Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa
File:                     34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa (raw, json)
Hash identifier:          c4rrQK2cIAKUMXOEeJeo5wRMYzt4FdqpoTD3V84Fcek=
Subject key identifier:   75:52:D6:14:03:F6:CB:8A:25:58:75:B3:CB:A4:6A:C2:41:FA:EF:C9
Certificate issuer:       /CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
Certificate serial:       58D2BFEEF0824C085194BFCB9F38408D7FC877BD
Authority key identifier: 6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa
Signing time:             Tue 05 Mar 2024 17:48:01 +0000
ROA not before:           Tue 05 Mar 2024 17:43:01 +0000
ROA not after:            Tue 04 Mar 2025 17:48:01 +0000
asID:                     269735
IP address blocks:        45.181.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d2:bf:ee:f0:82:4c:08:51:94:bf:cb:9f:38:40:8d:7f:c8:77:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B10736B719525EEF03A0E2B1890255AD5B6AFB4
        Validity
            Not Before: Mar  5 17:43:01 2024 GMT
            Not After : Mar  4 17:48:01 2025 GMT
        Subject: CN=7552D61403F6CB8A255875B3CBA46AC241FAEFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:d8:04:92:30:f3:16:58:9f:0a:7d:6d:e6:
                    6d:58:2a:8d:82:88:22:a8:d4:99:69:bb:41:af:e3:
                    d9:c9:e0:bb:43:86:43:f6:5d:69:3d:ca:70:d2:29:
                    a0:1e:5e:12:7b:e4:d1:82:65:26:1c:3f:4d:7b:0c:
                    c5:cf:f1:44:ab:72:c0:34:14:64:4d:2a:34:33:34:
                    8b:52:28:dd:09:34:33:75:28:fd:cc:4e:23:ec:c2:
                    c9:fd:4f:01:8f:8a:2a:40:29:bc:26:79:9e:c6:35:
                    16:75:fc:be:2d:96:ec:d7:a8:07:56:8d:9b:90:d4:
                    60:38:ef:dc:2b:31:44:5d:cc:5f:cc:e3:4a:cb:6f:
                    9f:21:bb:fd:75:34:78:ec:90:9e:e4:39:87:4e:79:
                    ae:bb:75:c5:0c:29:0d:e4:85:1d:45:03:67:88:3a:
                    d6:b9:cd:c0:5b:1b:dc:d2:48:34:c0:58:a5:5a:a6:
                    c5:4a:71:bc:be:0f:13:3f:d0:57:35:df:e5:d4:ce:
                    c7:32:4a:ad:68:c7:c7:90:04:23:a0:5a:4f:27:4a:
                    72:bd:97:a7:95:72:3d:c9:a1:cf:ed:a9:80:f4:be:
                    94:fd:ac:1b:6b:0c:28:21:70:a7:0a:c2:2e:c7:f5:
                    d5:33:04:3f:da:4c:5b:4a:d7:4a:8c:11:ae:d2:52:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:D6:14:03:F6:CB:8A:25:58:75:B3:CB:A4:6A:C2:41:FA:EF:C9
            X509v3 Authority Key Identifier:
                keyid:6B:10:73:6B:71:95:25:EE:F0:3A:0E:2B:18:90:25:5A:D5:B6:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B10736B719525EEF03A0E2B1890255AD5B6AFB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2DF8374A5968F44F3D9FD6DEDA9609A737DBB660CC9CBD62D7F0E1E769BA256/0/34352e3138312e3139312e302f32342d3234203d3e20323639373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a2:4b:e8:3a:5a:71:02:16:29:ee:55:e3:f0:ce:f2:4c:1b:
         47:2d:39:be:97:62:8a:3f:d3:dd:b3:0f:fe:75:52:ab:1e:fc:
         2b:2b:ca:19:b4:1e:15:c0:56:df:dd:7d:56:bb:36:fb:0c:84:
         a9:5f:bf:10:b7:45:b5:11:67:8c:fc:50:74:42:95:09:4c:85:
         6d:ee:5e:06:4d:ac:37:4e:9c:d7:64:2e:9e:4c:ca:23:69:b9:
         ab:56:51:2b:d1:cf:9b:71:43:03:3f:e9:0b:6b:75:08:2b:f6:
         ba:03:09:9f:8a:c1:3f:c0:73:7d:65:c5:13:27:ad:68:1b:ba:
         9d:81:90:80:db:d5:e6:3d:66:d9:18:09:3f:85:aa:06:bd:09:
         5c:66:5c:c6:fc:8a:9a:9f:a3:a4:38:68:71:ad:5e:eb:1d:77:
         99:c3:f5:2f:9c:e5:eb:19:76:ea:b4:fe:16:e6:17:9b:12:5d:
         9a:9a:f3:e2:4d:74:eb:53:7f:c7:ad:31:ac:1b:bc:f2:6b:20:
         e9:a9:af:f8:38:eb:b9:54:15:dd:0a:be:db:74:57:8a:60:a4:
         1c:e2:68:2f:6e:bd:61:fd:b8:71:6c:51:6c:a1:e6:2c:73:c6:
         cc:35:9f:84:b2:42:a4:36:a1:46:14:04:a9:bd:15:72:d9:a6:
         8f:30:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:54 2024 by rpki-client on console-fra.rpki-client.org