Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e342e302f32342d3234203d3e20323639383036.roa
File:                     34352e3138362e342e302f32342d3234203d3e20323639383036.roa (raw, json)
Hash identifier:          8GoQVBtT15+m1gZHH5FfMa94VAf31leez3tFDS8rdjw=
Subject key identifier:   02:51:8B:1F:52:0D:28:CD:AA:AC:DA:56:FE:20:00:65:8B:D2:92:72
Certificate issuer:       /CN=87919A3C59C067523C21EF70A596F0B7F9C09798
Certificate serial:       56BE153A5C95DCAFD21E200503259F08DD446F55
Authority key identifier: 87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e342e302f32342d3234203d3e20323639383036.roa
Signing time:             Tue 05 Mar 2024 17:51:17 +0000
ROA not before:           Tue 05 Mar 2024 17:46:17 +0000
ROA not after:            Tue 04 Mar 2025 17:51:17 +0000
asID:                     269806
IP address blocks:        45.186.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:be:15:3a:5c:95:dc:af:d2:1e:20:05:03:25:9f:08:dd:44:6f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87919A3C59C067523C21EF70A596F0B7F9C09798
        Validity
            Not Before: Mar  5 17:46:17 2024 GMT
            Not After : Mar  4 17:51:17 2025 GMT
        Subject: CN=02518B1F520D28CDAAACDA56FE2000658BD29272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:b1:0b:32:34:e1:93:2b:10:8d:90:38:15:
                    ca:ba:69:eb:c8:1f:3b:8b:21:b6:b7:b6:a1:b9:1d:
                    9f:d1:ac:2d:2e:40:db:42:40:83:aa:c9:c6:88:91:
                    44:ef:f9:dd:75:5a:75:c6:56:60:9c:2b:bf:c8:0a:
                    eb:8a:05:21:f6:fb:30:37:ac:d6:fa:2a:8b:a7:4c:
                    e2:e5:e7:6c:ef:25:a3:79:51:82:7d:37:79:a9:68:
                    13:e3:e9:70:b8:58:72:6a:13:13:9f:31:a8:3e:9c:
                    c7:b9:fd:5a:37:60:4e:6a:90:11:53:ee:03:22:ac:
                    ae:71:c1:17:60:d2:29:f6:62:e7:3a:3b:d4:6a:a0:
                    6f:e0:2a:69:9d:7a:94:3d:d2:ce:f8:11:f8:c0:62:
                    c2:58:d4:f9:95:84:e3:4b:e5:9f:d5:03:63:59:50:
                    5a:c2:d7:28:53:7b:06:79:56:a3:d1:53:b6:f3:9b:
                    6b:4a:a7:37:21:35:51:d3:a6:20:c7:45:c3:2e:e8:
                    7e:06:3d:2f:d8:96:94:53:7e:5f:1f:89:bf:2b:b9:
                    42:48:6b:b3:95:f0:ba:ca:4b:fe:be:bc:34:6c:4c:
                    3c:f2:91:3e:a3:8b:cc:8b:6f:2e:16:05:e0:89:52:
                    11:41:a6:3e:4b:2a:c6:7e:e4:61:b1:96:26:f7:97:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:8B:1F:52:0D:28:CD:AA:AC:DA:56:FE:20:00:65:8B:D2:92:72
            X509v3 Authority Key Identifier:
                keyid:87:91:9A:3C:59:C0:67:52:3C:21:EF:70:A5:96:F0:B7:F9:C0:97:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/87919A3C59C067523C21EF70A596F0B7F9C09798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87919A3C59C067523C21EF70A596F0B7F9C09798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EF3F942AC4BB534D534DF373937707F1FC0BA8E7DC1267EA498A421C6FE3C72E/0/34352e3138362e342e302f32342d3234203d3e20323639383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e5:08:fc:fb:92:46:db:3b:0d:83:ed:48:39:ea:dd:90:18:
         63:1b:20:6c:cf:03:40:e9:f5:08:f6:81:b0:a3:c5:62:53:fc:
         f0:ab:8d:51:cd:9b:48:84:43:bf:a3:b0:13:7b:c8:b5:98:48:
         0f:84:69:6b:5d:47:dd:5e:1d:01:18:69:f1:ae:76:e5:a2:1b:
         5a:39:de:b2:07:6a:b2:c9:ab:c7:ee:1a:18:60:2c:e9:df:47:
         60:45:d3:90:57:a0:4d:d9:4e:1f:ee:15:e8:b5:36:38:04:c8:
         b1:56:08:2f:2c:8c:03:61:3a:5b:f0:b3:fb:a0:c8:74:73:9a:
         d9:1c:4d:19:8b:be:88:e8:31:1d:7b:e0:df:22:86:14:1f:a0:
         79:8e:c7:80:dc:6b:b6:6d:da:79:55:82:c2:9e:d0:f3:0f:24:
         b4:62:00:06:5b:83:8e:92:93:3c:9d:ee:44:e7:cb:42:ab:f4:
         3a:86:4b:c3:78:b9:17:e1:28:7e:58:5e:2b:88:ec:c3:9b:ad:
         ff:66:f3:a8:40:39:12:d4:73:e9:a4:2b:66:bf:b9:ca:64:6a:
         90:af:c7:1c:3a:4c:2a:e5:6b:97:2c:6c:43:5c:f0:2b:a8:ac:
         94:af:cb:77:b3:47:7c:ba:01:b1:45:80:b5:b1:11:01:c5:c3:
         7c:5c:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 07:40:31 2024 by rpki-client on console-ams.rpki-client.org