Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa
File:                     34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa (raw, json)
Hash identifier:          6la39yqS0fxmrlu9Fd8itFUXAHH0HMNDRcRIuGS7mfw=
Subject key identifier:   B4:73:79:B5:51:14:55:DF:AD:55:4E:C7:67:C6:89:95:0A:13:69:0A
Certificate issuer:       /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial:       581A6CC62E19CC6A354EC2BEEBC5EF2943BCECC5
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa
Signing time:             Tue 05 Mar 2024 17:45:07 +0000
ROA not before:           Tue 05 Mar 2024 17:40:07 +0000
ROA not after:            Tue 04 Mar 2025 17:45:07 +0000
asID:                     269874
IP address blocks:        45.189.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1a:6c:c6:2e:19:cc:6a:35:4e:c2:be:eb:c5:ef:29:43:bc:ec:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
        Validity
            Not Before: Mar  5 17:40:07 2024 GMT
            Not After : Mar  4 17:45:07 2025 GMT
        Subject: CN=B47379B5511455DFAD554EC767C689950A13690A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:41:fd:3c:c2:6c:e3:dc:46:a7:10:61:4a:
                    43:90:a0:41:11:27:62:83:d6:5b:9f:17:67:d1:de:
                    96:73:07:53:d4:04:fc:65:96:cd:65:6c:3b:5a:95:
                    4d:f6:b0:51:30:f3:7f:04:de:27:52:57:3b:e7:1d:
                    f5:c8:92:0d:a5:f2:e7:fb:20:c3:f8:06:4e:6b:38:
                    2d:bf:c5:75:ca:26:7d:a9:2e:9a:47:b0:87:77:4a:
                    3a:28:b2:a2:3c:e1:0b:bf:1c:d0:a9:28:be:ad:aa:
                    90:57:a2:1e:1a:08:4d:bb:2d:3c:0e:8f:13:83:50:
                    2c:40:44:4f:a3:f4:2c:a0:1b:73:57:3f:42:54:5a:
                    ba:05:26:8f:01:f4:14:71:b9:19:f3:d5:28:73:7f:
                    7d:ca:24:2f:45:df:9e:9f:f0:3e:09:b8:4d:85:58:
                    f9:a1:6f:85:0b:59:86:3d:b4:39:f5:7c:c9:34:48:
                    0d:08:57:4d:8f:e7:4e:a4:12:42:85:63:33:c0:f6:
                    43:69:ab:a5:24:77:d0:52:62:53:42:7a:cc:86:d5:
                    02:33:27:77:6f:62:53:60:c0:70:da:c5:7b:4e:bf:
                    14:c3:95:e2:26:50:08:50:61:2f:59:67:d4:5a:23:
                    62:4e:45:fb:f9:ba:89:76:d8:77:24:1e:2c:9c:56:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:73:79:B5:51:14:55:DF:AD:55:4E:C7:67:C6:89:95:0A:13:69:0A
            X509v3 Authority Key Identifier:
                keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:3d:46:48:36:1e:40:c1:8e:80:a0:03:d1:d9:34:10:a3:
         28:fb:f1:70:01:b1:cc:d2:ef:02:ea:e7:83:c6:cb:b9:bf:33:
         fb:93:5d:bb:e3:57:8e:62:e0:73:48:c0:52:1b:79:3d:92:f2:
         d8:ea:f9:85:63:40:79:13:97:9f:a7:e4:33:cc:0a:d9:28:49:
         a2:ce:a4:00:06:70:b9:b2:a9:ef:65:2e:cb:ef:e2:09:22:7e:
         2b:c7:e8:8d:cb:b1:99:24:83:a4:9d:12:57:e8:04:fd:06:79:
         ad:3b:58:2a:07:13:2e:94:b1:7b:b0:05:1c:53:5e:65:5a:76:
         8a:2b:e3:96:4f:32:76:31:8b:3d:5f:06:50:90:87:de:5a:c4:
         e0:1c:36:1c:ab:62:7b:03:fb:ab:65:b3:18:01:ee:73:d4:cd:
         be:55:50:1e:33:4b:4d:55:bf:f9:dd:a6:00:83:21:7a:32:06:
         c6:29:8b:a4:43:57:39:17:60:e4:d5:d0:d5:86:1c:df:0f:e8:
         62:05:9b:60:fc:02:ed:a9:d2:80:29:ae:62:cf:a1:69:4e:68:
         b6:e0:50:f6:ce:bf:8d:4b:87:3d:94:dc:e0:4a:8f:7e:c2:cb:
         95:fd:4c:d4:c6:43:2b:81:b5:94:4d:7e:fa:ba:a4:08:e8:50:
         25:eb:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:06 2024 by rpki-client on console-fra.rpki-client.org