Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e2033383136.roa
File:                     34352e3137332e34342e302f32342d3234203d3e2033383136.roa (raw, json)
Hash identifier:          neeHWEryfCP9zwDde8/6brThAHVMu05UH6NqYCbQZ2I=
Subject key identifier:   5A:25:8F:EA:A0:69:68:5F:41:55:F3:27:A8:E5:25:62:51:13:FA:D0
Certificate issuer:       /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
Certificate serial:       6BE97540E7FE810CA4E72F38A5B96778C2DEE6C0
Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 18:14:27 +0000
ROA not before:           Tue 05 Mar 2024 18:09:27 +0000
ROA not after:            Tue 04 Mar 2025 18:14:27 +0000
asID:                     3816
IP address blocks:        45.173.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e9:75:40:e7:fe:81:0c:a4:e7:2f:38:a5:b9:67:78:c2:de:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
        Validity
            Not Before: Mar  5 18:09:27 2024 GMT
            Not After : Mar  4 18:14:27 2025 GMT
        Subject: CN=5A258FEAA069685F4155F327A8E525625113FAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:b7:11:0d:c7:2e:2b:ab:68:58:be:da:96:
                    5e:c9:23:01:e1:23:48:ef:04:87:18:b2:6d:55:8f:
                    42:e0:9d:0a:36:5f:c7:87:23:a9:c1:9b:f8:0e:68:
                    ef:25:e1:ec:df:04:37:82:d0:f9:34:2c:d9:5d:85:
                    58:52:67:04:a6:53:aa:ef:22:8c:84:07:96:7a:13:
                    0b:30:3a:34:ab:17:2b:a8:e1:eb:8f:2c:1b:f7:39:
                    28:3d:53:64:4b:97:1d:2f:6a:d7:9f:1d:2f:17:ce:
                    e4:81:a6:83:28:89:94:8c:c6:e2:c0:92:27:2f:3f:
                    13:cc:c0:bf:5e:da:21:93:ba:0a:20:dd:38:53:62:
                    ba:54:f7:ff:fd:70:4f:0f:55:43:84:6e:d6:63:0e:
                    29:7e:fa:db:73:5b:18:fa:3d:90:53:ef:02:aa:45:
                    43:71:f4:53:f7:93:8d:c8:29:1c:9f:9f:ba:cf:27:
                    c5:34:d2:9c:86:dc:33:a2:c8:98:88:3a:d8:9d:86:
                    6f:32:aa:22:43:67:06:1c:9e:99:a1:26:30:96:9e:
                    ac:24:0e:38:43:be:d2:e5:c7:5d:73:63:56:90:ac:
                    9c:3c:91:7a:88:82:77:ec:cc:f5:f4:d5:92:37:f5:
                    a0:a3:8f:57:0b:3a:06:29:6c:7a:16:d6:2d:21:26:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:25:8F:EA:A0:69:68:5F:41:55:F3:27:A8:E5:25:62:51:13:FA:D0
            X509v3 Authority Key Identifier:
                keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:45:2b:f9:7a:42:44:21:96:69:d3:f6:29:45:9c:66:5f:db:
         3a:98:1a:3a:0a:e4:86:0e:67:cc:46:c8:65:d1:3f:57:7f:3a:
         75:ae:1c:60:c5:a9:a0:d8:61:05:6f:37:59:12:fa:c6:af:42:
         99:df:f4:fa:b1:a8:bf:13:5d:47:7f:d0:75:ad:95:50:16:b1:
         cc:f4:72:04:c4:8c:4a:65:ed:31:0a:70:f2:8e:83:0a:b6:75:
         41:4e:68:6a:1d:2c:f1:13:e1:3b:00:58:89:a5:08:26:e9:ef:
         16:de:c4:bf:0c:21:7a:2d:03:74:c4:5d:f2:c3:e4:1b:59:70:
         57:82:84:64:1b:33:3e:f2:2a:23:73:e4:c3:89:18:0b:d4:e5:
         9e:0a:43:2c:5e:5d:7d:d1:33:94:92:f0:30:b0:bd:13:5d:9a:
         6f:b1:31:82:51:c1:4a:9f:ea:51:ac:c5:93:e2:c3:5d:d5:a4:
         02:83:7a:b0:c7:c8:21:0b:ff:e4:84:69:31:29:22:36:df:71:
         21:d0:a3:d1:5f:c6:4d:f5:29:f9:41:11:6f:06:8a:e4:88:c8:
         2f:66:15:9e:c9:e8:8b:29:ed:fe:bb:f4:5b:0d:3c:cc:29:c5:
         29:9a:2f:b1:d1:05:c7:35:08:29:0d:50:a3:3d:b8:96:1b:f0:
         4e:8b:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:26 2024 by rpki-client on console-ams.rpki-client.org