Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138372e38392e302f32342d3234203d3e20323639393135.roa
File:                     34352e3138372e38392e302f32342d3234203d3e20323639393135.roa (raw, json)
Hash identifier:          z7A46wJ0PDTiQSCaDsVSpP8EvR4rz4LwXKKKLj/1QAA=
Subject key identifier:   6B:92:AD:57:00:72:A2:17:E0:6C:8A:15:83:CB:DD:E8:DF:30:8C:9C
Certificate issuer:       /CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
Certificate serial:       32255D20AAD025D8CF8D7BFE2530CBA08F82B9F5
Authority key identifier: D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138372e38392e302f32342d3234203d3e20323639393135.roa
Signing time:             Tue 05 Mar 2024 18:07:20 +0000
ROA not before:           Tue 05 Mar 2024 18:02:20 +0000
ROA not after:            Tue 04 Mar 2025 18:07:20 +0000
asID:                     269915
IP address blocks:        45.187.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:25:5d:20:aa:d0:25:d8:cf:8d:7b:fe:25:30:cb:a0:8f:82:b9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE
        Validity
            Not Before: Mar  5 18:02:20 2024 GMT
            Not After : Mar  4 18:07:20 2025 GMT
        Subject: CN=6B92AD570072A217E06C8A1583CBDDE8DF308C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:bd:14:7c:d5:5d:a9:df:e3:8b:a4:e0:38:
                    6c:32:ad:76:cc:70:ac:1c:1c:50:c1:75:6a:ea:e5:
                    2f:b9:bf:21:5a:0c:c3:73:8d:ae:8b:83:fc:b6:cd:
                    e3:5f:a6:82:67:a5:8a:58:56:1a:44:7a:ba:ca:0c:
                    ac:39:f5:6a:65:65:10:bc:06:5a:15:c6:c4:f4:8c:
                    90:74:b2:14:73:f8:e5:2a:de:32:60:97:55:96:84:
                    ef:e9:e6:e5:05:4c:a4:e2:fe:f9:76:2a:ec:a4:a3:
                    bd:d0:97:31:49:2c:c2:e0:5f:fd:ad:c1:f3:29:77:
                    fd:5b:37:4e:a5:2c:e4:cc:6e:9d:0a:aa:c1:ba:1e:
                    40:ce:74:c2:13:b0:bc:c8:a6:07:be:0b:70:2f:6b:
                    f5:f7:19:76:31:10:b2:e0:04:1b:c8:9b:b5:61:8e:
                    51:30:0a:92:4b:26:7b:6f:ac:71:5d:3a:18:c6:fb:
                    c6:2f:43:b3:63:54:38:b8:22:97:62:7b:19:b1:20:
                    58:a4:7b:94:f0:33:2e:a0:8a:6e:f4:98:f4:91:7d:
                    b7:df:00:75:57:1f:63:e1:f1:23:8a:e7:1e:72:24:
                    98:0a:db:5b:4a:16:ba:b3:08:ed:c2:9a:60:23:eb:
                    9c:2e:98:7c:33:8c:df:e1:e9:d8:a9:4a:bf:3f:1f:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:AD:57:00:72:A2:17:E0:6C:8A:15:83:CB:DD:E8:DF:30:8C:9C
            X509v3 Authority Key Identifier:
                keyid:D7:C2:C8:0C:B5:9C:8E:33:C7:BB:4E:D1:0B:EA:57:E2:1C:E7:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7C2C80CB59C8E33C7BB4ED10BEA57E21CE76CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DBE1DF14102D229D2A32EF830927E03CD6429044F67ED8E239EF6114B9CA2FF6/0/34352e3138372e38392e302f32342d3234203d3e20323639393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:e4:43:3d:0b:3d:04:95:f7:a1:47:7a:c9:81:29:01:97:
         f2:a8:3d:cb:7d:9b:43:0c:0e:b9:9c:86:61:4e:75:56:26:ab:
         3f:cd:79:d7:8d:58:d2:8c:1a:88:3f:a0:aa:5b:c2:87:51:e6:
         29:ab:4c:03:f4:a1:37:5e:6f:4f:2b:59:0c:f6:78:f4:ab:0f:
         32:9b:cf:35:ae:be:8c:52:8c:e0:11:47:8e:25:c1:d8:a2:60:
         a8:21:3f:3f:5e:5a:ef:47:dc:d4:25:a3:cb:6f:62:b0:f3:82:
         8a:70:2e:4c:92:ca:7d:cb:f1:1c:28:76:61:fb:1d:b4:c5:82:
         5e:4c:0e:b8:3e:19:d2:69:a4:ff:1b:bd:fc:81:38:43:b4:f7:
         2a:fe:ba:06:6d:40:c6:c6:93:bf:34:8c:06:41:55:4d:8d:b1:
         ed:09:33:fc:8e:be:f7:91:8e:d9:b6:19:63:32:48:76:ec:b1:
         b4:cc:48:99:bc:17:1d:78:40:88:46:20:af:cd:b0:39:78:15:
         1c:41:32:78:83:d3:5e:ab:63:9b:37:9a:3c:c4:49:d7:d0:b6:
         19:9a:6b:f8:b5:b9:6f:2a:d1:14:0e:58:1f:2a:af:36:b8:d8:
         a8:aa:24:d6:24:ab:ea:c8:3c:ce:ff:df:fb:57:ad:c3:55:af:
         ae:ae:d9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:39 2024 by rpki-client on console-ams.rpki-client.org