Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134342e302f32342d3234203d3e20323639383332.roa
File:                     34352e3138362e3134342e302f32342d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          9YAOI65KCiq6VtsnQ10kq7O/3roWLmRVHRLYT0Ool+0=
Subject key identifier:   8D:6C:53:E1:9B:AE:2B:AC:A4:C3:69:17:9A:D8:3D:AC:32:4C:B2:67
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       037C1992FE08F063EE57AE4F335E0C08EB4BAAB1
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134342e302f32342d3234203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:31 +0000
ROA not before:           Tue 05 Mar 2024 17:52:31 +0000
ROA not after:            Tue 04 Mar 2025 17:57:31 +0000
asID:                     269832
IP address blocks:        45.186.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7c:19:92:fe:08:f0:63:ee:57:ae:4f:33:5e:0c:08:eb:4b:aa:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:31 2024 GMT
            Not After : Mar  4 17:57:31 2025 GMT
        Subject: CN=8D6C53E19BAE2BACA4C369179AD83DAC324CB267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:84:d9:88:44:f0:f1:c9:bc:ac:f6:be:bb:e3:
                    e2:a3:6e:cf:63:f1:7d:f1:e9:87:6b:fe:14:2e:e0:
                    81:14:6c:2f:2c:85:08:88:5b:2f:82:fd:96:1b:50:
                    1e:2a:21:21:81:46:7b:8f:01:58:92:af:b1:11:c5:
                    42:28:79:00:fd:50:2e:68:7b:17:83:38:64:bd:61:
                    a6:28:06:b7:fe:b9:ca:8a:9d:56:0f:c8:bf:b1:c5:
                    d8:c3:31:ee:ae:58:1f:49:22:b1:12:b8:22:57:db:
                    26:78:f5:5d:4c:40:dc:4a:81:d5:04:21:9c:cd:bd:
                    76:e2:f1:62:51:a0:dd:8f:f6:c1:d8:3d:61:86:72:
                    a4:5d:8e:a9:c6:93:0e:cc:27:0e:88:95:c3:83:5d:
                    47:23:5b:c2:81:55:1b:d1:67:b2:14:2f:81:b2:03:
                    47:21:55:7e:b8:87:3f:47:99:9c:74:43:a1:80:74:
                    2f:ae:e7:94:2c:90:cf:3e:2e:f1:b3:d8:09:a0:0c:
                    e8:be:de:f5:08:ca:12:7c:78:70:d7:84:59:11:7a:
                    e8:85:8a:ba:d7:94:ab:1a:a6:52:5b:c4:03:30:bc:
                    1f:3a:f8:56:9b:f8:9f:78:94:1e:11:89:05:b3:92:
                    a4:0e:4e:1e:1a:40:55:a6:17:d4:b1:01:05:f4:da:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6C:53:E1:9B:AE:2B:AC:A4:C3:69:17:9A:D8:3D:AC:32:4C:B2:67
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134342e302f32342d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:65:92:8a:06:40:63:87:30:e5:08:05:8c:28:5b:11:77:
         ad:ea:95:42:f9:7b:9b:ed:a6:2f:b0:a8:52:99:74:cc:00:63:
         12:ae:2b:d0:85:1d:3f:6e:b2:29:bf:89:af:0d:5c:9d:c2:dc:
         11:a4:8b:be:88:e0:c7:a5:13:81:fb:62:0e:e6:e3:73:4b:4a:
         34:59:77:40:7f:19:4b:25:48:a3:74:e9:25:77:b6:c6:24:b7:
         2e:f2:d7:84:93:70:ea:42:84:b6:79:e9:8a:33:36:57:64:f0:
         75:9b:8b:d9:32:a9:09:9e:2b:bc:b4:b7:7e:03:1c:e6:74:8b:
         ca:d6:9b:13:71:a0:ca:fb:56:16:1d:30:b4:f0:b8:e1:a0:d1:
         f4:78:4d:65:51:d0:1e:29:81:fc:b7:38:8d:1c:93:01:78:c2:
         d7:c8:a0:16:00:bf:3d:ae:62:c1:dc:c5:71:99:30:bd:49:b6:
         67:7f:4c:84:81:01:c0:38:74:e0:43:00:e6:d4:e6:ff:81:a7:
         29:92:67:e4:f9:34:a6:14:79:12:b1:01:be:03:93:12:91:2b:
         24:ed:4f:ab:aa:b8:9e:81:bc:cb:00:1b:01:48:50:7f:28:cb:
         4d:10:4e:54:31:fb:fd:45:e6:fb:da:98:96:5c:6c:e1:7a:85:
         f5:5b:f7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:55:00 2024 by rpki-client on console-fra.rpki-client.org