Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139302e302f32342d3234203d3e203132363739.roa
File:                     34352e3137362e3139302e302f32342d3234203d3e203132363739.roa (raw, json)
Hash identifier:          hOLehI1BcUhotPNehkt+zuLZ1SrUu118sC0HrV+LeI8=
Subject key identifier:   5B:1E:73:76:EA:7B:46:78:C4:37:37:F2:2A:8C:C4:CF:94:35:C6:FD
Certificate issuer:       /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial:       2D4B2F565B5AE568B2AA07C6B2676E3F8B8A16DC
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139302e302f32342d3234203d3e203132363739.roa
Signing time:             Tue 05 Mar 2024 18:20:38 +0000
ROA not before:           Tue 05 Mar 2024 18:15:38 +0000
ROA not after:            Tue 04 Mar 2025 18:20:38 +0000
asID:                     12679
IP address blocks:        45.176.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4b:2f:56:5b:5a:e5:68:b2:aa:07:c6:b2:67:6e:3f:8b:8a:16:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
        Validity
            Not Before: Mar  5 18:15:38 2024 GMT
            Not After : Mar  4 18:20:38 2025 GMT
        Subject: CN=5B1E7376EA7B4678C43737F22A8CC4CF9435C6FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:80:e2:12:c3:26:6b:18:18:93:c9:84:2d:97:
                    d6:ff:78:59:9a:1c:88:c9:19:a8:6e:58:66:00:d1:
                    fa:95:eb:6a:8b:71:0c:76:fc:73:2b:cf:88:58:e7:
                    d9:24:60:2b:9a:a4:88:45:94:9f:37:6a:40:bb:81:
                    61:bc:13:76:af:f2:d2:80:62:58:9a:3c:dd:d1:8e:
                    86:6e:a7:97:6f:42:28:c0:3c:57:2f:07:e9:eb:fa:
                    6a:9c:e1:b7:f2:76:2e:ac:d5:b1:b4:98:ef:42:de:
                    d2:5a:eb:f2:0a:e3:11:75:c5:b3:6b:8d:ca:8c:66:
                    72:cb:71:2f:24:82:c9:12:98:26:4a:ea:76:31:2e:
                    b6:bd:42:d3:8d:e8:c9:5f:17:8c:5c:87:15:05:0d:
                    0e:55:b7:f3:30:41:73:e7:7a:23:ef:19:11:ce:da:
                    96:c5:41:6e:7c:77:1a:9b:c1:2b:84:f0:e8:11:77:
                    49:a9:9d:58:ad:87:eb:a6:8e:91:0d:e8:3c:f4:c6:
                    72:16:52:ce:7d:bc:fb:5d:31:3f:11:59:1c:b6:1e:
                    14:96:20:99:2e:43:74:50:09:f3:0f:f7:69:20:5e:
                    77:41:79:eb:be:7a:c1:71:24:e1:eb:7c:5a:fd:5d:
                    ac:0e:b5:44:15:f6:4d:ac:cb:08:f9:50:93:db:63:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1E:73:76:EA:7B:46:78:C4:37:37:F2:2A:8C:C4:CF:94:35:C6:FD
            X509v3 Authority Key Identifier:
                keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139302e302f32342d3234203d3e203132363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:0d:aa:da:76:6c:1f:4d:ad:85:17:88:04:4c:2d:4d:42:48:
         8c:86:f4:62:49:3a:9d:e3:ce:fc:0d:4a:70:20:b9:57:18:20:
         1d:d5:d9:99:a4:be:6e:49:1a:33:97:9e:5b:be:4d:2f:82:3c:
         36:ac:72:98:84:ff:d7:70:5c:58:44:c8:4c:94:40:a3:5e:f8:
         de:41:d5:30:06:fb:44:bd:50:49:35:73:3d:b1:8d:32:51:7e:
         e5:6f:be:34:f1:8d:e7:e4:2b:56:41:1d:92:a5:e6:4b:51:98:
         e7:a4:02:c0:b1:e7:4d:d7:ea:9e:b7:5e:30:83:f0:77:b0:38:
         68:a3:53:d2:73:9a:a2:c5:0e:15:4a:91:c7:ec:e4:8d:4d:26:
         8f:21:ba:f3:98:67:c3:3b:57:99:63:ad:f1:23:86:b1:68:19:
         44:51:64:a1:9a:83:77:eb:ba:84:9c:35:58:99:6e:db:35:76:
         5b:bf:a2:c4:1e:85:6f:b0:a8:da:d4:a6:11:82:64:ce:4b:64:
         07:78:e6:15:29:4e:d9:4b:2d:a2:39:4d:ba:34:a3:ce:13:45:
         da:44:cb:56:8b:23:d1:0a:0c:45:c1:1c:cc:fe:0e:c8:a3:fb:
         5f:a4:37:3d:43:db:fc:69:a5:f1:e5:4e:e2:f6:5c:0d:c6:98:
         de:9b:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:55:21 2024 by rpki-client on console-ams.rpki-client.org