Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139302e302f32342d3234203d3e203132363739.roa
File:                     34352e3137362e3139302e302f32342d3234203d3e203132363739.roa (raw, json)
Hash identifier:          QFBFuA7TC/a9CBPgMnT8XLAq6ATyIqoXP0tEGDCq6O8=
Subject key identifier:   FE:23:90:0B:52:F2:70:6B:1B:C3:8F:1C:38:10:BA:80:76:00:B7:30
Certificate issuer:       /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial:       26D30EC33EE7B7F4901E8B9F01365029D148873C
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139302e302f32342d3234203d3e203132363739.roa
Signing time:             Tue 04 Feb 2025 18:41:01 +0000
ROA not before:           Tue 04 Feb 2025 18:36:01 +0000
ROA not after:            Tue 03 Feb 2026 18:41:01 +0000
asID:                     12679
IP address blocks:        45.176.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:0e:c3:3e:e7:b7:f4:90:1e:8b:9f:01:36:50:29:d1:48:87:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
        Validity
            Not Before: Feb  4 18:36:01 2025 GMT
            Not After : Feb  3 18:41:01 2026 GMT
        Subject: CN=FE23900B52F2706B1BC38F1C3810BA807600B730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:1d:74:2f:59:fa:f0:16:f4:be:a1:a7:21:
                    4e:10:81:53:da:aa:fb:08:b4:a3:ee:7e:89:4a:bc:
                    22:c9:8b:8d:8f:d3:a1:32:31:da:8f:e7:df:13:c2:
                    62:ba:f1:48:98:20:c5:f6:92:d6:20:c7:b8:7f:01:
                    41:bc:49:0b:1c:50:01:80:8a:8c:48:c9:f3:f3:8a:
                    66:7b:1a:68:84:3b:7e:3f:7d:a5:a5:85:56:71:98:
                    a7:46:41:99:12:9c:34:e9:1f:ab:b0:55:d3:74:81:
                    54:53:b5:88:4e:62:c5:9d:58:db:0e:d3:91:21:69:
                    0a:5e:dd:a8:a3:9d:b3:ea:34:8b:98:94:5e:8e:d3:
                    0d:5c:89:e0:f1:47:22:dd:ec:5c:71:67:1c:32:db:
                    be:60:4f:ff:03:ed:c4:48:0b:08:57:6c:8e:1e:fd:
                    49:3d:2e:23:91:92:4b:80:5c:73:89:c4:19:85:97:
                    39:77:f0:16:e8:84:6c:d0:9e:ed:82:fe:d5:9a:99:
                    6a:fd:d8:27:bc:18:d3:ea:39:17:e4:33:b0:e7:ba:
                    25:b7:64:f5:ac:ce:0e:fd:80:dd:da:74:15:6b:a9:
                    d3:89:3a:6e:fb:5c:06:3d:34:8e:e4:bb:25:b2:43:
                    0b:4a:81:4e:cf:b8:b1:7c:db:c8:2e:eb:e5:76:0d:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:23:90:0B:52:F2:70:6B:1B:C3:8F:1C:38:10:BA:80:76:00:B7:30
            X509v3 Authority Key Identifier:
                keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139302e302f32342d3234203d3e203132363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:c2:6d:80:bb:69:39:a4:87:48:a8:7e:fd:ea:f1:e7:11:
         99:f0:d5:63:6b:61:41:29:69:c2:6b:84:c8:9f:04:12:dc:b9:
         35:08:25:d7:81:56:0c:2b:73:3c:85:11:92:f4:88:dc:f1:f4:
         0f:64:b0:cc:8f:16:a8:77:93:1e:a3:de:2c:32:1b:f5:9f:16:
         7b:87:0e:b3:fd:45:92:3d:45:8a:ad:80:da:5c:81:7f:3e:86:
         44:14:f1:96:95:bb:22:10:cd:9c:7d:db:66:10:0d:03:e2:f5:
         8a:6b:93:10:f3:9e:a2:02:62:c6:a7:39:4e:0a:f8:53:0e:16:
         bb:d1:c3:18:47:75:a2:b0:e0:c4:61:8d:d2:9e:dd:ba:95:32:
         1e:79:28:92:11:26:0a:44:07:6f:c9:c3:d0:3c:69:2e:ca:5b:
         d5:dc:75:69:38:00:b2:36:54:0b:4b:21:d1:e4:2d:b9:0a:4e:
         9f:6c:3a:38:5f:62:f5:f5:c3:15:7f:63:f1:dd:af:e9:d2:85:
         4d:97:70:eb:b8:ea:19:07:fe:cd:db:12:25:d0:75:aa:ca:55:
         86:cc:b7:44:bd:27:e3:1d:15:5d:29:0c:92:8b:7d:c8:b3:10:
         eb:a5:a6:d3:13:1f:75:72:6a:d7:ce:cc:17:95:61:0d:af:38:
         d4:1a:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:51:42 2025 by rpki-client