Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32342d3234203d3e20323637373938.roa
File:                     34352e3137332e31362e302f32342d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          8jxAkzZTMwS4kP7Y9gvrZf0KCCgi8532w1RoVprtk1k=
Subject key identifier:   74:E7:BC:6C:7F:CF:90:F4:60:F2:98:90:B8:68:7B:38:C8:B8:10:F6
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       2C1FA3E441B777A5EB62D00CBEE6E9F086850B1E
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32342d3234203d3e20323637373938.roa
Signing time:             Tue 05 Mar 2024 18:14:12 +0000
ROA not before:           Tue 05 Mar 2024 18:09:12 +0000
ROA not after:            Tue 04 Mar 2025 18:14:12 +0000
asID:                     267798
IP address blocks:        45.173.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1f:a3:e4:41:b7:77:a5:eb:62:d0:0c:be:e6:e9:f0:86:85:0b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Mar  5 18:09:12 2024 GMT
            Not After : Mar  4 18:14:12 2025 GMT
        Subject: CN=74E7BC6C7FCF90F460F29890B8687B38C8B810F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:17:84:32:df:b8:a0:5b:81:6c:f1:e4:64:6a:
                    9a:ec:9c:98:2f:c2:32:56:1d:37:4e:94:15:4f:97:
                    a5:04:63:e0:ce:11:5c:80:66:a3:4d:78:6d:08:d4:
                    d0:34:8f:a6:3e:a4:09:79:e0:4a:e4:ba:4f:e3:2c:
                    0e:68:a5:96:02:fe:f0:21:27:ae:d2:0e:e2:1f:f2:
                    2e:db:26:32:46:40:3c:9d:8f:f6:3a:e2:f4:e6:22:
                    ce:d5:cb:66:f7:7e:61:26:3e:29:5e:38:c3:94:de:
                    89:61:05:c4:db:f7:55:7f:a0:ab:ba:f1:63:04:3e:
                    66:03:5c:43:35:f9:70:53:63:17:8f:23:f8:30:c1:
                    11:ac:89:5d:52:2d:29:f5:8d:7e:2a:58:91:53:68:
                    bf:99:bf:7e:a9:b1:52:fb:a9:60:73:ac:40:fb:32:
                    93:bc:5a:62:15:89:d0:14:00:95:f1:3f:b8:83:ef:
                    1f:6b:95:be:7f:91:14:98:fa:bc:11:eb:12:3f:a5:
                    da:24:eb:32:6b:78:c1:d7:54:76:c5:70:83:28:9b:
                    1f:87:c2:af:7b:36:65:96:e4:ef:d3:df:22:ee:4d:
                    f5:87:62:90:8e:35:4b:12:a3:bb:4a:02:cd:dc:33:
                    e0:a1:f3:47:dc:b6:70:2e:8c:5c:ba:cb:93:0a:48:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E7:BC:6C:7F:CF:90:F4:60:F2:98:90:B8:68:7B:38:C8:B8:10:F6
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31362e302f32342d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:e7:51:22:60:f1:ae:1f:07:50:f7:7a:66:12:2a:8f:71:0b:
         dd:a6:ae:fa:3a:23:18:f1:88:5e:28:23:6e:0d:7c:a4:01:44:
         35:80:8c:77:d8:38:68:47:bf:f4:c8:6c:ee:22:87:e9:7b:67:
         d7:9f:70:98:48:5b:5b:79:92:6f:58:68:54:d9:9a:be:6d:e5:
         d8:29:14:df:b7:08:d1:59:95:57:5a:00:4d:e2:56:fb:3f:8e:
         76:b8:ec:db:4a:ad:f4:fc:e4:83:d0:4d:5d:c3:7b:49:e2:0d:
         43:9d:c4:9a:9e:24:74:82:9d:c8:e3:0f:b6:20:d9:fc:28:fc:
         4d:86:aa:a0:94:a7:17:85:fe:13:b3:fc:28:38:64:e4:f8:26:
         83:13:36:56:2f:bf:51:98:53:4c:b6:c8:57:9b:c9:a1:c5:2d:
         c2:1b:42:eb:c9:29:fc:8d:a7:08:de:d2:0b:60:f0:fa:61:f1:
         32:d0:22:16:78:1e:91:5c:ce:72:93:4b:e2:59:6c:cf:f0:ff:
         3f:6c:c2:34:78:12:0d:59:07:b5:57:e8:bb:17:24:e5:83:b5:
         86:18:94:68:c3:55:2a:e3:ba:59:9f:16:bc:3b:06:cd:2d:9a:
         eb:11:d8:39:b0:71:de:7a:7f:a0:84:ca:b4:67:86:2f:2e:b3:
         5b:0b:a5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:44 2024 by rpki-client on console-fra.rpki-client.org