Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32332e302f32342d3234203d3e20323633373235.roa
File:                     34352e3138322e32332e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          Gop1zHBkASaDEu/+oow2mqQRHS6Do5sf94wFOhdCPEA=
Subject key identifier:   2C:04:C8:35:E8:BD:1C:4E:7F:A3:77:6D:67:B6:2A:0D:28:8F:DC:68
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       278C784B52FA144078C4E4F391563B7E211B24A1
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32332e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:02:41 +0000
ROA not before:           Tue 05 Mar 2024 17:57:41 +0000
ROA not after:            Tue 04 Mar 2025 18:02:41 +0000
asID:                     263725
IP address blocks:        45.182.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8c:78:4b:52:fa:14:40:78:c4:e4:f3:91:56:3b:7e:21:1b:24:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Mar  5 17:57:41 2024 GMT
            Not After : Mar  4 18:02:41 2025 GMT
        Subject: CN=2C04C835E8BD1C4E7FA3776D67B62A0D288FDC68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:aa:2c:43:22:11:c2:57:6a:df:ad:d1:52:
                    7a:bd:34:a8:04:c0:a5:c1:ff:a4:c6:38:f0:7c:4f:
                    42:a5:14:6c:f4:76:94:4f:23:c5:e6:ba:b8:c2:d9:
                    67:24:b8:4b:9f:6a:72:23:70:9e:f7:42:71:00:26:
                    ae:e0:95:3a:0e:24:14:d7:90:22:9a:7f:0e:48:f8:
                    2b:3e:5d:72:e1:5b:07:0e:39:60:91:f4:d4:97:ec:
                    9f:44:f2:dd:d1:0e:e6:34:0c:fd:b7:73:23:85:d8:
                    01:10:dd:85:5b:dd:85:eb:27:66:70:05:75:bd:08:
                    d2:5c:e9:b2:86:21:04:8b:8d:02:63:25:05:9b:b5:
                    6c:29:73:d0:b9:e0:0a:45:e0:14:f6:76:76:67:f2:
                    27:98:de:31:18:69:a6:26:3e:18:6f:6a:ba:6f:2c:
                    d7:0a:eb:bc:aa:f3:77:fa:54:50:aa:34:76:11:b6:
                    3d:a0:51:c1:de:8a:66:61:f4:e4:28:dc:0e:f6:9f:
                    bc:25:a5:d9:47:8e:16:e8:bb:48:1d:01:df:6f:cb:
                    d1:d3:ee:b2:06:de:f2:30:ef:6b:96:c1:0f:4b:d1:
                    78:be:ef:f7:58:83:48:0d:9c:be:fe:f7:3c:49:f8:
                    50:7f:c4:22:36:70:03:67:78:cb:1d:07:b4:ee:b0:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:04:C8:35:E8:BD:1C:4E:7F:A3:77:6D:67:B6:2A:0D:28:8F:DC:68
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32332e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:be:7a:e5:ef:37:fe:88:8f:df:76:bc:79:67:cd:8a:ed:b1:
         28:71:90:f4:56:4a:f6:c4:70:54:72:60:e9:4c:ba:52:8e:2a:
         cb:b0:9a:a3:72:8c:ca:ca:bf:e5:52:6e:08:1a:53:59:52:75:
         84:e2:81:a8:73:5c:72:0d:17:c2:a2:96:70:c1:15:4d:59:68:
         d9:8b:4c:0b:1a:c6:0e:fa:d5:a6:ce:2a:bf:c0:79:be:67:3c:
         52:fe:d8:b8:e8:56:87:9c:49:2b:cb:2b:17:d1:12:92:56:35:
         c5:c3:39:af:67:3d:c3:fd:07:77:ed:58:2e:3d:ef:dc:3e:ea:
         b0:81:ba:10:65:b5:99:89:77:68:50:c8:f1:fe:d0:4e:8f:8f:
         57:8b:89:29:b4:1e:72:b1:b4:70:7e:58:4f:70:7d:42:32:ae:
         13:9a:1e:13:81:d6:7e:98:8d:47:28:40:c4:3d:de:12:29:08:
         71:ee:46:42:4e:ed:19:28:9e:fc:20:e4:0e:6c:ee:24:1c:07:
         19:13:8e:94:af:6c:f0:a8:a0:8a:fd:b4:a5:4a:de:1b:9d:f6:
         3e:bc:1e:61:8d:d7:58:45:36:57:68:88:0f:91:a7:4e:7d:33:
         a5:6c:47:9f:d8:9c:a2:53:0e:a8:68:2e:0c:da:15:ae:64:b9:
         3f:a6:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 21:47:23 2024 by rpki-client on console-ams.rpki-client.org