Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/34352e3138372e39342e302f32342d3234203d3e20323639383239.roa
File:                     34352e3138372e39342e302f32342d3234203d3e20323639383239.roa (raw, json)
Hash identifier:          qG0MpcwCd28fWKTgTb8Z+iTdQ2JA9FK58xZ38lu+7LY=
Subject key identifier:   B1:55:28:36:95:C6:82:17:E4:A6:E2:10:A6:23:67:A9:DB:EE:09:FE
Certificate issuer:       /CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
Certificate serial:       7D0B2E0C1F274C00731F43FB686090E10EB53154
Authority key identifier: 0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/34352e3138372e39342e302f32342d3234203d3e20323639383239.roa
Signing time:             Tue 05 Mar 2024 17:56:20 +0000
ROA not before:           Tue 05 Mar 2024 17:51:20 +0000
ROA not after:            Tue 04 Mar 2025 17:56:20 +0000
asID:                     269829
IP address blocks:        45.187.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0b:2e:0c:1f:27:4c:00:73:1f:43:fb:68:60:90:e1:0e:b5:31:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F648EC543C3C7C2094A45E4678D768C42B868C7
        Validity
            Not Before: Mar  5 17:51:20 2024 GMT
            Not After : Mar  4 17:56:20 2025 GMT
        Subject: CN=B155283695C68217E4A6E210A62367A9DBEE09FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:44:9d:51:cb:76:e3:c1:76:98:bd:c9:7d:ea:
                    21:82:3f:d8:ef:df:9f:aa:2d:23:b7:21:46:da:92:
                    c4:20:07:68:1e:2e:68:d3:fb:70:d1:4d:f5:a3:c3:
                    d4:ea:ec:0d:36:29:ad:e9:7e:28:e0:54:f4:47:47:
                    dd:b1:40:08:55:26:15:25:ed:c3:7e:8b:bc:87:85:
                    3f:07:8f:32:00:ee:b1:96:d8:e0:f6:91:ad:55:69:
                    8a:0f:8f:b9:4c:9b:27:2d:7f:9e:49:12:64:5c:17:
                    18:4c:86:53:c2:77:4b:a4:c6:e6:f4:fb:41:58:28:
                    19:06:a2:e3:b4:5b:42:50:da:1c:8d:58:61:e6:6b:
                    3a:63:0f:7e:1c:1c:9d:26:ea:84:98:44:25:d1:a7:
                    73:59:07:ff:c6:10:98:70:85:5f:1e:b5:70:81:4d:
                    0a:23:a4:7f:4b:4d:85:81:57:e6:e4:35:13:90:2e:
                    a1:29:93:c9:76:c7:46:05:34:fc:ea:0f:3e:b9:1e:
                    7b:82:e6:e0:5e:f8:55:36:7c:60:2e:fd:1d:4b:d2:
                    4e:1f:cf:90:dd:4b:37:14:d7:1c:2c:3c:05:a5:5f:
                    87:e0:55:86:70:cf:67:11:16:ab:3f:6e:7f:f1:b0:
                    f7:99:35:7b:01:f3:0e:22:ef:67:4f:49:71:1e:95:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:55:28:36:95:C6:82:17:E4:A6:E2:10:A6:23:67:A9:DB:EE:09:FE
            X509v3 Authority Key Identifier:
                keyid:0F:64:8E:C5:43:C3:C7:C2:09:4A:45:E4:67:8D:76:8C:42:B8:68:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F648EC543C3C7C2094A45E4678D768C42B868C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F777E57EA6DBD25E9E0E1CE306C770BC91EE8467401527C91965C3828FD00069/0/34352e3138372e39342e302f32342d3234203d3e20323639383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:8b:6e:3c:c5:7b:3d:66:4b:b4:f5:f2:56:24:e6:d3:59:
         03:7b:dd:1e:b5:8c:12:01:bb:b4:4e:0c:c6:3a:0b:f4:ef:10:
         67:14:78:bf:45:0f:f6:19:83:b8:2b:a0:93:91:6f:62:69:a6:
         4b:6b:d1:87:7f:dc:59:f8:4e:55:bd:f9:fb:7f:62:7f:af:4d:
         8f:d9:e8:31:98:f4:be:c4:58:4e:e9:ab:b2:e7:ec:e3:d9:36:
         a9:71:c7:8c:b0:fc:73:39:e6:27:8d:3c:fd:21:13:66:ed:55:
         ad:94:9f:50:c5:9e:60:43:f2:28:8e:29:ba:dc:5a:6f:27:d3:
         7c:3b:c9:72:f1:84:57:ce:1d:ab:0b:0f:05:ae:59:bc:8d:35:
         c9:cd:38:ea:eb:a2:bc:15:61:a9:a5:b8:48:28:fb:e3:02:52:
         f9:3b:84:f2:7b:40:2a:0e:eb:4b:b7:4a:6e:47:67:92:c5:2e:
         19:00:15:95:3c:bf:2a:93:d5:c4:08:eb:d6:c2:40:fc:aa:fa:
         dc:d5:e2:9d:d0:71:40:13:53:f3:ce:cb:d6:c2:5f:f5:df:69:
         f9:1b:6a:81:9a:85:3e:54:bd:3f:51:1b:eb:5d:14:e9:f3:79:
         8e:6f:9e:79:b6:43:84:df:27:d7:b0:26:fb:48:2e:8a:d7:18:
         52:34:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:55:38 2024 by rpki-client on console-fra.rpki-client.org