Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa
File:                     34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa (raw, json)
Hash identifier:          cwmI37bUmIo/w77LeWmHI12cPicupE3H5wpZiM2fFuQ=
Subject key identifier:   32:08:96:EB:04:54:7A:D5:CC:17:EC:0C:38:35:3A:CB:9B:DC:02:37
Certificate issuer:       /CN=5EBCF17E06528C616B6957551981653EE0748D3C
Certificate serial:       0DBEAE1ABE1A9369FF3F07D7D684D0B0F0EBCB89
Authority key identifier: 5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa
Signing time:             Tue 05 Mar 2024 18:18:48 +0000
ROA not before:           Tue 05 Mar 2024 18:13:48 +0000
ROA not after:            Tue 04 Mar 2025 18:18:48 +0000
asID:                     267854
IP address blocks:        45.176.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:be:ae:1a:be:1a:93:69:ff:3f:07:d7:d6:84:d0:b0:f0:eb:cb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EBCF17E06528C616B6957551981653EE0748D3C
        Validity
            Not Before: Mar  5 18:13:48 2024 GMT
            Not After : Mar  4 18:18:48 2025 GMT
        Subject: CN=320896EB04547AD5CC17EC0C38353ACB9BDC0237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d3:e6:e2:a2:92:04:37:72:d9:5d:4a:83:11:
                    79:ef:92:47:64:a3:5e:8c:80:d9:60:f5:79:d6:0e:
                    51:08:ae:bc:66:60:c6:8c:47:43:c3:f5:17:5b:ba:
                    04:61:65:e8:6f:72:91:ee:55:fa:a5:36:c1:8f:73:
                    03:40:45:fd:46:47:95:3c:fb:16:6e:da:f9:cc:39:
                    99:3c:f0:7d:38:34:45:d6:bc:3c:8a:75:a9:18:eb:
                    f3:86:2b:89:0c:c5:1d:35:3b:e9:e5:cd:ed:cf:56:
                    f9:83:48:ea:64:2f:03:76:66:1a:97:a9:c3:61:0b:
                    af:ca:0b:cc:80:dc:ca:5c:5c:65:63:c6:31:6e:85:
                    f5:d8:8a:80:39:54:4f:23:69:3c:77:c7:a2:45:34:
                    90:26:62:d4:c5:12:c5:64:94:ed:cb:3e:99:c2:98:
                    0b:a5:53:a4:d4:9c:d8:11:f1:39:2a:8b:d8:22:6b:
                    d5:9b:84:3f:d0:4d:89:57:17:8b:66:de:1c:6b:d7:
                    41:aa:28:ce:7c:c4:78:ca:80:b6:b9:3a:df:59:69:
                    c5:87:08:6c:28:d4:16:62:cd:36:d7:cf:c9:19:e7:
                    2f:9d:38:8b:43:c2:aa:3c:58:90:aa:82:9b:e9:ff:
                    b8:f2:5d:f0:fb:b4:97:4d:99:46:1d:7f:8f:b4:de:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:08:96:EB:04:54:7A:D5:CC:17:EC:0C:38:35:3A:CB:9B:DC:02:37
            X509v3 Authority Key Identifier:
                keyid:5E:BC:F1:7E:06:52:8C:61:6B:69:57:55:19:81:65:3E:E0:74:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/5EBCF17E06528C616B6957551981653EE0748D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EBCF17E06528C616B6957551981653EE0748D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACEE0E37FDA187B0FC0FA712921B8CEA91F2C55BBCA0777ACE51DE6309CC5CB7/0/34352e3137362e3139342e302f32332d3234203d3e20323637383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:48:d9:0a:41:95:84:df:8a:cd:32:d5:4b:d5:e0:a9:72:1c:
         7b:b5:ce:7b:8b:58:14:1b:76:90:37:c0:4c:4d:c7:cf:f6:5b:
         21:0d:15:54:e6:b1:5c:bc:1a:16:7d:0d:2c:6f:93:2e:f3:57:
         8d:ba:24:f8:98:91:86:10:46:a2:8a:13:e2:3e:d2:aa:9e:ef:
         01:69:3c:5a:2e:d7:b1:90:50:ed:fa:31:c8:d2:ef:e9:9c:6a:
         71:b9:87:aa:06:c4:06:c3:e2:86:54:78:20:83:1e:22:3f:58:
         80:0c:e8:67:27:f0:42:4a:8c:d3:29:29:7e:25:c5:85:3e:c3:
         ce:40:fa:a9:b9:54:32:89:84:26:b0:90:de:96:84:00:bb:6e:
         6c:68:06:09:8e:78:85:6b:d9:9f:2b:89:77:e7:7c:89:56:c7:
         fc:3b:35:7e:c0:2a:2f:24:07:71:63:aa:90:df:1a:8c:8a:5a:
         82:7e:47:82:dc:51:18:8d:f5:e2:37:1e:1a:7a:e8:44:70:b0:
         f6:96:4b:31:37:18:f0:e7:dd:99:30:32:1b:1a:a7:59:51:c4:
         47:ed:a8:80:e3:56:86:49:f3:51:cc:6b:ce:fd:98:7c:fe:55:
         c4:df:b8:00:7b:f5:92:f4:ef:5e:99:76:31:1d:6f:3d:08:cc:
         f2:57:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org