Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa
File:                     34352e3137372e35332e302f32342d3234203d3e203139343239.roa (raw, json)
Hash identifier:          rA7MF+59Fs6ysmUPV+OTiIiQb1wljBiV1fN0PgZ8IGI=
Subject key identifier:   E2:6B:FA:D8:24:3E:25:FE:EB:4D:8F:53:82:5E:5F:58:EC:D0:50:F2
Certificate issuer:       /CN=8E7AB1B5E5771F4EEC756C6277874B6227101C79
Certificate serial:       1971443F5F6844BA607C62422D9CFA0343CF2299
Authority key identifier: 8E:7A:B1:B5:E5:77:1F:4E:EC:75:6C:62:77:87:4B:62:27:10:1C:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:43:57 +0000
ROA not before:           Tue 05 Mar 2024 17:38:57 +0000
ROA not after:            Tue 04 Mar 2025 17:43:57 +0000
asID:                     19429
IP address blocks:        45.177.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:71:44:3f:5f:68:44:ba:60:7c:62:42:2d:9c:fa:03:43:cf:22:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E7AB1B5E5771F4EEC756C6277874B6227101C79
        Validity
            Not Before: Mar  5 17:38:57 2024 GMT
            Not After : Mar  4 17:43:57 2025 GMT
        Subject: CN=E26BFAD8243E25FEEB4D8F53825E5F58ECD050F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:fd:13:31:27:69:bc:88:f0:08:af:5e:75:
                    be:32:c5:c8:74:95:dc:6f:79:fd:e9:d4:d3:e2:5d:
                    75:b8:6c:4b:42:3f:a5:08:8f:35:9c:fc:93:4e:f8:
                    d5:d5:d6:68:07:dc:d5:4d:2f:73:48:5f:07:0d:a8:
                    af:17:82:bb:71:ee:75:4e:d8:fc:6d:68:2e:96:54:
                    b7:40:5b:49:b0:2c:a5:5b:f7:85:d4:11:ab:ea:a2:
                    69:03:8c:25:eb:14:70:9d:7d:5d:7a:15:47:fe:d0:
                    d7:37:c6:99:9a:05:8c:bb:ee:e3:1b:db:96:0b:9f:
                    26:b8:90:1d:30:4d:cc:6a:89:1e:f7:2d:88:e8:7c:
                    83:67:ad:48:75:53:42:d4:d0:64:68:5a:01:51:57:
                    06:33:79:b0:68:a8:f8:0e:f4:de:c5:a7:91:23:a7:
                    26:a4:8c:a9:32:9a:9c:65:05:69:80:13:08:e8:57:
                    d4:d7:f3:a6:9f:69:71:c7:43:ce:0e:07:7b:fb:b2:
                    4f:f9:66:99:b4:52:c6:13:99:84:52:4f:73:fc:62:
                    2a:72:4a:f2:43:f4:65:42:45:80:bf:9a:c2:cc:53:
                    1b:34:0c:70:da:ee:c6:9e:d8:44:2e:4c:e3:02:13:
                    b7:e7:66:d7:3f:cc:a3:a6:ef:79:e0:11:26:8a:98:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:FA:D8:24:3E:25:FE:EB:4D:8F:53:82:5E:5F:58:EC:D0:50:F2
            X509v3 Authority Key Identifier:
                keyid:8E:7A:B1:B5:E5:77:1F:4E:EC:75:6C:62:77:87:4B:62:27:10:1C:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E7AB1B5E5771F4EEC756C6277874B6227101C79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C60844494F8E6CE074AF2B5CEBCA139A30E259BC3A0AA472E88951F14E5EB39/0/34352e3137372e35332e302f32342d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:f7:7e:2f:75:53:47:39:df:c4:87:38:82:24:20:e1:39:
         0c:e6:29:40:f0:b6:08:2b:c5:c9:57:11:77:4b:48:f1:fc:6f:
         95:96:29:46:f2:91:6d:4d:88:4a:67:fd:d6:06:3f:f2:23:f7:
         c6:2e:6a:39:63:1d:e7:c3:06:8a:2f:02:34:ba:76:a8:3f:90:
         78:b9:a9:4e:7e:7d:0b:e8:0f:cc:12:29:b4:98:69:cc:3d:7f:
         26:17:6b:10:bd:5c:48:a0:b4:1b:8b:82:47:d6:a2:0a:81:f3:
         2d:e9:e8:96:85:20:28:64:90:d8:9f:ce:2d:db:fc:24:1c:f3:
         a8:6a:dc:13:d7:c4:fd:11:eb:c8:c3:6e:38:38:8d:b1:94:58:
         0a:65:0c:9c:e1:ae:b7:2e:9e:4d:dc:b6:4a:8f:dc:38:14:ba:
         f5:4d:ae:38:64:f7:6c:87:fd:9e:b0:90:e5:20:ba:4c:34:8b:
         82:c5:38:d1:0e:de:7f:d0:8e:d2:68:7c:e0:08:ea:cd:e1:37:
         72:e5:55:e2:f1:0a:f8:6d:e7:65:ab:b0:2b:2e:17:b7:92:55:
         e5:ed:80:50:ff:46:44:b1:00:ca:26:93:a1:41:e2:23:5f:00:
         6b:31:ee:72:95:da:9f:46:54:6d:10:1c:8c:1b:90:0f:e1:e3:
         08:7e:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:06:11 2024 by rpki-client on console-fra.rpki-client.org