Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/34352e3138362e33302e302f32342d3234203d3e20323633383039.roa
File:                     34352e3138362e33302e302f32342d3234203d3e20323633383039.roa (raw, json)
Hash identifier:          nSLdiYIstqsNrSNTxn7ctCGBc37BwRJoY2ol/IahV8A=
Subject key identifier:   C8:E7:68:BE:81:79:EC:9F:87:B9:09:97:96:E7:AC:A5:14:8D:54:CC
Certificate issuer:       /CN=57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E
Certificate serial:       5AA04130908623213EA251D3B00A6BF61FB971F1
Authority key identifier: 57:AB:3F:8A:7A:E5:FB:EC:0C:D9:61:F5:B4:6D:18:66:BC:7A:76:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/34352e3138362e33302e302f32342d3234203d3e20323633383039.roa
Signing time:             Tue 05 Mar 2024 17:46:11 +0000
ROA not before:           Tue 05 Mar 2024 17:41:11 +0000
ROA not after:            Tue 04 Mar 2025 17:46:11 +0000
asID:                     263809
IP address blocks:        45.186.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a0:41:30:90:86:23:21:3e:a2:51:d3:b0:0a:6b:f6:1f:b9:71:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E
        Validity
            Not Before: Mar  5 17:41:11 2024 GMT
            Not After : Mar  4 17:46:11 2025 GMT
        Subject: CN=C8E768BE8179EC9F87B9099796E7ACA5148D54CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:94:9b:3b:08:1d:a0:98:f7:34:37:5a:f1:2c:
                    aa:2c:b5:1a:5c:b8:b6:d5:a8:24:57:ac:c5:d0:5c:
                    47:f4:9f:fb:24:19:ad:93:5d:7f:1a:0c:d0:55:60:
                    b9:a6:ae:e6:4c:a4:01:ba:f3:ac:32:fd:45:09:f3:
                    c0:67:77:a8:60:ed:30:d8:58:d8:5b:f9:de:81:1a:
                    a8:5b:b7:0e:1b:1f:a5:0c:10:32:98:d9:24:d2:f1:
                    12:b0:42:b6:81:de:c7:f7:69:09:b1:5f:2d:1e:af:
                    74:05:f4:3e:d0:af:84:84:bb:d1:84:fd:06:63:d9:
                    9f:7c:da:ff:c1:27:f9:46:4c:3e:c9:a3:28:3e:ff:
                    48:16:90:b6:30:2d:43:ed:ce:43:9e:b2:92:bb:0d:
                    62:5d:90:aa:c3:22:6c:f5:a9:91:8a:d7:df:f0:28:
                    60:b6:44:38:ab:3c:ed:b8:7c:14:5f:02:56:06:29:
                    b5:0b:47:38:d7:25:58:c6:99:b1:29:bb:6d:8c:ef:
                    5b:d1:7a:3f:40:f0:51:e8:e3:ea:0f:e2:d6:d8:50:
                    cd:13:75:47:5f:d7:e1:b9:75:d4:65:55:18:8d:6b:
                    65:0f:ea:13:20:d8:7b:a2:32:0c:97:0a:cc:3f:58:
                    ac:2f:7e:8b:7b:2a:2e:46:1d:97:e5:4a:91:04:48:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E7:68:BE:81:79:EC:9F:87:B9:09:97:96:E7:AC:A5:14:8D:54:CC
            X509v3 Authority Key Identifier:
                keyid:57:AB:3F:8A:7A:E5:FB:EC:0C:D9:61:F5:B4:6D:18:66:BC:7A:76:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57AB3F8A7AE5FBEC0CD961F5B46D1866BC7A760E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C05E36BB47BE4BDCA8FEE07050BC0FBE72F9EDA4ABA52FBD7C9F600E2EDEDAA/0/34352e3138362e33302e302f32342d3234203d3e20323633383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:31:f8:29:90:27:01:34:c0:7c:ba:3b:05:e9:ce:32:2b:1e:
         58:8c:02:6e:e4:97:80:f5:b2:dd:6a:46:d1:71:9b:2b:0d:ce:
         ab:fb:8e:f9:e2:10:be:e0:1c:16:49:92:fa:15:3c:76:ab:df:
         72:e9:bc:8e:73:56:fd:20:89:cf:bc:03:a5:a9:ed:57:4e:2f:
         1e:0a:69:5f:f7:3d:2d:ea:23:a0:b9:65:5b:12:99:fd:31:e4:
         62:51:7f:d0:04:83:a5:46:bc:95:21:f2:dc:c8:0c:b1:7a:44:
         85:8a:95:07:c8:f2:62:b2:1c:ad:0c:42:51:ca:41:8c:6d:c9:
         2d:cc:79:e4:1e:d5:56:c5:cc:b6:d5:8d:1a:8d:30:c2:6e:a0:
         62:f6:d1:76:00:44:6c:86:33:7a:45:39:9d:79:8b:51:7e:4b:
         25:c6:84:3c:7a:1e:15:13:6f:e3:94:91:67:39:aa:93:e3:88:
         b5:f3:9d:5c:25:3f:1c:56:e5:a8:5c:20:57:32:8f:a0:02:e9:
         c5:fb:49:5c:a7:1b:86:b2:a9:91:b7:b7:32:d9:bd:d8:24:96:
         a3:26:e7:c6:9d:b0:dc:a5:5c:94:84:a0:cb:d6:57:3b:a1:8a:
         c3:10:2c:b6:d9:e0:75:7b:f1:56:b6:be:bb:ed:f5:84:95:3e:
         6c:de:b5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org