31:a3:cf:e5:47:7d:2d:45:00:8a:b3:
                    32:9f:16:5b:21:aa:0f:3f:b6:9f:69:29:d7:48:49:
                    ce:58:ca:c6:ea:39:c4:49:67:a9:e5:fd:fb:5b:2e:
                    58:17:17:bc:b4:0f:0b:7c:b2:f7:58:4b:24:98:70:
                    36:88:f3:2d:1f:1e:45:0d:64:1d:90:5c:af:32:e0:
                    3a:6e:e9:dc:d8:c1:1d:e1:19:6f:45:81:b3:b3:89:
                    17:4a:ee:ca:f3:20:23:78:99:ee:50:46:56:e4:24:
                    53:d9:fe:9d:d0:1e:ed:aa:4b:89:29:d4:f1:dc:bf:
                    07:0a:66:23:c6:51:81:c8:ce:89:1d:59:bb:1d:1f:
                    08:c0:71:b1:d2:2c:7a:b5:cb:a9:c6:40:6c:8d:b2:
                    d8:e3:c6:6e:5f:f3:4e:cc:ed:ad:22:c5:e8:14:ca:
                    54:50:31:22:50:c3:b0:8e:40:7c:b2:bc:e8:29:44:
                    97:e4:ae:c4:c5:1a:db:da:b8:82:3a:ba:63:06:1e:
                    e9:6a:0e:4c:63:f3:98:44:7b:0a:d2:1b:0d:a5:f7:
                    e6:99:ea:d3:c2:8f:bc:82:29:06:5e:07:e1:8d:7d:
                    aa:1a:de:29:5b:60:d2:ab:69:0b:aa:27:ee:fa:d8:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:DA:40:1D:30:B8:C2:64:53:CC:87:19:6B:78:60:19:D0:0A:9B
            X509v3 Authority Key Identifier:
                keyid:35:28:76:AA:3B:7B:D3:45:29:C4:80:6D:30:60:52:CF:8D:3D:55:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/352876AA3B7BD34529C4806D306052CF8D3D5515.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/352876AA3B7BD34529C4806D306052CF8D3D5515.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/948B1C0962D2BE2F6780500F236495A7845F433D3AC784492992C29C880461F5/0/34352e3138332e36312e302f32342d3234203d3e20323733303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:3a:23:ab:91:97:2b:45:b5:75:d5:c9:c4:8b:67:6e:69:2c:
         0a:69:eb:03:fd:24:a7:d0:e8:78:87:de:ac:f0:7c:6a:ef:ca:
         e1:d7:49:8b:d7:3c:8f:a3:61:63:46:56:fb:d1:92:a1:1e:9a:
         bc:f0:b0:85:0a:64:a6:e4:bf:7d:43:d3:8c:7d:47:cd:73:37:
         77:ca:9d:2d:8b:35:77:ea:c0:30:00:95:90:d7:34:b6:be:d1:
         e6:34:bd:84:6b:cc:6d:d8:91:80:fa:c9:a3:9b:00:c6:90:2b:
         73:21:b6:66:c5:1f:bb:9d:9b:f6:13:4e:b0:a0:4f:8e:41:12:
         b9:62:71:84:93:67:ab:a2:5f:8f:09:d1:bb:0b:76:b0:0a:05:
         0d:0c:3d:c8:d8:6a:04:a5:cf:f7:d8:89:1f:21:63:43:ca:d9:
         04:a1:5a:55:ad:1a:a4:26:67:ee:ac:1b:e1:d2:93:de:78:36:
         ce:a8:0b:3f:35:d7:a9:0b:0d:43:94:96:ea:9a:a9:2d:03:e1:
         d4:c4:33:03:70:26:db:23:f6:f9:b1:bb:1f:02:84:74:2f:1b:
         9e:79:da:9f:53:88:2b:47:5b:71:70:18:c1:f3:91:c3:64:3d:
         29:92:85:99:72:6b:3b:e6:50:79:2b:09:19:b4:73:5a:39:91:
         6d:b1:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:03:51 2024 by rpki-client on console-ams.rpki-client.org