Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203233343730.roa
File:                     34352e3137362e3139312e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          Ov2hmS0r+6qn2OifzGPp+oHnTlti++Kpn5AnFeVYGVs=
Subject key identifier:   C1:22:D7:B5:BE:DD:AD:9A:79:ED:FC:E5:69:83:B6:41:24:68:BC:ED
Certificate issuer:       /CN=94E9005D15C15058534566156E00BB03244C911D
Certificate serial:       24437654049FFE5F46BC2697B19FCC6F13E0CB7B
Authority key identifier: 94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203233343730.roa
Signing time:             Fri 26 Apr 2024 18:25:00 +0000
ROA not before:           Fri 26 Apr 2024 18:20:00 +0000
ROA not after:            Fri 25 Apr 2025 18:25:00 +0000
asID:                     23470
IP address blocks:        45.176.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:43:76:54:04:9f:fe:5f:46:bc:26:97:b1:9f:cc:6f:13:e0:cb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94E9005D15C15058534566156E00BB03244C911D
        Validity
            Not Before: Apr 26 18:20:00 2024 GMT
            Not After : Apr 25 18:25:00 2025 GMT
        Subject: CN=C122D7B5BEDDAD9A79EDFCE56983B6412468BCED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:ae:6e:45:2f:bc:35:84:66:28:7f:e2:ea:
                    da:72:73:ec:02:d2:9c:93:38:3e:34:0b:f4:24:2d:
                    1b:1e:44:cd:78:81:79:b0:a1:1b:10:03:25:aa:ef:
                    63:42:6f:77:48:30:5b:a7:97:dc:dc:74:5c:71:ce:
                    ab:8f:46:5b:ac:b6:79:58:8a:16:5a:d4:7c:13:2f:
                    e3:c7:a4:af:70:26:5e:d6:44:31:e2:46:4d:05:f1:
                    78:0c:0e:aa:7d:ea:ef:c5:5b:76:52:25:14:c3:a1:
                    55:9a:3f:1d:cc:7b:2b:36:0e:62:4e:dc:83:d1:f5:
                    b8:83:10:b7:2d:2b:5a:7d:08:11:70:d4:85:f0:37:
                    d0:f9:cd:dd:65:d7:91:80:ec:51:cd:8f:9f:33:53:
                    11:41:85:ac:8e:2e:9a:44:22:84:50:46:9c:b7:7d:
                    db:2c:ce:c7:4a:63:6c:71:63:55:56:e3:96:71:3d:
                    ab:dd:af:2f:57:8d:41:50:cb:d2:6f:0f:91:ee:ee:
                    c4:7d:5a:4d:b7:1a:07:00:61:9b:74:de:48:99:35:
                    66:b6:82:99:58:cb:61:f3:63:90:82:37:8c:28:f6:
                    1a:73:74:3b:c3:91:07:e9:ce:36:37:5b:6b:54:ee:
                    60:73:3c:62:a8:6f:51:36:9f:f1:36:66:cb:87:f9:
                    de:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:22:D7:B5:BE:DD:AD:9A:79:ED:FC:E5:69:83:B6:41:24:68:BC:ED
            X509v3 Authority Key Identifier:
                keyid:94:E9:00:5D:15:C1:50:58:53:45:66:15:6E:00:BB:03:24:4C:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/94E9005D15C15058534566156E00BB03244C911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94E9005D15C15058534566156E00BB03244C911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B03E0A1A0A44457B89FBD807DFD3AD6A10A42D15BE955EF769046F44AA8A412B/0/34352e3137362e3139312e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:09:f5:19:ed:e1:ef:26:88:cd:04:03:6d:45:38:9d:be:
         39:ce:d9:1c:94:20:84:fc:07:ae:2e:c9:9c:c1:d0:77:11:dc:
         3e:30:a7:c1:07:c6:ba:b1:a6:7d:c7:35:cc:3c:1d:54:8e:43:
         7f:ed:59:51:1f:f6:48:9e:54:7f:fa:6c:fa:ea:36:2a:0e:47:
         60:1c:5a:02:70:0d:78:af:84:d0:0e:5d:b8:66:7d:ca:27:f5:
         f8:f9:c6:c5:b0:c2:f8:05:7e:e8:1f:8a:02:e0:bd:e7:c7:c6:
         f0:3e:74:74:d6:3b:c6:36:26:5b:00:b6:68:19:49:59:b5:77:
         34:d5:17:ae:38:aa:05:eb:35:fb:21:6a:99:47:39:78:47:c6:
         07:de:dc:9e:35:7c:1a:9d:e7:d0:6b:d1:15:8d:6d:b0:75:82:
         0d:76:3a:26:fd:b5:23:8b:b2:f9:27:15:38:83:69:38:74:38:
         70:6c:03:dd:7b:f0:3b:12:df:20:5f:66:b8:1f:41:33:9c:fb:
         2c:f9:07:67:72:2e:1f:ce:9b:e2:4f:fc:a3:e1:f0:e4:ea:43:
         4b:aa:36:cc:27:9e:32:c6:bb:9f:bb:29:dd:e1:96:03:d3:68:
         06:3b:84:d6:5a:93:38:2c:1b:25:3f:92:62:f1:b4:a6:fd:13:
         00:25:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org