Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa
File:                     34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa (raw, json)
Hash identifier:          2RyDiz4YAQ222d6JLkUZlEU4zJxORmKV6j+Ueyb9P3U=
Subject key identifier:   E2:43:45:E8:54:18:76:9A:F9:65:95:E2:0F:E1:9C:D7:69:A9:44:58
Certificate issuer:       /CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
Certificate serial:       1C4ECDBE7563B2709ABEAAD1878B5819735B63B8
Authority key identifier: 01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa
Signing time:             Tue 05 Mar 2024 17:49:30 +0000
ROA not before:           Tue 05 Mar 2024 17:44:30 +0000
ROA not after:            Tue 04 Mar 2025 17:49:30 +0000
asID:                     269946
IP address blocks:        45.189.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4e:cd:be:75:63:b2:70:9a:be:aa:d1:87:8b:58:19:73:5b:63:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0127A09EA99ADE58C0CCD84F18C499C45EC12185
        Validity
            Not Before: Mar  5 17:44:30 2024 GMT
            Not After : Mar  4 17:49:30 2025 GMT
        Subject: CN=E24345E85418769AF96595E20FE19CD769A94458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:83:1a:64:11:52:60:7e:7f:f3:a7:8d:04:
                    d8:d4:c9:b6:f0:ed:98:4e:51:bb:d0:51:7e:68:c2:
                    10:64:63:bd:02:ad:c3:6d:c3:0a:bd:da:86:f1:36:
                    d6:88:8c:6d:3f:fe:bd:d6:84:4c:31:bb:60:29:fb:
                    20:78:65:2c:04:c5:62:fe:e8:82:e9:b3:cf:01:f3:
                    6d:30:c1:ef:69:21:48:86:40:de:8e:b9:01:28:79:
                    10:f0:ed:d2:21:8f:a7:7a:ae:c5:95:0a:c0:70:91:
                    64:19:99:2f:33:16:a9:66:46:1b:cd:16:b5:94:65:
                    dd:2f:8b:6c:f6:b7:0c:b9:e4:49:df:01:ca:06:e4:
                    b3:b8:fe:9b:1f:79:58:ca:30:46:69:c5:ef:94:05:
                    bd:a6:a7:bf:c3:91:c0:a2:8b:d3:db:79:3a:cf:a1:
                    78:df:32:ec:9f:f3:08:bb:a5:15:48:b1:9f:43:3c:
                    b5:99:fb:84:ab:49:8a:37:2f:bd:d9:68:ab:a5:f4:
                    bf:18:e4:ad:38:17:ed:ee:c0:9e:26:ae:1f:bb:4d:
                    9b:7c:d2:ae:c3:ee:bb:59:c2:29:55:b2:51:31:a8:
                    a1:03:b0:9c:24:e5:77:6f:c2:53:db:cb:d3:21:80:
                    b6:2e:e4:1a:3e:c3:d7:2c:ac:82:89:cb:43:52:87:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:43:45:E8:54:18:76:9A:F9:65:95:E2:0F:E1:9C:D7:69:A9:44:58
            X509v3 Authority Key Identifier:
                keyid:01:27:A0:9E:A9:9A:DE:58:C0:CC:D8:4F:18:C4:99:C4:5E:C1:21:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0127A09EA99ADE58C0CCD84F18C499C45EC12185.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA569A2C0BA6C78B647EF489CB5E9E4BB121C3AB97E1096D075C082A5CABCAC0/0/34352e3138392e3233342e302f32342d3234203d3e20323639393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:aa:22:ba:2c:37:7b:98:12:de:bd:be:5b:5f:f3:11:b3:
         87:d1:0d:ee:e1:a8:c6:6c:e4:ad:42:6a:78:e8:7b:59:ae:ea:
         c3:aa:b6:34:f6:d3:42:d4:3d:d8:5a:a2:03:75:56:1b:0e:be:
         a4:ac:0f:7b:23:45:b7:24:24:64:29:2a:59:67:23:23:d4:49:
         36:aa:37:3b:eb:59:4b:2e:8d:ed:25:d3:8d:49:d7:0f:2e:26:
         e9:6a:b2:27:3f:d4:6d:ba:3f:a6:e1:25:12:9a:46:9b:f1:db:
         7e:dd:2e:07:26:b0:88:f8:79:d5:10:7f:85:55:13:e6:54:11:
         7e:97:6d:3f:5f:aa:06:70:d9:b0:bb:7d:67:5b:ac:63:b0:ab:
         c5:98:60:7f:a6:da:34:68:50:88:63:d8:6c:18:5f:a5:e5:96:
         94:1f:08:dc:99:8b:b0:1a:3a:3b:78:5c:1f:15:55:c0:c6:94:
         1e:03:8a:d6:0a:8b:1a:03:d3:dd:8e:68:ed:60:bc:fa:3f:3a:
         8e:3c:a1:8c:e6:2d:37:f2:34:b2:cb:fe:92:d2:10:0f:67:72:
         34:c7:4e:e4:0e:35:fe:38:df:5a:31:0b:1a:20:0c:b4:ea:6c:
         18:62:c3:ab:49:fa:8b:27:ec:c2:4d:24:09:a7:a5:06:64:52:
         1d:aa:5c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org