Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa
File:                     34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa (raw, json)
Hash identifier:          eI3p8hS9MZq1l0WkOD4CthgtcmtAt45D8vj/qyg3dcM=
Subject key identifier:   4F:04:63:2E:29:83:47:2D:B3:18:2A:64:9C:AF:81:24:4B:61:DB:C9
Certificate issuer:       /CN=FA0EDE0E62D2295B14FD550FD9C190A6967BA96C
Certificate serial:       068F0A956A7E3B80C19C0112FCED8CBDE8B41F61
Authority key identifier: FA:0E:DE:0E:62:D2:29:5B:14:FD:55:0F:D9:C1:90:A6:96:7B:A9:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa
Signing time:             Tue 05 Mar 2024 18:06:12 +0000
ROA not before:           Tue 05 Mar 2024 18:01:12 +0000
ROA not after:            Tue 04 Mar 2025 18:06:12 +0000
asID:                     265611
IP address blocks:        45.189.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8f:0a:95:6a:7e:3b:80:c1:9c:01:12:fc:ed:8c:bd:e8:b4:1f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA0EDE0E62D2295B14FD550FD9C190A6967BA96C
        Validity
            Not Before: Mar  5 18:01:12 2024 GMT
            Not After : Mar  4 18:06:12 2025 GMT
        Subject: CN=4F04632E2983472DB3182A649CAF81244B61DBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:6e:a3:5d:8b:9d:63:c3:0a:d2:66:c6:90:
                    2b:7a:22:38:1f:7c:ab:24:61:b3:30:ed:6f:48:1e:
                    da:af:a4:07:04:14:ff:62:4c:e5:76:89:fc:91:68:
                    b4:ab:83:87:31:d4:09:a5:10:a9:10:ac:c6:1b:c0:
                    00:fa:4c:a5:a4:22:e3:88:e9:9a:16:5a:2c:89:9c:
                    49:c1:81:c1:65:27:67:35:6f:d8:c2:df:b4:4d:17:
                    e2:a4:ee:85:f6:78:a2:de:42:04:25:47:84:99:c2:
                    32:e8:70:16:85:71:c4:fc:1a:20:1b:ed:2e:7f:85:
                    06:b7:e0:9d:85:f1:3f:06:44:a6:12:b0:9c:c9:f7:
                    eb:cc:bf:0e:4d:eb:a8:c5:7c:b9:05:0e:4b:f7:ca:
                    70:a3:f3:de:fd:64:87:9c:e8:ea:e4:7b:16:e1:b9:
                    71:01:de:25:8d:eb:71:ac:bc:08:f4:bd:e2:f4:d5:
                    9a:a7:33:1d:1b:e2:fb:69:2f:c4:61:25:a3:39:88:
                    86:dd:65:d2:09:b0:0d:c8:36:d0:79:e0:0e:ec:06:
                    91:a0:8b:75:25:76:19:ba:c0:0d:9b:4c:9c:29:ca:
                    bc:9c:ec:e2:c7:ea:33:97:76:d3:3b:02:5d:14:cb:
                    59:3c:1f:83:41:4a:95:0b:dc:90:0c:47:d8:9a:61:
                    1c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:63:2E:29:83:47:2D:B3:18:2A:64:9C:AF:81:24:4B:61:DB:C9
            X509v3 Authority Key Identifier:
                keyid:FA:0E:DE:0E:62:D2:29:5B:14:FD:55:0F:D9:C1:90:A6:96:7B:A9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA0EDE0E62D2295B14FD550FD9C190A6967BA96C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A5256F22CA8F6B687B33B5BA2096EEA7B8EE66F6CB7B1E955791650C795BAA04/0/34352e3138392e3135322e302f32322d3234203d3e20323635363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:05:f1:67:af:92:43:52:87:91:91:8d:7a:b9:2b:27:90:c1:
         f2:e2:e6:5f:fc:20:f7:c6:33:04:84:69:8e:b4:1b:9e:98:03:
         9a:86:6c:6e:66:f5:eb:5f:d3:85:5c:45:2d:be:65:f7:c9:57:
         ba:d9:7d:9b:89:04:66:32:8b:83:53:81:80:7f:c6:70:39:f1:
         2d:15:43:c8:6a:8a:43:4c:df:c4:62:8e:ac:da:f3:10:27:4e:
         7d:0b:a1:7b:47:49:5d:62:40:5d:da:35:53:3c:3f:81:7f:aa:
         7a:3a:f0:74:2b:43:f6:d3:b4:a3:ad:77:77:09:c9:18:63:2c:
         14:ae:01:22:18:83:84:8b:94:0b:60:d7:a5:c3:14:21:f8:91:
         06:26:03:75:e8:8c:28:3a:2d:6c:6e:e7:01:10:8c:39:ff:1d:
         92:5b:6a:6e:e1:99:7a:d8:bc:8a:0c:b4:fc:cf:35:26:f2:60:
         51:d8:83:9e:c6:81:d8:11:7e:d6:67:fb:38:01:df:9c:6c:b4:
         88:35:d2:c1:64:82:fa:7d:65:05:47:20:92:1d:23:ee:41:41:
         2b:65:57:71:87:03:e8:ae:52:0a:3c:f1:52:4e:ef:6f:d3:7d:
         a8:b2:22:71:6b:af:6f:6a:0d:c6:bd:28:e0:1f:1f:5b:76:f4:
         5c:e0:44:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:59 2024 by rpki-client on console-ams.rpki-client.org