Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132362e302f32342d3234203d3e20323637383831.roa
File:                     34352e3137372e3132362e302f32342d3234203d3e20323637383831.roa (raw, json)
Hash identifier:          I6Skezvt+sEYp3FrliyJKzlItDJCqX0nsDXriV/XiCE=
Subject key identifier:   5A:E1:C3:1C:58:93:31:C7:3F:46:36:79:94:A3:A8:33:5E:46:30:CD
Certificate issuer:       /CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
Certificate serial:       046CEEDA952BF54771DF91DF6B98CD38968E3369
Authority key identifier: DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132362e302f32342d3234203d3e20323637383831.roa
Signing time:             Tue 05 Mar 2024 17:57:19 +0000
ROA not before:           Tue 05 Mar 2024 17:52:19 +0000
ROA not after:            Tue 04 Mar 2025 17:57:19 +0000
asID:                     267881
IP address blocks:        45.177.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6c:ee:da:95:2b:f5:47:71:df:91:df:6b:98:cd:38:96:8e:33:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
        Validity
            Not Before: Mar  5 17:52:19 2024 GMT
            Not After : Mar  4 17:57:19 2025 GMT
        Subject: CN=5AE1C31C589331C73F46367994A3A8335E4630CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:db:4c:95:96:bc:81:71:2d:81:ab:73:00:
                    23:4e:9b:d1:65:1d:96:1c:29:93:2d:53:ed:5b:2d:
                    8b:6f:a2:49:f8:50:48:26:e5:c1:08:07:59:64:d0:
                    05:0d:f1:6e:91:0c:8e:cf:46:4c:73:49:f6:9d:d3:
                    f6:7a:ec:66:3d:e4:c0:cd:ea:71:b8:e5:1d:aa:f0:
                    f4:bf:d8:91:ad:f9:7a:3d:97:3c:6b:db:b9:7c:d9:
                    3e:50:6f:81:0b:76:e2:61:e4:a4:5e:8a:00:e1:f5:
                    98:37:5d:c2:00:46:52:35:89:3a:6a:b9:30:60:6b:
                    3b:1a:c4:de:52:fd:50:81:69:95:8a:05:d4:00:ea:
                    5d:eb:e9:95:91:29:69:0f:35:da:5d:09:b2:b6:f3:
                    e2:d3:d1:2f:3b:59:fb:52:23:68:26:34:e6:0d:b6:
                    e9:7e:b8:1a:85:b6:07:b2:2a:b8:ca:2d:2f:99:b7:
                    5e:2a:db:20:36:46:7a:e0:20:0d:96:7b:0e:d1:1a:
                    9e:04:e1:d8:56:a7:ea:8e:b2:95:a1:17:13:b8:03:
                    3b:cc:cf:6c:ad:bd:0c:0f:e8:72:cd:d6:b0:0a:7a:
                    8f:c8:d5:0e:64:0b:50:d5:2d:bf:e4:d3:27:ad:9b:
                    07:b8:6b:d0:d2:4c:5e:67:27:c9:36:d8:8e:f9:91:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:C3:1C:58:93:31:C7:3F:46:36:79:94:A3:A8:33:5E:46:30:CD
            X509v3 Authority Key Identifier:
                keyid:DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132362e302f32342d3234203d3e20323637383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:af:50:20:a9:96:22:2c:14:f2:a8:50:b8:2e:9e:ee:55:b4:
         6d:62:f6:1b:bf:49:2a:34:2b:bd:d5:35:1b:3e:9b:b4:9d:31:
         54:e9:3c:90:8f:e3:5d:e8:84:12:aa:dc:eb:95:c6:ff:74:71:
         c7:10:4b:18:e3:54:4b:ae:84:47:5f:77:cf:15:40:ac:8d:d8:
         e6:26:62:b0:e9:1d:f5:7f:63:b1:a8:d1:f6:95:86:0c:ac:03:
         ef:f5:a1:90:a2:e0:cb:c0:2f:09:7f:81:0d:1e:00:a6:6d:aa:
         b9:4c:18:12:c5:c1:70:06:85:4a:48:1f:88:da:73:7c:9b:29:
         46:89:33:13:16:7e:9e:f8:63:38:6a:93:35:f0:2b:9b:3f:5a:
         eb:26:0a:ff:d3:5b:0e:a3:9e:35:0a:1a:b6:47:00:68:a0:52:
         01:4b:57:56:69:ad:58:61:a3:2d:aa:85:b8:4a:44:e6:7c:d1:
         c7:23:e3:09:43:19:3f:48:96:28:0f:80:fd:20:73:a7:95:79:
         5b:c1:78:b4:c8:6e:9a:8e:71:04:fa:8c:bf:24:85:3c:24:97:
         ad:a2:d2:23:7d:ef:3c:11:69:2c:55:89:66:a8:e2:c9:ba:14:
         4b:09:cb:c2:6e:12:9b:6e:e3:6d:3f:0e:94:77:0f:e9:60:8c:
         7a:48:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:16:36 2024 by rpki-client on console-fra.rpki-client.org