Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134372e302f32342d3234203d3e20323639383332.roa
File:                     34352e3138362e3134372e302f32342d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          jv2IJJev5JUHEkAVBsnMMXFyNm0rZW0IucCj2Ur9r9A=
Subject key identifier:   BF:C1:D8:82:FC:25:BC:8C:35:13:BB:E0:11:40:52:C7:7D:96:6D:6B
Certificate issuer:       /CN=AF7A463B07CEB857877708A3350E33F01C46B579
Certificate serial:       498963CF3F75F1593B2C8F795FF39577A80F47DF
Authority key identifier: AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134372e302f32342d3234203d3e20323639383332.roa
Signing time:             Tue 05 Mar 2024 17:57:30 +0000
ROA not before:           Tue 05 Mar 2024 17:52:30 +0000
ROA not after:            Tue 04 Mar 2025 17:57:30 +0000
asID:                     269832
IP address blocks:        45.186.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:89:63:cf:3f:75:f1:59:3b:2c:8f:79:5f:f3:95:77:a8:0f:47:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF7A463B07CEB857877708A3350E33F01C46B579
        Validity
            Not Before: Mar  5 17:52:30 2024 GMT
            Not After : Mar  4 17:57:30 2025 GMT
        Subject: CN=BFC1D882FC25BC8C3513BBE0114052C77D966D6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4b:ea:76:19:5b:76:a5:d0:50:b7:ee:09:2c:
                    eb:b1:14:0b:fe:7b:08:f3:e0:5c:67:55:05:01:2e:
                    48:52:59:2f:f5:ea:d8:9c:10:a8:f7:32:41:83:57:
                    61:17:e1:0d:6e:a7:b4:43:f1:6a:9c:b9:b1:b5:cf:
                    fa:b3:b7:61:8d:9f:76:bb:ce:d5:fa:d0:91:3b:0e:
                    84:46:bb:75:fb:05:a4:97:22:ea:ab:4f:39:72:e9:
                    45:c6:f2:e3:d8:22:41:2e:27:56:97:a8:0d:76:7a:
                    08:91:26:09:82:68:f5:0f:23:0a:cc:bd:05:ac:5e:
                    c5:5a:b8:f8:4a:0a:d4:35:05:ec:76:b8:3d:a6:fd:
                    c9:d5:38:c4:99:8e:46:b0:2c:26:97:8e:1f:05:81:
                    db:16:ad:a6:f8:06:77:f4:97:d4:76:aa:62:1f:28:
                    18:fa:bd:4b:35:96:f2:58:e0:9f:dd:85:24:62:c4:
                    ec:51:a5:8b:55:b8:cf:05:2f:0f:b5:a3:5e:e9:f3:
                    2a:43:49:00:40:ca:63:6e:41:b9:2d:e1:77:7b:9b:
                    68:2b:ca:29:aa:43:ce:80:26:88:b8:a5:0f:2e:14:
                    e6:bb:59:c3:4a:be:67:69:da:2a:b5:8b:6e:b1:8b:
                    e6:58:cf:2e:e0:a3:e3:ab:83:83:49:f8:cc:58:26:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C1:D8:82:FC:25:BC:8C:35:13:BB:E0:11:40:52:C7:7D:96:6D:6B
            X509v3 Authority Key Identifier:
                keyid:AF:7A:46:3B:07:CE:B8:57:87:77:08:A3:35:0E:33:F0:1C:46:B5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/AF7A463B07CEB857877708A3350E33F01C46B579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF7A463B07CEB857877708A3350E33F01C46B579.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E13E9225FDF9382AD173E4C63A669128E68B1145A8E04CA3B14BD5D427D13FC0/0/34352e3138362e3134372e302f32342d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:32:e0:fc:41:05:7d:4d:ac:26:0b:d4:8d:19:c0:5d:a0:
         5e:e9:fb:68:92:f3:80:24:c5:95:99:b3:7b:e2:9a:47:65:1f:
         b9:06:8f:b3:a2:a4:8c:06:3b:34:19:5d:9b:89:45:56:cc:a1:
         9c:eb:16:0e:f6:b3:e0:7e:fe:8c:ed:3d:5e:85:83:50:5d:ce:
         2b:3b:e6:dc:23:64:fd:75:8f:c8:c9:d7:91:fb:a1:e6:19:57:
         72:19:2f:d0:f8:f1:00:a4:05:6d:36:ee:79:d4:5d:74:d0:c2:
         72:fe:2d:21:86:5e:1e:2d:43:70:ea:ba:35:8c:ec:d7:59:c7:
         84:cf:7b:e5:cb:9a:f1:1c:5a:98:1c:15:6f:05:9f:84:74:7c:
         43:71:c3:9b:19:1d:d4:3b:3e:e9:12:a9:6c:fb:d0:10:fb:6b:
         ae:0e:d3:8f:3f:31:83:aa:2a:3e:5c:62:79:1e:ea:41:33:67:
         74:7d:7b:24:28:78:f0:6f:6d:b7:84:ef:cc:0b:f5:56:fb:a6:
         3f:00:1c:78:6f:ef:2b:f7:d3:85:c0:32:06:76:34:fe:b7:2f:
         c4:f9:23:34:9b:bb:3a:44:c7:11:a0:c1:63:3b:1a:f9:0b:1c:
         8f:ba:45:76:c9:5c:b8:5a:86:f5:2c:31:9c:42:c7:e5:06:dc:
         6b:1c:79:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 23:04:18 2024 by rpki-client on console-ams.rpki-client.org