Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134342e302f32332d3234203d3e20323639383332.roa
File:                     34352e3138362e3134342e302f32332d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          jC1owbuYzCu/V3XUNL2FECrpk0H1oNv7jgM89Ijqn18=
Subject key identifier:   4E:3F:00:BF:DE:4D:8F:66:32:C0:89:65:87:AB:A3:F5:2D:99:A3:AF
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       509DB6607297F301EE2301C8CC1379E263E45893
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134342e302f32332d3234203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:30 +0000
ROA not before:           Tue 05 Mar 2024 17:52:30 +0000
ROA not after:            Tue 04 Mar 2025 17:57:30 +0000
asID:                     269832
IP address blocks:        45.186.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9d:b6:60:72:97:f3:01:ee:23:01:c8:cc:13:79:e2:63:e4:58:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:30 2024 GMT
            Not After : Mar  4 17:57:30 2025 GMT
        Subject: CN=4E3F00BFDE4D8F6632C0896587ABA3F52D99A3AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:4b:f5:53:96:6c:1f:31:28:8b:2d:1e:ff:
                    b2:e2:7d:9c:de:59:26:64:de:fd:8a:30:64:87:97:
                    89:7d:ad:d7:1f:b7:03:44:77:16:01:dd:c9:f8:84:
                    8e:a2:bc:15:27:2c:5e:77:76:b1:e7:40:0f:ff:bc:
                    25:fc:b9:e0:f6:0d:3b:83:40:4c:81:ea:68:95:92:
                    8c:78:3c:80:08:56:5a:9d:9f:34:3a:81:7b:4c:5d:
                    c3:0d:bf:9e:5d:bb:9e:53:7a:21:44:1b:31:cc:ac:
                    01:eb:47:2d:8c:37:cd:9f:35:0e:bb:41:0c:92:d8:
                    8d:d3:6c:f4:81:68:30:9d:a2:ca:f9:85:fd:96:c1:
                    51:18:15:a1:44:aa:a5:29:69:a9:b0:d4:eb:6e:35:
                    5d:06:fd:fb:5c:bc:87:80:68:58:30:68:ee:8a:6e:
                    a1:6c:39:e9:5b:33:1d:3b:70:06:d1:6a:c0:6e:c1:
                    bb:54:75:04:5e:9d:40:c8:8f:2e:fd:cb:b5:72:88:
                    c7:63:74:73:81:98:44:77:c7:94:e1:55:73:49:86:
                    87:68:da:34:15:5d:7a:45:0d:14:c0:32:83:ec:bc:
                    db:80:4c:72:5b:46:af:a7:0f:71:bd:eb:98:c9:ce:
                    e3:d7:7d:4d:3c:ca:50:2e:44:d7:8b:62:ed:af:3d:
                    dd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3F:00:BF:DE:4D:8F:66:32:C0:89:65:87:AB:A3:F5:2D:99:A3:AF
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134342e302f32332d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:7b:f4:03:c3:7e:d0:45:0f:fa:39:3b:a7:9f:d4:23:32:
         e6:89:21:17:5d:d6:28:92:fb:29:84:94:01:a6:cb:91:42:17:
         a6:2d:57:44:5d:8e:8e:30:dd:d1:fb:ef:7a:4f:0a:32:b5:e1:
         c0:43:61:7e:52:b4:cd:4f:c0:69:30:4b:48:f2:ca:4f:bd:1c:
         e3:64:07:71:f9:d6:ee:f0:20:e4:00:e3:f9:35:55:35:cf:2f:
         99:cd:f4:7f:6d:29:7b:41:7b:8a:c0:2a:07:01:be:79:6f:8f:
         61:79:39:ad:fd:f8:fc:42:7e:23:0b:3f:10:95:51:ab:39:5b:
         53:4e:8e:8d:f2:fa:e9:a8:9c:8d:33:37:14:7c:48:c4:ee:aa:
         ba:f4:b3:7a:c3:32:f3:e0:3e:f8:c4:87:df:c2:46:b1:89:bc:
         70:ab:5a:7d:c6:3f:53:b2:73:7f:c7:1c:3e:26:c5:3c:88:7f:
         c8:67:53:26:0d:11:24:50:03:da:03:9e:f5:7a:cd:ca:55:06:
         38:70:6c:7f:0d:e9:66:de:0f:4e:b4:cb:a5:79:18:fa:e4:2d:
         9a:d1:f7:bc:63:b7:71:53:9c:e2:6a:aa:98:dc:2d:90:bd:7a:
         58:e3:44:57:81:54:48:22:15:c7:78:c3:f3:5a:26:3b:8e:22:
         fe:7c:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:55:00 2024 by rpki-client on console-fra.rpki-client.org