Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa
File:                     34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          9BG5gOFByVMVWJyYAmh6AYBbBa5B0u5Z8Lpq8wlk/wE=
Subject key identifier:   C9:E5:32:81:B2:EB:6F:D1:67:60:6F:A2:DC:B2:A3:E2:E2:6E:D7:C7
Certificate issuer:       /CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4
Certificate serial:       3AA745235293776B2FB7AB01E32F3CA10C35231C
Authority key identifier: B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa
Signing time:             Tue 05 Mar 2024 17:58:28 +0000
ROA not before:           Tue 05 Mar 2024 17:53:28 +0000
ROA not after:            Tue 04 Mar 2025 17:58:28 +0000
asID:                     269838
IP address blocks:        45.186.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a7:45:23:52:93:77:6b:2f:b7:ab:01:e3:2f:3c:a1:0c:35:23:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4
        Validity
            Not Before: Mar  5 17:53:28 2024 GMT
            Not After : Mar  4 17:58:28 2025 GMT
        Subject: CN=C9E53281B2EB6FD167606FA2DCB2A3E2E26ED7C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:94:fd:6a:22:95:8c:7b:a8:a0:38:21:dd:
                    9b:48:fa:ca:26:ee:bf:62:2f:ae:01:fe:94:81:1d:
                    e7:f3:48:bc:42:42:39:7d:0a:08:dc:78:8c:9a:74:
                    59:02:43:12:e6:38:e2:a0:a2:31:63:3d:f0:f5:98:
                    88:fe:2c:f3:db:83:13:a8:b0:c5:83:0b:15:4f:7f:
                    2b:95:77:ab:1b:a1:00:aa:d1:05:14:21:3a:1a:7d:
                    d6:af:31:33:4e:11:e7:4e:4b:33:03:d5:fd:97:e1:
                    45:1a:35:e2:01:3e:74:05:7e:36:49:a8:d8:6a:eb:
                    57:e9:6d:bf:fd:d0:62:2a:7e:1b:5c:69:15:c5:42:
                    45:56:20:29:f9:33:ce:e4:6a:23:11:89:d0:13:6a:
                    16:26:2b:e7:a7:e8:11:7b:c3:c8:91:d0:e1:e4:06:
                    fd:b3:18:ba:80:be:c4:78:48:3b:a9:e6:ee:99:1b:
                    d9:87:fa:c5:03:17:cf:99:46:9f:eb:d0:b1:f3:19:
                    eb:3f:da:06:fd:ee:a3:cc:41:b8:dd:a9:7f:31:55:
                    52:b5:97:57:29:a2:6c:09:ee:fc:65:2a:5f:9d:a8:
                    e7:9a:1e:0c:b2:47:94:6a:ce:c7:6f:35:28:76:67:
                    9f:96:f5:8a:5c:b4:8f:80:55:0b:50:d7:c2:75:0b:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E5:32:81:B2:EB:6F:D1:67:60:6F:A2:DC:B2:A3:E2:E2:6E:D7:C7
            X509v3 Authority Key Identifier:
                keyid:B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:50:36:e1:bf:17:a3:42:d9:98:67:6e:1e:cb:02:75:91:87:
         3c:52:d1:f1:af:c5:58:fa:fe:c0:02:a7:74:48:38:55:88:8e:
         7f:a1:e9:22:de:5a:f2:b3:0a:7b:3b:a5:4d:2b:7f:0e:ff:55:
         c2:86:e2:17:72:ca:ec:58:0f:65:c8:c8:7f:05:4e:10:1b:57:
         34:97:03:96:ec:b6:87:e8:c0:3e:c8:80:91:3d:d8:7f:39:98:
         ac:3d:10:cb:ba:df:cd:6b:d3:6c:01:47:02:9b:92:0f:d4:c0:
         1c:01:a1:19:0f:a5:28:16:d8:f3:60:29:37:38:9b:bb:99:c0:
         92:cb:0a:d1:e6:b2:a5:f5:05:92:e3:60:67:66:6d:f7:f3:b3:
         c1:22:e5:bc:2d:5f:73:ff:ea:c0:a0:ee:bf:71:f5:7f:46:0d:
         36:52:8b:9c:91:99:bd:03:73:c7:8d:be:84:64:e9:80:2a:a8:
         1b:91:a1:bb:ed:9d:40:f8:02:26:67:b9:6c:ec:01:23:2b:de:
         64:1b:ce:41:f5:1f:65:f3:38:1d:6c:e3:44:66:bc:73:74:7e:
         ad:13:74:3d:01:15:61:3d:d4:9c:f5:dc:63:8a:55:57:57:b0:
         66:e2:65:33:42:12:4a:50:98:0a:48:c3:de:6a:d0:1f:1b:d9:
         fe:1e:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org