Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203232373234.roa
File:                     34352e3137382e33372e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          43R/cEImMXcw2rUpezKiejqH/mogG87oMFpxF9iY7Ms=
Subject key identifier:   10:CB:0F:BD:10:88:62:28:E2:0E:DE:A0:F6:5D:3B:A3:B1:91:1F:87
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       4DC46AD055C1E4C5FF54D6FA1ADBE4C7A5A07978
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203232373234.roa
Signing time:             Mon 09 Sep 2024 21:05:00 +0000
ROA not before:           Mon 09 Sep 2024 21:00:00 +0000
ROA not after:            Mon 08 Sep 2025 21:05:00 +0000
asID:                     22724
IP address blocks:        45.178.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c4:6a:d0:55:c1:e4:c5:ff:54:d6:fa:1a:db:e4:c7:a5:a0:79:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Sep  9 21:00:00 2024 GMT
            Not After : Sep  8 21:05:00 2025 GMT
        Subject: CN=10CB0FBD10886228E20EDEA0F65D3BA3B1911F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:94:d7:67:4a:fc:0e:22:72:e7:10:1e:3c:8b:
                    27:85:b7:a8:57:df:78:55:24:e3:25:b6:f1:b6:03:
                    06:89:2d:71:94:0f:e3:3a:a2:18:25:d7:bd:9f:d1:
                    40:0f:f2:fd:91:6c:fe:40:ec:6a:3e:05:25:ff:83:
                    a6:39:7f:32:02:f9:be:43:be:2c:aa:77:ec:8a:6a:
                    04:ae:e8:dc:bc:f7:98:af:44:be:17:cd:3a:e1:ab:
                    e5:0f:86:42:71:bc:ad:5f:aa:6c:8f:41:2e:ea:06:
                    1f:c9:a4:bb:9c:e9:1b:c9:66:c0:d4:75:e9:e1:21:
                    d8:35:a7:c4:af:42:61:67:aa:2f:24:1f:3f:25:c9:
                    a0:5a:26:86:f1:56:7b:ca:44:fb:ea:6e:55:2e:ff:
                    3c:e1:84:32:0a:ed:bc:cb:ef:99:6f:22:e1:0d:54:
                    13:28:c4:6a:c2:71:53:b2:9b:e4:ab:03:8b:53:7c:
                    2f:9d:87:b8:c6:0e:cc:fd:05:ff:f0:b3:04:68:97:
                    42:b5:1c:48:b6:75:b1:c7:34:86:32:b0:83:ea:80:
                    20:75:47:67:a3:54:bb:60:97:c3:7b:47:0f:5a:1a:
                    76:dc:ce:57:86:49:b6:cb:5b:4e:5f:fb:12:06:88:
                    0f:18:a7:ad:f6:97:d1:47:23:c5:3a:84:c4:7e:4d:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CB:0F:BD:10:88:62:28:E2:0E:DE:A0:F6:5D:3B:A3:B1:91:1F:87
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ce:7f:d9:3b:ad:a6:cf:23:ba:41:91:0d:2a:27:66:18:ce:
         c0:e2:e4:c1:75:56:d7:f2:5e:c0:d4:07:22:33:ee:cc:fa:03:
         9a:f0:eb:9b:3a:1c:ae:72:eb:aa:21:64:1b:1a:cb:94:00:45:
         48:0a:2d:ca:73:60:3e:0c:fe:8c:86:92:e9:30:13:66:73:6b:
         66:e6:0e:fc:0a:9c:28:84:c0:73:76:a3:a4:d3:e8:d1:94:8d:
         f3:ca:31:cd:1d:a2:ba:dc:13:48:68:02:9a:d3:f1:cf:19:d9:
         cb:4e:93:e7:dd:75:e2:87:3a:df:f6:41:27:36:a3:65:a3:9e:
         61:b7:38:98:58:21:b3:fc:eb:a8:3a:da:6c:db:03:5b:73:60:
         ca:8b:9b:e2:83:25:fc:54:a5:70:1b:19:18:99:aa:7d:dc:37:
         99:50:03:a5:dd:b1:ef:44:d9:45:16:dc:ad:82:36:aa:8d:a8:
         05:d3:18:20:e2:6e:65:06:7d:a5:2d:15:b2:d1:8e:ab:9c:32:
         88:d9:1e:87:50:4f:aa:45:d0:6b:d7:bb:ad:fd:02:5a:b2:e7:
         2e:6b:21:99:e8:29:f2:06:4e:e9:8b:8f:a8:38:6d:7a:2f:36:
         8c:c3:c8:8f:9c:c6:62:e3:bb:08:9f:62:05:b1:11:5a:a6:8f:
         80:5e:01:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org