Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa
File:                     34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa (raw, json)
Hash identifier:          pxSaYBu7RHExEQWnRWhmnJxbpPvX1HaKrpR/G2A+pKA=
Subject key identifier:   27:23:E2:B3:D9:EC:C2:18:4B:81:E1:34:FD:79:2D:C8:17:64:DC:94
Certificate issuer:       /CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
Certificate serial:       7ED5C3D55A4FC594431B66E75A146F2408529341
Authority key identifier: 15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa
Signing time:             Thu 06 Jun 2024 18:05:00 +0000
ROA not before:           Thu 06 Jun 2024 18:00:00 +0000
ROA not after:            Thu 05 Jun 2025 18:05:00 +0000
asID:                     269813
IP address blocks:        45.186.136.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:c3:d5:5a:4f:c5:94:43:1b:66:e7:5a:14:6f:24:08:52:93:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1543ECDEE164252425B06E8AA0858149FE72AFA3
        Validity
            Not Before: Jun  6 18:00:00 2024 GMT
            Not After : Jun  5 18:05:00 2025 GMT
        Subject: CN=2723E2B3D9ECC2184B81E134FD792DC81764DC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:2a:39:65:1b:6c:41:56:91:f2:bb:c6:4f:
                    c1:53:a4:31:35:c4:24:0a:94:9b:51:84:4c:56:05:
                    a2:3a:c7:03:0b:56:db:d7:e6:3a:21:af:3d:10:2c:
                    55:0b:5c:f2:17:8a:85:6f:ef:0f:56:43:7d:aa:bf:
                    65:e3:06:f0:a5:31:23:63:dc:56:af:14:b1:0d:df:
                    c9:8a:1d:f3:a0:8a:6b:56:5c:38:3a:a7:00:c4:45:
                    e2:73:c7:b7:7e:d3:c3:49:b6:c0:22:a9:47:a6:38:
                    48:f8:66:65:87:69:a9:75:4d:89:94:ff:a9:22:ab:
                    1b:78:e3:82:9f:90:4f:5c:d8:64:dc:43:17:ec:96:
                    a8:90:c8:63:6c:22:55:a0:e5:99:9b:97:f0:17:33:
                    d3:36:b2:da:f9:2c:92:98:8f:0a:09:57:24:23:9f:
                    12:e6:6e:4f:9b:fd:0c:f3:c0:b8:2d:00:c5:4a:b2:
                    34:bf:30:e1:d0:c0:39:c4:56:b9:11:6d:7c:52:ce:
                    ad:83:01:e2:e8:bb:c7:eb:9e:99:10:79:e7:b2:5f:
                    e8:37:4e:52:0f:85:55:6e:dc:d4:2b:64:6a:3c:35:
                    f4:db:12:d1:31:8d:72:59:9c:76:a6:d7:e6:a9:65:
                    d0:a7:0c:33:dc:ad:57:e2:35:d0:d6:4a:f7:15:ea:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:23:E2:B3:D9:EC:C2:18:4B:81:E1:34:FD:79:2D:C8:17:64:DC:94
            X509v3 Authority Key Identifier:
                keyid:15:43:EC:DE:E1:64:25:24:25:B0:6E:8A:A0:85:81:49:FE:72:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1543ECDEE164252425B06E8AA0858149FE72AFA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D47CABE4097644325B48777B7C52FC2AD6DD922641D9E0145A8F23EB631EB1CC/0/34352e3138362e3133362e302f32322d3235203d3e20323639383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:67:cf:b7:92:a7:d3:5f:9d:8a:c9:b4:e5:fb:bd:73:e5:15:
         ef:ac:be:3c:e0:ac:36:85:db:b7:47:ad:9a:3f:3e:c3:96:08:
         b5:2b:65:2b:43:0a:89:b0:06:7d:59:42:91:b2:f2:a8:63:d7:
         71:d5:7c:d6:06:33:27:a2:68:86:e4:5c:bf:2f:ef:c5:07:16:
         00:5f:8f:7f:a4:dd:56:9f:93:49:bc:fe:3e:ef:f5:7f:7b:56:
         14:a9:84:03:36:1e:5f:c1:ba:53:1a:8e:39:5f:79:f9:39:a2:
         14:a2:45:b9:05:98:b1:07:98:b9:23:09:68:21:68:ee:45:38:
         0f:8a:f2:60:6c:6d:08:f2:12:3c:37:25:03:f5:ca:d3:27:bb:
         b6:d1:f3:f9:be:21:64:55:08:37:6d:05:03:24:81:df:7b:f1:
         02:49:76:27:c8:02:ed:b5:ca:32:15:ec:72:e9:b0:21:65:b1:
         bb:8a:8c:aa:7d:b9:34:e5:f0:64:5d:af:5a:8d:73:3e:47:47:
         af:f3:74:7c:de:0f:87:fc:66:b1:54:98:e5:a7:fc:82:14:b7:
         f8:ab:3b:93:e7:47:3a:c2:60:a4:c6:65:3c:0d:9f:f4:a9:77:
         7c:7c:de:e8:d8:06:19:78:26:90:21:76:55:70:52:34:69:58:
         c3:c7:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:17 2024 by rpki-client on console-fra.rpki-client.org