Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134362e302f32342d3234203d3e20323639383332.roa
File:                     34352e3138362e3134362e302f32342d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          mKmzI6VQrKCdX8GQg+7OliTRlBWRhV/GdMguoWhjO8c=
Subject key identifier:   B8:86:A5:63:C4:4D:EF:21:3B:74:08:27:26:F1:60:0D:F7:DD:66:09
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       7B4D6B0D9ADE70CAE7E6C770448FD7AEB610DA8D
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134362e302f32342d3234203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:34 +0000
ROA not before:           Tue 05 Mar 2024 17:52:34 +0000
ROA not after:            Tue 04 Mar 2025 17:57:34 +0000
asID:                     269832
IP address blocks:        45.186.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4d:6b:0d:9a:de:70:ca:e7:e6:c7:70:44:8f:d7:ae:b6:10:da:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:34 2024 GMT
            Not After : Mar  4 17:57:34 2025 GMT
        Subject: CN=B886A563C44DEF213B74082726F1600DF7DD6609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:24:c8:2b:a1:e8:2c:49:d4:cf:a1:ad:22:
                    49:55:9d:b3:e9:67:a3:79:90:2a:1e:2f:4a:a5:eb:
                    c5:0d:87:3c:d8:b0:09:43:67:e0:9f:9c:5c:04:6a:
                    7f:01:2f:eb:94:76:da:82:06:8d:2f:e2:8e:f2:89:
                    f7:cc:ae:e4:94:7c:2f:ec:72:60:b7:6e:18:4a:f2:
                    58:5d:79:cb:b7:fd:21:95:74:fe:bb:06:4d:ea:b3:
                    a8:79:a6:94:3c:2e:44:d3:10:59:9f:98:6a:d1:92:
                    3e:e8:a4:5c:80:9f:25:28:77:50:9f:58:93:6d:35:
                    57:66:38:f4:8e:16:c3:02:a8:ab:1e:4c:b7:7b:9d:
                    f1:01:43:1a:cd:71:6f:5f:4c:d1:b1:75:b3:80:3e:
                    c1:e7:99:e2:b8:13:86:aa:ec:22:5c:01:78:a5:3a:
                    67:2f:60:12:17:ac:dd:31:d8:aa:df:b3:92:cc:a9:
                    41:01:55:da:96:32:db:19:8c:ae:3c:96:48:3c:8d:
                    84:19:a5:03:48:30:17:75:de:2d:8d:99:8e:e8:08:
                    be:30:04:e6:33:db:1b:0c:59:f0:87:a2:2d:27:cf:
                    97:0b:40:72:40:2b:b9:5c:d8:50:09:8a:86:af:89:
                    31:3f:80:f8:26:34:86:99:04:fe:27:6f:b4:01:89:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:A5:63:C4:4D:EF:21:3B:74:08:27:26:F1:60:0D:F7:DD:66:09
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134362e302f32342d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d5:9b:f3:13:a0:01:9b:c8:60:90:b0:88:13:39:e2:ee:e3:
         bb:80:24:2a:63:13:b0:0c:81:26:0f:62:52:04:dc:6c:76:91:
         f2:f4:01:11:1f:d7:73:4c:b5:8f:db:5e:e7:83:85:cf:ec:84:
         af:ae:19:b7:fc:e9:e8:19:c7:93:21:5c:73:b1:79:98:cb:85:
         76:48:1f:8b:49:3a:73:d3:bc:33:30:7a:6f:ae:02:32:7e:7a:
         64:4e:80:24:10:db:41:75:f1:2f:c7:e6:f3:86:d4:18:2f:60:
         2c:f2:3c:b8:2a:dd:95:92:15:b0:29:5e:a7:c8:00:18:e6:9c:
         48:3a:0b:43:d5:02:e5:af:bf:22:ff:6f:78:82:dd:31:3f:4d:
         99:80:28:99:b8:d7:0d:4d:bf:20:a2:2c:a7:df:2e:17:bb:26:
         b4:1f:db:2a:97:c9:7d:cf:77:51:6a:de:52:1a:2f:9c:96:94:
         24:86:e4:88:11:82:46:bd:8c:18:df:92:b0:28:f5:d9:96:04:
         f8:ae:10:bb:2d:9d:98:b5:57:78:27:44:4a:70:57:ef:17:07:
         71:a6:96:ae:0d:0a:6c:53:72:3b:95:f0:4d:e3:9c:c2:74:94:
         d2:bf:e4:47:0b:32:df:ee:4b:d5:ab:d2:8a:c2:95:e4:b9:93:
         c7:93:6e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:04:18 2024 by rpki-client on console-ams.rpki-client.org