Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e342e302f32322d3234203d3e20323639383036.roa
File:                     34352e3138362e342e302f32322d3234203d3e20323639383036.roa (raw, json)
Hash identifier:          jqYIViV4KMZKnEwt1e3oIwyZYiyGDxRbHTy/q8Wqfmw=
Subject key identifier:   F2:A1:58:1E:DB:6C:E9:00:A5:1B:11:F4:CE:50:45:6E:6A:E8:23:33
Certificate issuer:       /CN=87919A3C59C067523C21EF70A596F0B7F9C09798
Certificate serial:       4F219DAE5B766086742F3EBB058304CC1373A6EE
Authority key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e342e302f32322d3234203d3e20323639383036.roa
Signing time:             Tue 08 Oct 2024 18:05:00 +0000
ROA not before:           Tue 08 Oct 2024 18:00:00 +0000
ROA not after:            Tue 07 Oct 2025 18:05:00 +0000
asID:                     269806
IP address blocks:        45.186.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:21:9d:ae:5b:76:60:86:74:2f:3e:bb:05:83:04:cc:13:73:a6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87919A3C59C067523C21EF70A596F0B7F9C09798
        Validity
            Not Before: Oct  8 18:00:00 2024 GMT
            Not After : Oct  7 18:05:00 2025 GMT
        Subject: CN=F2A1581EDB6CE900A51B11F4CE50456E6AE82333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:80:43:88:29:43:d8:99:26:c5:c5:ae:c0:
                    d6:77:53:ef:8c:75:72:9f:66:41:db:84:d8:03:db:
                    2c:0f:fe:ed:eb:a6:14:17:c7:5c:4a:3e:ac:84:7b:
                    60:d0:5d:5d:2d:39:ad:61:da:e5:14:02:0c:a7:6f:
                    66:2c:fa:27:e5:0b:3b:7e:70:ed:54:71:4f:ae:56:
                    5c:ee:88:a8:7a:4b:df:25:82:cb:56:bd:22:06:a8:
                    87:08:97:58:3f:f2:1a:5b:e5:94:9e:22:ef:22:d3:
                    29:07:fb:c3:d7:a2:6d:12:1e:51:68:02:42:60:13:
                    fe:b7:84:ca:2c:c1:5e:84:67:7d:bc:15:a9:ab:b3:
                    80:f8:79:3f:73:b5:64:c7:28:76:46:09:a7:50:2f:
                    af:6f:27:9c:8a:6c:d3:b6:5c:e2:b7:2f:cb:8e:11:
                    cc:b0:dc:51:92:1a:e8:cf:df:34:ae:53:ce:a4:da:
                    26:33:75:af:58:cd:9d:fd:3d:c4:69:90:ad:fc:90:
                    3d:08:35:f9:b6:71:06:44:07:b8:55:95:b2:54:17:
                    0f:b9:ce:90:e2:db:32:d2:50:c7:da:6c:2d:2f:22:
                    ac:35:7c:89:fc:2e:61:e3:de:0c:ff:32:f1:37:ca:
                    81:5f:c5:c6:9d:e8:52:52:71:48:fd:5a:1b:0a:46:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A1:58:1E:DB:6C:E9:00:A5:1B:11:F4:CE:50:45:6E:6A:E8:23:33
            X509v3 Authority Key Identifier:
                keyid:87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e342e302f32322d3234203d3e20323639383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:d6:ea:59:fc:2a:0f:67:e2:c0:e4:89:38:dc:95:56:51:
         58:92:54:00:82:3f:65:5c:89:47:55:ce:03:9e:26:16:c0:e6:
         f3:0b:d6:62:7b:8b:40:1a:bf:14:31:34:6d:3e:b6:45:35:4d:
         bd:fd:e2:c0:f9:fb:39:c8:fe:91:b2:6d:5d:1f:86:77:24:3d:
         db:2a:f3:0a:11:f3:09:08:e9:16:d8:1d:af:05:03:57:3a:c2:
         99:40:89:c9:80:de:34:12:32:d2:3f:d8:78:ff:bf:91:0f:1d:
         64:6e:b2:6d:6e:80:1f:7a:03:9c:a6:69:bd:69:5c:0a:d5:b8:
         e7:cb:0e:96:18:e9:2f:b3:c5:86:10:57:e6:4f:6a:74:c3:19:
         2e:16:83:97:fd:73:66:02:f2:75:45:63:3b:9f:69:bf:b7:4a:
         c1:14:d9:57:e9:5f:75:b1:78:ec:58:bf:79:7d:4f:2d:52:7f:
         d1:07:fa:ad:c3:66:4d:d7:79:79:ca:e2:98:88:95:74:fb:71:
         b2:c1:7e:6c:00:19:3e:0c:a7:4a:1b:a9:0c:cc:47:95:84:39:
         d3:d6:f3:dc:92:9a:5f:24:f8:81:45:dd:8d:b2:d0:ca:7b:a0:
         50:c0:85:c0:d2:70:81:90:f3:92:d3:92:67:01:06:37:d0:fd:
         31:8a:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:57 2024 by rpki-client on console-ams.rpki-client.org