Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33382e302f32342d3234203d3e203233343837.roa
File:                     34352e3137382e33382e302f32342d3234203d3e203233343837.roa (raw, json)
Hash identifier:          WhHxIc7viTn5fgMt3AxLBFYiugX/9ue0SkqKfah4wgw=
Subject key identifier:   5E:5B:23:EF:96:7F:86:77:AB:45:E2:69:17:BA:5F:DF:82:A9:2F:A5
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       3258548ACBDB324AD41D1907CF4A76862AAA37C5
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33382e302f32342d3234203d3e203233343837.roa
Signing time:             Tue 05 Mar 2024 18:14:17 +0000
ROA not before:           Tue 05 Mar 2024 18:09:17 +0000
ROA not after:            Tue 04 Mar 2025 18:14:17 +0000
asID:                     23487
IP address blocks:        45.178.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:58:54:8a:cb:db:32:4a:d4:1d:19:07:cf:4a:76:86:2a:aa:37:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Mar  5 18:09:17 2024 GMT
            Not After : Mar  4 18:14:17 2025 GMT
        Subject: CN=5E5B23EF967F8677AB45E26917BA5FDF82A92FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:c1:90:89:8e:77:90:0c:9f:10:65:88:94:
                    d8:54:de:05:45:37:79:75:da:41:9a:c8:03:32:bc:
                    19:13:aa:b5:6d:93:f7:aa:32:c5:85:b3:d2:39:8e:
                    8d:77:55:93:d3:c3:21:20:c2:7b:c6:b0:81:92:4c:
                    f4:02:f1:b7:85:6f:30:9a:ec:00:d0:0d:3d:a7:b3:
                    18:ff:16:e7:41:d1:21:fc:8f:17:35:2b:08:a7:51:
                    f3:aa:f0:7b:4e:4e:78:ce:83:0c:dd:69:6b:3c:f4:
                    2a:47:92:b2:3c:0c:cd:12:e0:61:1c:e4:52:c6:a7:
                    fb:b4:bb:fd:b6:61:92:8d:79:41:c4:1d:e8:2e:ba:
                    48:34:bb:16:97:b4:e1:99:cc:32:66:c9:8d:54:ee:
                    d9:da:d8:d9:b3:ff:5b:b7:ee:6a:d0:ab:46:6e:ae:
                    23:15:42:98:3e:ad:5e:1a:a8:2a:cc:f3:0c:1d:bc:
                    e4:0f:70:27:18:ce:70:2f:40:2f:54:fb:22:d8:98:
                    db:93:eb:09:41:f8:7c:cb:ef:9c:a5:20:67:99:58:
                    8d:03:1f:ca:28:58:f3:ec:9c:7c:ea:03:0d:e0:79:
                    aa:eb:e3:db:2b:ad:e1:4f:74:b0:86:02:eb:91:53:
                    fb:89:08:db:93:5a:6d:18:a9:b2:b8:49:0d:92:ad:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5B:23:EF:96:7F:86:77:AB:45:E2:69:17:BA:5F:DF:82:A9:2F:A5
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33382e302f32342d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:36:ee:0e:d5:65:30:f0:ff:76:30:64:2b:39:8e:8d:49:ac:
         2e:bd:ea:78:1d:50:1d:b4:1e:b8:94:1d:cf:6f:75:11:a4:f6:
         54:f2:86:22:ca:15:d2:e9:55:29:12:1f:65:b3:a1:64:1c:67:
         45:34:04:28:cb:1a:67:71:58:f2:8d:b1:38:73:9f:7b:9f:d7:
         ff:ed:37:c9:92:b5:b1:95:29:fc:99:b9:24:39:8f:8a:2b:97:
         bb:b6:65:45:a7:e9:fb:85:fc:46:e8:f5:0e:e3:a6:7a:dd:e0:
         51:72:a7:2d:83:a7:9d:8d:f0:f0:47:5c:0d:db:10:b3:4f:12:
         dc:ab:4e:49:59:43:ac:7b:f7:44:4e:f7:6e:82:eb:ec:e0:bd:
         d4:13:88:4e:aa:27:0d:3d:50:e3:84:7a:c8:2f:2c:7a:1c:b2:
         61:2d:15:11:f5:45:5e:4c:83:f2:30:d2:fd:dc:8b:47:d4:a2:
         5f:20:bc:fe:f5:cb:33:65:42:d4:69:de:44:42:d1:e3:5c:55:
         b9:51:9c:e5:9e:cc:e9:82:39:2a:1c:0a:73:0c:6e:9f:e9:9c:
         bd:64:ab:6c:46:df:56:78:3a:87:22:f6:f8:64:b1:38:9d:7b:
         22:97:0e:bf:e3:95:22:91:35:bd:06:1f:9e:93:69:50:05:6b:
         6f:3e:fb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 07:45:32 2024 by rpki-client on console-ams.rpki-client.org