Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203233343837.roa
File:                     34352e3137382e33372e302f32342d3234203d3e203233343837.roa (raw, json)
Hash identifier:          a3A/zzIQ4O6hxodArGpShp0EpTNBYmZcbVd/A82ZrKI=
Subject key identifier:   2C:54:1B:86:65:32:2A:43:29:DF:C5:7D:EE:70:87:AB:30:66:68:7B
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       626412CF98B3A0ED939B91FA6A29E897665023C9
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203233343837.roa
Signing time:             Tue 05 Mar 2024 18:14:18 +0000
ROA not before:           Tue 05 Mar 2024 18:09:18 +0000
ROA not after:            Tue 04 Mar 2025 18:14:18 +0000
asID:                     23487
IP address blocks:        45.178.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:64:12:cf:98:b3:a0:ed:93:9b:91:fa:6a:29:e8:97:66:50:23:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Mar  5 18:09:18 2024 GMT
            Not After : Mar  4 18:14:18 2025 GMT
        Subject: CN=2C541B8665322A4329DFC57DEE7087AB3066687B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:ac:ac:8c:09:34:4d:16:42:1c:88:aa:97:
                    e9:d1:f7:51:e0:59:7a:d7:aa:f6:da:27:1c:c4:04:
                    7d:45:bf:a9:13:ce:ca:4b:6b:1c:fd:28:1d:2a:29:
                    de:c8:36:ac:41:ad:ba:1e:19:c1:2c:06:ea:88:99:
                    99:31:c4:ee:0c:41:0d:d7:32:c9:5d:af:fd:ba:94:
                    ed:a7:44:ef:3c:4a:4f:7a:84:92:0c:5b:45:8c:0f:
                    46:9b:6c:b2:4e:94:77:a6:ef:c9:4b:0f:c3:d2:e0:
                    75:17:13:ab:75:de:63:31:1f:80:15:ad:c2:5b:35:
                    06:65:5b:a1:1a:22:33:1b:5f:d1:5f:86:c2:6e:fc:
                    a5:64:71:55:2b:5b:94:68:3f:58:af:c0:9b:d1:9b:
                    ba:49:d4:5c:e5:ad:e3:e7:07:0e:b8:e8:77:01:a9:
                    21:31:1e:4e:3a:99:e7:7e:84:c4:63:e7:76:a7:f3:
                    85:48:5c:95:46:bd:9e:f0:55:cd:14:f9:44:65:03:
                    19:9b:07:80:a6:a7:a3:63:ae:cd:c6:7f:e4:f4:25:
                    79:c9:8a:3c:05:77:38:d8:e4:5b:30:6b:6c:13:24:
                    18:be:0a:ce:c0:9c:81:d7:f8:07:5c:b5:12:28:14:
                    af:0b:91:fa:80:c7:a2:2e:88:10:58:ea:17:49:67:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:54:1B:86:65:32:2A:43:29:DF:C5:7D:EE:70:87:AB:30:66:68:7B
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33372e302f32342d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:70:49:9f:ab:97:a6:f8:c2:b7:da:0e:3a:1f:ce:c9:0b:2a:
         77:6c:d2:58:3b:89:e5:91:7e:19:19:12:1d:01:ba:05:8c:04:
         32:f4:00:1c:08:75:27:a7:1f:43:8d:24:41:46:82:84:9e:a0:
         c5:c6:88:fa:b8:1b:d9:e1:80:9c:d2:85:41:d9:b5:0f:d7:3c:
         26:40:2b:22:a9:8b:45:72:a4:c2:d8:83:fe:e3:5b:30:97:0e:
         62:19:12:63:a3:e8:87:a6:ed:48:17:c2:e6:6a:44:12:39:86:
         51:ef:88:e4:20:59:ab:7c:eb:38:cf:28:c3:e7:0a:80:97:95:
         b6:d1:f2:a2:bc:ab:dc:ad:d5:ac:b2:56:a6:ff:32:5d:9c:b6:
         ea:83:49:34:73:d8:ee:b2:bd:b4:9f:c9:40:6c:3f:20:3a:85:
         23:3d:0b:c7:a2:6f:52:17:2a:17:72:67:1a:be:36:c9:b1:23:
         e6:45:9c:c3:aa:07:60:6f:f6:fa:37:24:02:a1:9d:29:0c:e3:
         53:25:d6:a8:f1:9b:95:fd:b5:88:30:f8:4b:39:3c:0e:0a:ab:
         38:d5:f9:7c:d6:30:36:96:89:a5:18:11:15:de:58:ce:6b:76:
         97:92:04:f6:10:7d:4b:22:c7:c9:19:33:e0:ac:32:13:4c:04:
         5d:ba:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 09:50:50 2024 by rpki-client on console-fra.rpki-client.org