Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134322e302f32342d3234203d3e20323637383131.roa
File:                     34352e3136392e3134322e302f32342d3234203d3e20323637383131.roa (raw, json)
Hash identifier:          aeRJHPCdUqe8qbpTYdGMEnhJY0vz/ZT1ZqrU/V+LWYo=
Subject key identifier:   89:4D:15:EA:E6:68:3A:16:A2:63:41:32:15:C8:16:7F:38:3E:C9:72
Certificate issuer:       /CN=EDA827CC7A82AE7851CAF29A871B5144E46B1A66
Certificate serial:       562D3B25F2FC308AE72FD76A8896CB64D09E4CD2
Authority key identifier: ED:A8:27:CC:7A:82:AE:78:51:CA:F2:9A:87:1B:51:44:E4:6B:1A:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134322e302f32342d3234203d3e20323637383131.roa
Signing time:             Tue 05 Mar 2024 18:20:18 +0000
ROA not before:           Tue 05 Mar 2024 18:15:18 +0000
ROA not after:            Tue 04 Mar 2025 18:20:18 +0000
asID:                     267811
IP address blocks:        45.169.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2d:3b:25:f2:fc:30:8a:e7:2f:d7:6a:88:96:cb:64:d0:9e:4c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA827CC7A82AE7851CAF29A871B5144E46B1A66
        Validity
            Not Before: Mar  5 18:15:18 2024 GMT
            Not After : Mar  4 18:20:18 2025 GMT
        Subject: CN=894D15EAE6683A16A263413215C8167F383EC972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:4b:4f:73:62:f1:8d:32:64:b0:13:e5:97:
                    ae:b6:16:f7:49:f8:37:9c:5c:88:a1:76:dd:0d:f6:
                    ea:00:2f:bf:16:98:d1:31:9c:b1:94:12:81:9f:f0:
                    b4:ad:29:d1:ed:da:92:c8:77:38:47:2e:b1:5b:b0:
                    6e:41:2d:b8:a6:36:ee:6d:1d:e4:8a:f4:70:71:9d:
                    b7:7b:83:d0:e7:5a:5b:ca:dd:be:00:a2:41:f7:25:
                    7a:f0:8e:c8:8e:65:01:10:cf:85:24:ba:3b:d1:1f:
                    67:f9:4f:e2:ff:33:e8:9e:3b:8b:d9:01:cf:a4:dd:
                    4b:e4:a2:e0:9b:7c:ab:11:44:c1:4a:a3:d6:b1:05:
                    c7:de:b6:82:fc:6d:52:6d:5d:dc:1e:68:1d:1e:b7:
                    d0:cb:6c:77:3a:02:1d:bd:fa:c9:65:64:82:64:e8:
                    01:c5:20:d3:fb:ea:aa:ee:ce:b9:7c:96:d4:4b:fe:
                    1f:d9:38:da:e1:86:58:b3:d8:17:fb:7e:e2:97:1c:
                    10:d9:6b:3d:28:d9:9f:81:29:71:e1:28:de:39:f7:
                    42:39:a7:f1:c6:74:82:6b:29:c4:54:75:6e:57:8b:
                    ca:03:e5:ee:02:aa:9a:d4:c9:a1:d7:83:b8:98:57:
                    28:23:52:99:fd:d4:51:10:19:9a:4c:cb:95:3f:bb:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:15:EA:E6:68:3A:16:A2:63:41:32:15:C8:16:7F:38:3E:C9:72
            X509v3 Authority Key Identifier:
                keyid:ED:A8:27:CC:7A:82:AE:78:51:CA:F2:9A:87:1B:51:44:E4:6B:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134322e302f32342d3234203d3e20323637383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a1:c7:76:00:c9:49:a1:9d:39:0b:60:8b:7f:e5:46:7d:d6:
         1c:58:3b:76:92:87:ff:15:c8:b8:25:cf:3f:26:6e:d4:19:7d:
         f6:d4:63:9f:bf:01:9d:e3:38:47:d9:c3:b0:59:2a:a2:df:7d:
         21:34:a6:34:fc:88:08:34:9e:9c:6c:f9:40:26:39:bc:25:2c:
         87:79:5c:48:ab:2e:13:63:ff:62:39:31:61:7c:46:b3:8a:52:
         94:6b:e7:3f:2e:27:72:67:b4:e2:4f:e6:82:12:46:2a:b4:12:
         41:9c:5a:a6:6c:94:19:e3:14:8d:5e:3e:e4:a3:39:55:39:4e:
         0a:12:3c:17:9e:29:4e:bc:54:b0:76:85:2e:e3:2d:f4:fd:f3:
         99:82:a5:76:ec:74:fe:44:22:4f:3f:db:98:6d:28:93:17:ce:
         16:f2:b0:8f:e4:27:c1:a3:7f:5f:e0:70:8c:74:4f:58:ae:5d:
         80:ad:ff:39:92:db:10:3b:51:c8:fb:cd:b2:fe:dd:79:70:86:
         49:8a:9b:76:75:8c:be:f6:20:71:6a:cd:b7:ae:3a:4a:36:9f:
         2b:e8:30:3c:ca:a6:a2:26:f2:e3:5d:3c:09:51:8e:49:bd:c3:
         b5:c8:19:00:82:c3:b0:16:4a:df:b6:3c:f5:dd:fc:47:0c:46:
         4d:e4:5e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:10 2024 by rpki-client on console-fra.rpki-client.org