Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa
File:                     34352e3138322e32312e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          qocVkEH9SbSqxHP0KB46hEdOxncpcLWiwXGv4cqEnoA=
Subject key identifier:   11:95:CF:01:3F:95:70:9C:10:1A:BC:0F:82:51:28:2E:23:95:AE:34
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       1659042774903914DD193105F284316407D24F18
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:02:40 +0000
ROA not before:           Tue 05 Mar 2024 17:57:40 +0000
ROA not after:            Tue 04 Mar 2025 18:02:40 +0000
asID:                     263725
IP address blocks:        45.182.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:59:04:27:74:90:39:14:dd:19:31:05:f2:84:31:64:07:d2:4f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Mar  5 17:57:40 2024 GMT
            Not After : Mar  4 18:02:40 2025 GMT
        Subject: CN=1195CF013F95709C101ABC0F8251282E2395AE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:29:15:43:11:f3:0d:9a:e5:83:d3:40:76:
                    18:43:fc:43:c2:9d:c5:ee:be:3f:2f:ab:10:f6:93:
                    be:3f:9e:eb:65:0e:46:5b:2c:42:ae:e0:d8:56:6f:
                    e5:cd:25:bc:7c:33:ed:96:0f:0e:ff:ad:d2:3c:7e:
                    af:db:03:ca:b8:e3:37:f8:e3:f1:d3:e6:13:c1:bf:
                    e4:63:16:b5:85:74:28:77:c1:25:6b:a0:26:8a:bf:
                    2d:59:2e:cd:cb:80:a2:1a:d2:71:81:a4:11:ec:3f:
                    eb:d0:c9:12:23:c1:48:91:23:3e:71:da:51:c3:85:
                    b9:9b:13:96:21:95:c0:68:7e:0e:8d:0d:9c:f5:93:
                    15:c0:1a:b5:58:3f:39:94:0f:46:a1:bc:e0:eb:41:
                    bb:c2:56:da:d1:53:c6:84:ed:ed:bd:cb:b3:3b:3c:
                    ba:ee:4b:e6:8a:d2:85:ea:35:90:7e:e7:9b:1c:b6:
                    0a:39:8c:6f:71:51:7b:81:bd:13:d8:c3:a3:d0:d0:
                    6a:6e:87:b5:66:97:94:cf:75:b4:24:e7:1d:58:b3:
                    6c:69:33:69:f5:22:5d:7b:90:ca:50:dc:4d:10:9d:
                    2e:7f:a0:10:16:ee:3e:1f:be:bb:51:a0:ca:4c:55:
                    78:23:dc:f0:ce:7d:06:c5:6e:8f:8e:6e:9e:66:9e:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:95:CF:01:3F:95:70:9C:10:1A:BC:0F:82:51:28:2E:23:95:AE:34
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:a5:06:e0:80:5b:82:e9:13:66:4c:d6:8f:41:b2:e4:fa:d4:
         a0:42:72:73:71:0f:5c:17:18:8e:51:9b:a3:38:44:ef:7e:af:
         55:2c:3c:36:5f:8a:45:7c:e4:56:18:30:1e:43:e5:d2:30:d4:
         45:64:4a:df:99:a7:40:08:87:7b:99:82:4a:e8:f7:89:2e:66:
         b2:61:7a:db:86:0d:d3:30:32:93:f0:d5:61:d9:72:73:50:a0:
         b8:90:c6:b8:c8:9a:d0:ac:29:0e:8b:ae:e3:c0:22:5e:be:7a:
         c7:3c:87:ce:44:6e:30:52:60:52:45:dd:07:34:92:6a:10:25:
         fc:b7:ac:cb:72:22:27:87:11:28:68:15:2f:e9:54:a2:31:28:
         93:81:59:37:ee:db:88:4b:ea:29:b8:de:58:0c:c5:1d:dd:a7:
         cd:ed:26:1d:e7:5b:0b:ad:9f:3e:06:17:bf:77:22:3b:3e:76:
         7a:b2:a0:7c:9f:df:3f:55:ae:56:27:a5:55:1e:81:3d:21:0b:
         61:49:97:90:9e:9e:15:a1:44:e4:0b:3b:87:69:8d:1d:ed:dc:
         dc:df:13:c1:d4:d0:f8:dd:df:97:4b:46:a0:a2:b8:c2:29:f6:
         46:f0:9c:1e:ba:df:1c:50:ef:11:86:dc:19:bd:fd:5f:6d:db:
         79:fd:df:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org