Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e35302e302f32342d3234203d3e203230343733.roa
File:                     34352e3139312e35302e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          ZDNUbTZrggCT+PaINLffHcadO15r7IMbU/rqZzd6OuI=
Subject key identifier:   62:12:D1:D2:C3:33:1D:B5:0E:70:59:8E:2E:96:18:BE:85:79:8F:CE
Certificate issuer:       /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial:       4B053C37AC7F443C3CDE9BE272BBD0DB3C6E3013
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e35302e302f32342d3234203d3e203230343733.roa
Signing time:             Sun 01 Sep 2024 03:20:00 +0000
ROA not before:           Sun 01 Sep 2024 03:15:00 +0000
ROA not after:            Sun 31 Aug 2025 03:20:00 +0000
asID:                     20473
IP address blocks:        45.191.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:05:3c:37:ac:7f:44:3c:3c:de:9b:e2:72:bb:d0:db:3c:6e:30:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
        Validity
            Not Before: Sep  1 03:15:00 2024 GMT
            Not After : Aug 31 03:20:00 2025 GMT
        Subject: CN=6212D1D2C3331DB50E70598E2E9618BE85798FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:9b:13:56:04:b3:3a:3f:25:bb:29:08:fe:
                    27:0d:40:3d:fb:c3:38:2d:9b:29:13:a5:c8:c4:76:
                    5a:67:0f:28:21:76:81:50:df:e6:e6:97:0c:23:eb:
                    f3:a0:de:e0:a2:ce:ef:ec:4a:76:3c:4e:62:48:49:
                    de:21:30:4a:1c:7e:e9:ee:c4:12:48:9f:c4:f1:fd:
                    6e:72:7d:13:38:ca:ba:6f:cd:77:95:5b:82:a2:be:
                    c8:18:b9:11:46:b8:a4:5c:26:f8:f1:b4:a0:43:ec:
                    e3:0f:0f:41:8e:3c:8b:48:0a:34:b7:01:9a:60:08:
                    a0:3e:5b:5d:f0:78:1b:5b:f1:8f:4a:4b:1d:04:cd:
                    02:e7:da:c4:f7:97:b4:94:0f:da:cb:6d:c8:f3:7e:
                    57:67:a4:7f:a3:04:55:37:37:0f:32:ff:37:59:12:
                    9e:4d:b0:c6:3f:04:f5:c1:f9:97:7b:d8:6c:3c:b3:
                    89:15:a9:87:95:44:20:26:d5:55:ea:3a:3b:3f:c9:
                    e4:de:51:bb:75:0e:94:5c:b7:c6:43:13:df:86:ec:
                    6e:12:b8:a8:62:6e:e1:c3:62:13:02:09:dd:54:bb:
                    66:ed:48:68:39:6b:7b:f9:38:21:7c:70:1e:b0:7b:
                    35:37:72:c5:5c:bc:4c:9e:58:f2:a4:29:10:a8:e7:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:12:D1:D2:C3:33:1D:B5:0E:70:59:8E:2E:96:18:BE:85:79:8F:CE
            X509v3 Authority Key Identifier:
                keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/34352e3139312e35302e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:63:a2:08:a1:c6:ba:0d:59:f8:2f:45:4d:84:89:f2:da:92:
         ab:be:8c:17:6b:3f:6f:a0:3d:b7:4c:4b:1f:c7:89:ea:b9:e8:
         78:1e:48:95:8c:04:59:39:eb:32:2b:fb:f6:3b:4c:2f:5b:08:
         92:d1:89:43:a5:00:57:55:c7:f3:0f:0f:bc:ba:39:af:ef:3b:
         4f:0a:83:3e:33:f2:2d:1b:23:d3:5f:d3:84:3d:70:39:88:b0:
         f4:5f:4f:0f:e5:4e:94:74:65:fb:62:50:e5:7f:c6:2d:3a:2b:
         74:bd:db:bf:0a:10:90:c7:35:5c:97:8d:11:1b:4c:9e:3b:64:
         8e:b5:09:e5:d5:ed:98:d9:ea:ed:87:24:91:76:0a:33:46:d5:
         11:02:cb:65:16:65:85:f4:ed:ef:45:9e:20:6a:9e:5d:fa:72:
         f4:b7:5b:ff:96:01:79:c3:f7:48:1c:e3:e8:e9:a5:89:d3:a0:
         56:a7:a4:d4:fb:26:85:ab:cc:30:5a:77:7b:b0:fb:37:61:c9:
         c7:3a:c8:c5:fa:d3:fd:81:a0:1b:69:52:af:c8:85:50:2c:38:
         1b:60:42:d4:ad:19:7e:8a:93:40:93:8c:1b:89:68:6a:12:be:
         03:8a:b1:58:de:52:80:3f:0d:a3:f5:04:3d:5d:02:a0:ce:fc:
         f5:46:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 16:03:29 2024 by rpki-client on console-ams.rpki-client.org