Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa
File:                     3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa (raw, json)
Hash identifier:          turkiHkMGCX1jKctFu70cos4OvsBcCnHCLgB8bWnS4k=
Subject key identifier:   6F:B0:17:26:35:8A:00:BA:BE:93:52:08:3D:9B:B0:F3:FA:74:8A:78
Certificate issuer:       /CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
Certificate serial:       7D62FF6FE52736013866DB136DF3CD200D4DE88B
Authority key identifier: 45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa
Signing time:             Tue 05 Mar 2024 18:13:15 +0000
ROA not before:           Tue 05 Mar 2024 18:08:15 +0000
ROA not after:            Tue 04 Mar 2025 18:13:15 +0000
asID:                     265780
IP address blocks:        168.227.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:62:ff:6f:e5:27:36:01:38:66:db:13:6d:f3:cd:20:0d:4d:e8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45E01B7B9B876AE1F0C01505969888DB05F86C32
        Validity
            Not Before: Mar  5 18:08:15 2024 GMT
            Not After : Mar  4 18:13:15 2025 GMT
        Subject: CN=6FB01726358A00BABE9352083D9BB0F3FA748A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:65:8c:e3:8e:fa:20:cd:7d:11:0c:9a:c7:
                    21:d0:d7:cd:ab:37:9d:53:ca:9a:14:35:59:f1:49:
                    a7:8f:ed:0c:11:88:34:c4:ee:e1:9a:c6:1d:c1:ba:
                    2a:a8:b4:db:7c:84:a1:e3:97:47:39:80:a0:18:78:
                    35:06:0b:a8:e3:55:e5:5b:98:dc:8f:a2:54:33:19:
                    26:6e:fb:5d:55:f4:a9:d6:61:84:e6:0c:7d:0a:75:
                    be:6e:25:1f:7c:19:85:eb:0b:5b:ae:0f:e2:46:8d:
                    3b:23:41:39:e8:e7:f1:03:a6:80:23:7c:92:c6:b7:
                    1f:88:19:2d:29:56:3d:7a:35:a2:28:28:ad:e7:4d:
                    4c:0f:dd:0b:7e:f7:4a:13:be:71:10:de:de:32:7f:
                    3f:d4:07:2f:c1:f9:32:c9:65:5c:45:e9:e3:e1:e8:
                    21:92:11:3a:e0:23:c7:15:30:15:85:fb:49:fd:b1:
                    9c:18:c1:c3:d5:1a:c9:9b:1f:36:4f:26:e2:6e:0f:
                    a3:f7:66:6c:3b:b2:63:b1:a6:6d:e0:ab:f6:a6:2b:
                    da:d3:32:23:bd:10:eb:63:17:ea:44:84:54:eb:01:
                    1e:7d:79:63:d7:0f:9d:97:a3:cb:e8:bb:97:35:5d:
                    54:81:6d:fa:99:b0:66:ac:f5:a8:d7:5f:21:d4:57:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B0:17:26:35:8A:00:BA:BE:93:52:08:3D:9B:B0:F3:FA:74:8A:78
            X509v3 Authority Key Identifier:
                keyid:45:E0:1B:7B:9B:87:6A:E1:F0:C0:15:05:96:98:88:DB:05:F8:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45E01B7B9B876AE1F0C01505969888DB05F86C32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEF4C39A558544AE54CC71DBA2AA80B36BFBE2CA5BF4F0DB9823D2AB6B747E63/0/3136382e3232372e32312e302f32342d3234203d3e20323635373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:f8:9f:7a:4e:bf:92:c0:87:86:f0:75:db:b8:f2:0f:e7:72:
         77:a3:9d:41:13:86:fc:37:19:fe:53:25:37:92:25:c0:b6:f7:
         4e:fe:05:04:ea:02:02:7a:16:0d:ec:33:d6:e5:44:f8:ab:12:
         fd:50:84:9a:e7:c5:3c:e8:63:0d:53:a7:52:8d:22:77:12:c2:
         5e:f5:64:1b:34:10:f2:11:af:96:3e:ca:fb:6b:1f:c2:65:b9:
         23:35:f4:35:94:df:7c:f3:a6:26:1f:aa:75:2d:26:fb:0d:2b:
         ba:43:98:b6:2e:29:27:07:91:5e:6f:b1:7e:e1:4e:75:36:9c:
         09:fe:0a:fb:06:9f:a7:91:1b:7e:f7:49:4a:dd:9a:e0:54:26:
         c9:06:63:7d:6b:f1:d9:6b:12:08:aa:9d:f7:ec:99:fc:31:9d:
         b8:a9:4c:73:d7:94:6f:e4:96:83:0a:50:38:00:a3:bd:d5:ba:
         6e:cf:d6:dd:2b:21:7b:b6:99:3e:5e:fd:bd:f8:7b:c6:48:05:
         66:98:aa:f0:a3:71:59:ca:90:c1:94:39:5e:a6:d4:ab:b8:df:
         d0:e1:98:40:2c:5f:cd:f6:ca:7a:5a:d5:6c:21:d0:1a:99:9c:
         96:db:87:50:7e:1c:7c:8a:24:e5:bc:81:23:d8:a9:93:f9:3c:
         bc:44:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org