Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/34352e352e31352e302f32342d3234203d3e20323635363930.roa
File:                     34352e352e31352e302f32342d3234203d3e20323635363930.roa (raw, json)
Hash identifier:          59HkxRO3QgsCFKFGD9NiqK6aYn5/vPXsZH3z04fah60=
Subject key identifier:   53:7F:97:E0:9D:2D:3C:6B:97:BF:23:45:01:BF:A6:6B:25:DA:9A:37
Certificate issuer:       /CN=047342C3AA3AFAD52A4E32CF9E37034613ECA066
Certificate serial:       2E378E7D46FE3CEA9B36790D35B64E580271E445
Authority key identifier: 04:73:42:C3:AA:3A:FA:D5:2A:4E:32:CF:9E:37:03:46:13:EC:A0:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/34352e352e31352e302f32342d3234203d3e20323635363930.roa
Signing time:             Tue 05 Mar 2024 18:16:48 +0000
ROA not before:           Tue 05 Mar 2024 18:11:48 +0000
ROA not after:            Tue 04 Mar 2025 18:16:48 +0000
asID:                     265690
IP address blocks:        45.5.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.crl
                          rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:37:8e:7d:46:fe:3c:ea:9b:36:79:0d:35:b6:4e:58:02:71:e4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047342C3AA3AFAD52A4E32CF9E37034613ECA066
        Validity
            Not Before: Mar  5 18:11:48 2024 GMT
            Not After : Mar  4 18:16:48 2025 GMT
        Subject: CN=537F97E09D2D3C6B97BF234501BFA66B25DA9A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:75:a5:7e:d3:a8:9f:1a:b0:51:b0:7b:5c:
                    bf:ff:7e:10:07:2f:8e:96:63:10:11:3c:ef:14:a6:
                    a3:b6:ad:5d:34:22:10:e8:3b:cf:d3:6b:e8:da:64:
                    ec:24:72:5c:eb:b1:0b:83:99:0e:a2:9a:4f:fb:b3:
                    d6:52:3e:9b:10:d3:b7:12:d8:9e:cf:86:7a:be:7c:
                    65:41:74:7b:ba:7d:27:69:1e:ac:ea:88:9e:08:bb:
                    6c:20:7c:1a:4b:58:3a:b9:3d:b3:0e:ac:51:1f:0a:
                    9c:b2:58:56:84:36:db:4b:a0:23:05:1f:50:bb:bf:
                    63:6c:09:7d:33:31:64:c6:59:24:64:d5:74:af:70:
                    00:2e:69:82:2f:b4:d7:2a:b7:e6:cc:88:57:23:a4:
                    c6:6a:8f:36:b8:98:a5:2c:a2:3a:f7:a9:f2:69:a6:
                    0c:f4:13:3c:dd:e4:59:b4:82:ce:40:e7:52:94:9f:
                    f4:a3:d3:1a:62:05:77:3e:69:d4:55:52:e8:35:c0:
                    0b:de:ad:d9:f9:73:3a:60:e2:df:db:76:a9:8e:f4:
                    7b:f3:eb:7e:8b:38:e5:43:6a:12:30:1f:29:a0:e3:
                    a8:ce:a8:0f:f7:8c:7c:4e:66:db:ab:a0:f6:15:b6:
                    41:98:51:5f:3d:05:d9:b4:f8:51:40:ae:49:d3:fa:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7F:97:E0:9D:2D:3C:6B:97:BF:23:45:01:BF:A6:6B:25:DA:9A:37
            X509v3 Authority Key Identifier:
                keyid:04:73:42:C3:AA:3A:FA:D5:2A:4E:32:CF:9E:37:03:46:13:EC:A0:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/047342C3AA3AFAD52A4E32CF9E37034613ECA066.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03939F0BF8E56AEA332FE3197C5216F24C76B3AD17F468811344295DE85E5DC6/0/34352e352e31352e302f32342d3234203d3e20323635363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:d9:d3:55:60:03:c1:47:8d:e9:23:d9:26:02:4a:c3:78:
         ce:41:c6:16:82:a8:7c:75:05:8a:ae:25:28:e7:b2:8d:d7:7d:
         56:3c:12:78:e2:23:55:7b:7f:58:fd:8b:4c:bc:83:95:c8:98:
         7e:9a:04:5a:8d:5b:c0:80:3c:4f:a7:33:3a:6e:e6:b8:45:ac:
         dc:76:00:42:32:e8:f5:39:05:06:e3:69:7b:1a:c3:31:9f:24:
         9a:f0:6a:36:7b:8f:5b:b7:94:2a:2f:9f:45:34:f9:02:40:a8:
         80:72:9e:5d:57:ad:a5:93:dc:44:9d:59:76:09:45:37:24:e9:
         a7:9d:8d:0f:d7:80:ed:96:1c:e7:28:35:cf:9e:f1:57:04:3e:
         a1:b9:63:7d:7a:07:2b:8a:99:ef:75:6d:93:8a:a6:11:f9:22:
         fb:d8:4f:d5:6b:29:6c:5a:d7:d6:b3:db:13:ea:96:3f:f3:44:
         ae:89:88:09:84:42:14:5d:a2:e3:1c:1d:eb:66:bf:e2:ec:ab:
         c0:63:f0:4e:d6:81:99:1d:9f:e3:79:d2:c0:a2:be:23:78:44:
         7d:61:8f:88:6a:12:40:15:5d:d9:9b:5b:2f:6a:30:c9:bb:94:
         23:a1:d8:12:85:7a:04:be:9a:99:1e:43:93:5c:34:f4:a1:ae:
         91:ed:95:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:01 2024 by rpki-client on console-ams.rpki-client.org