Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa
File:                     34352e3232342e3134342e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          C2LACZUBcKNYudY/5OBfQdrDyGInUYb26zZG5+sdYuA=
Subject key identifier:   48:5D:26:13:7D:3A:60:2B:BB:01:E6:B5:F6:0E:05:C7:E5:02:A3:62
Certificate issuer:       /CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
Certificate serial:       276116EC4EC978D12C20B39A0A94E11508DB2949
Authority key identifier: 8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa
Signing time:             Wed 13 Mar 2024 19:55:00 +0000
ROA not before:           Wed 13 Mar 2024 19:50:00 +0000
ROA not after:            Wed 12 Mar 2025 19:55:00 +0000
asID:                     27843
IP address blocks:        45.224.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:61:16:ec:4e:c9:78:d1:2c:20:b3:9a:0a:94:e1:15:08:db:29:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A0E80181ACDD08E8561E03A2AE9F4C98597E72F
        Validity
            Not Before: Mar 13 19:50:00 2024 GMT
            Not After : Mar 12 19:55:00 2025 GMT
        Subject: CN=485D26137D3A602BBB01E6B5F60E05C7E502A362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f3:6f:aa:b5:81:8f:91:21:87:5f:3a:53:08:
                    9d:eb:4e:0e:9a:2e:0a:77:fa:56:a3:f2:79:ef:6a:
                    76:86:1a:1b:dd:31:ac:3b:2d:e1:0c:f6:57:6a:ce:
                    5d:14:4d:f5:eb:22:95:21:a3:22:72:37:b3:db:20:
                    fb:41:85:dc:f8:b3:e5:3c:15:b9:4a:ae:e0:0c:d4:
                    24:c7:f1:45:41:6c:33:eb:71:7d:52:0a:b7:e7:19:
                    c6:94:ab:5a:eb:0f:cb:23:d4:de:d4:65:8f:f2:29:
                    e5:e9:8b:18:2b:ab:a4:75:11:b4:f0:10:c1:95:18:
                    84:06:73:f0:02:27:b8:a1:b0:6f:13:c6:a1:f8:61:
                    3f:1f:12:7f:4a:b9:a0:03:1d:87:8b:50:b3:20:f6:
                    a9:79:a1:b3:a2:d1:d8:72:a1:08:d0:c9:ca:eb:6d:
                    8c:81:a9:cc:43:19:f9:fd:8d:67:47:7e:8f:24:ad:
                    bd:20:34:9c:74:c6:ad:88:56:79:1f:92:01:a1:6d:
                    37:31:18:7a:b0:68:d5:d1:3a:8d:03:08:59:36:39:
                    36:9e:4f:3c:ee:25:a2:26:dd:23:c5:cc:8f:15:df:
                    65:89:f2:4a:82:04:c1:22:00:23:3f:e0:e7:dd:66:
                    32:83:f3:7f:40:7c:64:04:93:18:ad:b3:6f:3d:49:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:26:13:7D:3A:60:2B:BB:01:E6:B5:F6:0E:05:C7:E5:02:A3:62
            X509v3 Authority Key Identifier:
                keyid:8A:0E:80:18:1A:CD:D0:8E:85:61:E0:3A:2A:E9:F4:C9:85:97:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A0E80181ACDD08E8561E03A2AE9F4C98597E72F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/973F861373C451636CAA98ACCF3ADC0FAD064658C99FFFA8CA6A35632A7B5049/0/34352e3232342e3134342e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:30:b8:bf:64:33:0b:e2:6f:c5:d5:7a:80:eb:40:2f:39:e8:
         81:e1:54:2c:fc:87:08:30:07:ed:d9:ed:87:76:3d:dd:6b:ca:
         2f:ab:f6:4c:b9:36:6d:16:a9:f0:ec:4c:eb:81:3a:31:60:a3:
         a9:91:19:ec:54:d6:42:64:18:16:8f:53:6c:8d:b3:e4:fa:61:
         81:15:09:b9:18:f5:76:bb:88:5d:6a:7a:e5:30:ed:20:fa:9c:
         e4:4e:e6:2d:db:b5:d6:98:a2:7c:06:71:0c:34:62:57:a7:8f:
         48:02:80:87:ba:29:47:59:7b:74:a8:47:8d:29:1f:2f:e1:8c:
         39:6e:9b:d8:5d:ed:0a:40:ef:31:10:e0:e0:91:a7:55:41:2b:
         e8:af:d5:e7:8b:26:9f:b7:bf:15:12:b8:b1:62:e0:7f:62:67:
         24:dc:99:72:ec:17:f4:fa:f9:84:a3:55:f9:ba:57:ab:82:4d:
         7f:e7:c9:81:bb:71:b6:a4:23:0b:03:e7:62:a0:8a:62:1d:b8:
         e9:ce:43:27:da:97:7d:5d:60:07:da:a1:2c:07:95:47:ee:8e:
         e5:58:0b:21:95:64:13:4a:94:a8:26:d7:f0:fc:a7:61:ab:f1:
         5c:4d:17:48:d2:07:00:53:17:09:58:41:05:dd:0d:2e:04:f2:
         ec:bf:16:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org