Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa
File:                     34352e3139312e37352e302f32342d3234203d3e20323732393432.roa (raw, json)
Hash identifier:          sRcqVpS1m7QEeTGKOTkk24GHvR88E/n4kQ2vPGHs5lM=
Subject key identifier:   54:78:CD:17:31:7C:57:02:55:12:00:40:8B:A3:90:39:5E:2E:0E:76
Certificate issuer:       /CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
Certificate serial:       218B0EECCA6A561EADADCB4161484C14805719A7
Authority key identifier: 97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa
Signing time:             Tue 05 Mar 2024 18:11:54 +0000
ROA not before:           Tue 05 Mar 2024 18:06:54 +0000
ROA not after:            Tue 04 Mar 2025 18:11:54 +0000
asID:                     272942
IP address blocks:        45.191.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8b:0e:ec:ca:6a:56:1e:ad:ad:cb:41:61:48:4c:14:80:57:19:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1
        Validity
            Not Before: Mar  5 18:06:54 2024 GMT
            Not After : Mar  4 18:11:54 2025 GMT
        Subject: CN=5478CD17317C5702551200408BA390395E2E0E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c2:d5:6e:e2:f4:f2:9b:e5:0b:9b:86:77:c5:
                    90:45:c5:3c:d4:e8:cb:86:57:c1:a0:e0:09:86:5e:
                    95:0b:9a:e8:78:ad:80:c5:13:ae:c9:d5:d0:d2:8d:
                    2a:00:31:ca:68:ca:e6:6a:8e:d1:b9:75:97:ca:b0:
                    54:28:db:28:27:44:9d:27:2b:c8:3c:f3:34:99:fe:
                    85:82:bd:47:be:5e:54:7a:64:3f:b3:3d:c4:c3:0b:
                    e7:0c:0c:14:f6:f2:cd:e1:1e:b6:40:00:d1:e6:34:
                    a9:b4:10:47:92:fd:81:3a:3b:fb:21:c8:c5:50:3a:
                    a1:72:c9:d8:8f:9c:1d:e9:0f:39:92:a3:d8:7b:bb:
                    79:c0:d7:cb:a1:e2:1d:3a:ef:3b:fb:ab:0d:4b:65:
                    fa:12:98:99:b8:69:89:f7:62:41:bb:23:bf:46:c4:
                    f3:a8:7c:9c:45:98:b4:db:09:dd:6f:eb:3d:de:f6:
                    c0:8f:19:ac:e8:e3:79:53:0c:99:5d:dd:a8:fa:48:
                    83:4f:69:fa:65:c1:3a:de:e1:44:a3:67:d1:e7:de:
                    3b:26:b6:ed:1d:2b:33:ce:89:ad:71:fe:62:14:08:
                    fa:2f:9c:51:fb:e0:46:38:ce:a1:0c:10:8f:a4:c1:
                    65:f0:f4:5e:4d:f4:20:56:d7:eb:2f:99:37:b7:6c:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:CD:17:31:7C:57:02:55:12:00:40:8B:A3:90:39:5E:2E:0E:76
            X509v3 Authority Key Identifier:
                keyid:97:89:9A:48:49:F5:51:BB:C2:F4:F8:70:F0:EC:EA:5A:66:BB:B7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97899A4849F551BBC2F4F870F0ECEA5A66BBB7F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE08AA76EF7AE4EF47AB6CF56924DF970ABC1B40DFE374B032D05F6BEA50CFB/0/34352e3139312e37352e302f32342d3234203d3e20323732393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:42:1a:b8:28:20:5f:45:ea:4f:fe:1f:56:3d:5b:4b:b7:6d:
         87:2b:14:c9:8c:91:4d:31:ca:c0:59:61:51:15:2e:14:de:29:
         f9:f6:b1:4c:23:97:e3:82:b8:b7:e1:87:4a:a7:1f:62:6f:e1:
         78:88:cf:d2:49:8c:ec:8a:dd:24:ea:98:4e:89:0d:2f:29:48:
         8f:f5:e3:85:39:15:c6:66:98:73:d6:fc:62:11:f5:10:10:51:
         bd:33:67:2d:0f:f2:e8:3c:49:1b:fa:6a:08:65:1b:de:4f:eb:
         01:7a:1b:7a:e8:a3:9d:25:8c:8c:98:97:39:00:4a:ec:57:a1:
         90:fa:e9:a6:2c:0c:e3:96:1f:ec:f2:97:39:d5:0a:0d:cc:44:
         90:80:2f:97:72:95:99:8d:8c:a0:c1:50:61:48:14:30:80:59:
         bd:e6:57:1c:a9:90:4a:08:74:0c:53:32:62:15:23:59:75:bd:
         5e:26:d8:4d:9c:98:b4:92:6d:d3:16:c4:90:f7:36:97:b7:2c:
         4d:34:76:b0:fb:14:10:de:2d:f0:80:95:0b:e4:d1:d6:9e:c0:
         ed:f5:31:04:e5:d2:88:2d:1d:25:ca:7c:e4:d3:de:99:bd:f7:
         2b:5d:2a:93:ce:be:a9:3f:f9:1b:51:33:fe:30:da:81:03:b3:
         65:a6:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:09 2024 by rpki-client on console-ams.rpki-client.org