Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138382e302f32342d3234203d3e20323731393237.roa
File:                     34352e3137362e3138382e302f32342d3234203d3e20323731393237.roa (raw, json)
Hash identifier:          qJCJioZOBN/x62ug3X/4ZuhCEj+XpfqWBaqlfwAWaoM=
Subject key identifier:   5B:30:34:C9:A6:86:6B:15:6B:5A:C3:CF:4C:3D:5A:9E:CF:07:73:D2
Certificate issuer:       /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial:       634C103F70971F35A94AE5EE1DFBB04A7FA81E47
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138382e302f32342d3234203d3e20323731393237.roa
Signing time:             Tue 05 Mar 2024 18:20:37 +0000
ROA not before:           Tue 05 Mar 2024 18:15:37 +0000
ROA not after:            Tue 04 Mar 2025 18:20:37 +0000
asID:                     271927
IP address blocks:        45.176.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Apr 2024 10:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4c:10:3f:70:97:1f:35:a9:4a:e5:ee:1d:fb:b0:4a:7f:a8:1e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
        Validity
            Not Before: Mar  5 18:15:37 2024 GMT
            Not After : Mar  4 18:20:37 2025 GMT
        Subject: CN=5B3034C9A6866B156B5AC3CF4C3D5A9ECF0773D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:db:d4:f6:bd:99:5c:50:01:c4:0b:d9:f4:
                    fa:c3:c3:91:c9:74:08:9a:cd:7d:e9:aa:d3:aa:7c:
                    eb:7f:fa:8d:77:5d:6b:4f:9d:58:f2:85:17:93:52:
                    ac:35:a9:01:81:77:a4:15:2c:47:e2:f6:ac:f3:54:
                    5c:65:4c:49:0c:77:d7:af:4e:75:8f:bd:90:e2:3f:
                    82:d7:2f:bf:e9:36:ed:e9:f5:2b:1c:bd:35:b0:37:
                    2b:c0:a5:55:53:66:34:1f:7b:ee:57:27:fe:6f:7d:
                    d8:78:5c:6e:e4:3a:05:9c:24:98:d8:41:c1:4a:c2:
                    56:7f:d6:95:24:4c:ba:d2:1d:fa:6e:f2:1b:92:e9:
                    83:ab:da:eb:c8:1c:21:1d:ce:dc:94:10:d1:82:63:
                    24:22:46:d4:38:3d:3b:2c:b5:78:e4:5e:ef:f2:ad:
                    84:3a:5a:86:60:89:ac:8b:14:1f:75:e1:3e:78:1e:
                    49:a4:c4:5f:f4:53:23:fd:e1:16:6c:22:fb:a3:0d:
                    be:ca:66:2b:0d:b1:37:cc:52:7c:db:ec:34:eb:4f:
                    de:81:84:78:c8:18:fc:94:9d:ae:f6:81:2e:4d:72:
                    c5:9d:31:4b:f7:0b:d4:ea:48:ff:9f:89:f7:72:02:
                    d2:30:5d:4e:80:12:14:40:bd:2f:9f:02:41:8d:69:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:30:34:C9:A6:86:6B:15:6B:5A:C3:CF:4C:3D:5A:9E:CF:07:73:D2
            X509v3 Authority Key Identifier:
                keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3138382e302f32342d3234203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:6a:89:f8:62:73:b4:ac:e4:47:df:0d:e8:7e:e5:04:ad:
         65:54:8f:df:68:2c:cb:2d:d2:d3:c7:f9:b5:24:3f:c0:f3:04:
         bf:c3:70:bc:7d:b5:56:3a:58:7b:69:b3:34:ff:56:93:64:13:
         66:06:b6:47:eb:62:e6:f8:68:02:61:5e:0e:7a:d6:3c:b3:f3:
         25:40:cc:4a:78:26:4d:70:c9:da:f0:08:0b:0f:37:a8:2d:7b:
         9a:86:17:57:10:de:e5:2b:5e:71:92:4c:1a:d8:ac:1c:d9:0f:
         70:f3:40:35:f5:8b:57:25:5a:4f:3d:78:5e:af:35:8e:55:12:
         40:26:b6:8f:db:cd:41:6d:b0:4d:4d:cf:42:b3:49:ea:37:2f:
         cd:2c:ed:a8:95:a0:71:22:4f:1d:cc:52:bd:b8:65:4f:bf:1b:
         19:90:42:a8:b6:53:28:59:a8:37:d8:1f:6a:58:1d:c4:ae:21:
         65:73:f8:70:01:f5:6a:72:22:d1:d6:55:9b:a1:63:c6:d7:97:
         7a:41:ae:78:90:6c:af:cf:5e:46:90:1b:0c:38:cb:20:0b:60:
         f9:42:e9:3e:9f:0c:c8:04:30:06:55:a6:53:27:11:64:e9:86:
         99:4a:55:85:6e:97:8f:81:7f:ab:7b:8c:e9:80:5d:49:2c:cc:
         46:4e:38:34
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUY0wQP3CXHzWpSuXuHfuwSn+oHkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTRFOTAwNUQxNUMxNTA1ODUzNDU2NjE1NkUwMEJCMDMy
NDRDOTExRDAeFw0yNDAzMDUxODE1MzdaFw0yNTAzMDQxODIwMzdaMDMxMTAvBgNV
BAMTKDVCMzAzNEM5QTY4NjZCMTU2QjVBQzNDRjRDM0Q1QTlFQ0YwNzczRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rNvU9r2ZXFABxAvZ9PrDw5HJ
dAiazX3pqtOqfOt/+o13XWtPnVjyhReTUqw1qQGBd6QVLEfi9qzzVFxlTEkMd9ev
TnWPvZDiP4LXL7/pNu3p9SscvTWwNyvApVVTZjQfe+5XJ/5vfdh4XG7kOgWcJJjY
QcFKwlZ/1pUkTLrSHfpu8huS6YOr2uvIHCEdztyUENGCYyQiRtQ4PTsstXjkXu/y
rYQ6WoZgiayLFB914T54HkmkxF/0UyP94RZsIvujDb7KZisNsTfMUnzb7DTrT96B
hHjIGPyUna72gS5NcsWdMUv3C9TqSP+fifdyAtIwXU6AEhRAvS+fAkGNadupAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUWzA0yaaGaxVrWsPPTD1ans8Hc9IwHwYDVR0j
BBgwFoAUlOkAXRXBUFhTRWYVbgC7AyRMkR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDNFMEExQTBBNDQ0NTdCODlGQkQ4MDdERkQzQUQ2QTEw
QTQyRDE1QkU5NTVFRjc2OTA0NkY0NEFBOEE0MTJCLzAvOTRFOTAwNUQxNUMxNTA1
ODUzNDU2NjE1NkUwMEJCMDMyNDRDOTExRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NEU5MDA1RDE1QzE1MDU4NTM0
NTY2MTU2RTAwQkIwMzI0NEM5MTFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjAzRTBBMUEwQTQ0NDU3Qjg5RkJEODA3REZEM0FENkExMEE0MkQxNUJF
OTU1RUY3NjkwNDZGNDRBQThBNDEyQi8wLzM0MzUyZTMxMzczNjJlMzEzODM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbC8
MA0GCSqGSIb3DQEBCwUAA4IBAQBo2GqJ+GJztKzkR98N6H7lBK1lVI/faCzLLdLT
x/m1JD/A8wS/w3C8fbVWOlh7abM0/1aTZBNmBrZH62Lm+GgCYV4OetY8s/MlQMxK
eCZNcMna8AgLDzeoLXuahhdXEN7lK15xkkwa2Kwc2Q9w80A19YtXJVpPPXherzWO
VRJAJraP281BbbBNTc9Cs0nqNy/NLO2olaBxIk8dzFK9uGVPvxsZkEKotlMoWag3
2B9qWB3EriFlc/hwAfVqciLR1lWboWPG15d6Qa54kGyvz15GkBsMOMsgC2D5Quk+
nwzIBDAGVaZTJxFk6YaZSlWFbpePgX+re4zpgF1JLMxGTjg0
-----END CERTIFICATE-----
Generated at Thu Apr 25 10:23:13 2024 by rpki-client on console-fra.rpki-client.org