Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33392e302f32342d3234203d3e203233343837.roa
File:                     34352e3137382e33392e302f32342d3234203d3e203233343837.roa (raw, json)
Hash identifier:          0zjS/k5nuZ+kI3iZio+nZm3ppM+SBl63e6lEczBxI/k=
Subject key identifier:   1E:49:76:98:08:8D:F8:54:38:8F:F6:06:A5:CA:42:77:A2:AA:1B:03
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       1EEAC29521558E2E319EFBA84FBA469305E32220
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33392e302f32342d3234203d3e203233343837.roa
Signing time:             Mon 09 Sep 2024 20:45:00 +0000
ROA not before:           Mon 09 Sep 2024 20:40:00 +0000
ROA not after:            Mon 08 Sep 2025 20:45:00 +0000
asID:                     23487
IP address blocks:        45.178.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ea:c2:95:21:55:8e:2e:31:9e:fb:a8:4f:ba:46:93:05:e3:22:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Sep  9 20:40:00 2024 GMT
            Not After : Sep  8 20:45:00 2025 GMT
        Subject: CN=1E497698088DF854388FF606A5CA4277A2AA1B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:33:db:d8:3d:56:40:18:c4:e8:86:c2:88:
                    02:ec:8e:9a:4c:bb:a2:43:42:2a:96:11:b1:6a:71:
                    06:ca:11:aa:17:ca:0f:5b:0d:7a:a9:3c:7a:8b:89:
                    ca:ec:97:fd:8c:29:a9:17:1e:e9:57:5d:0f:aa:1d:
                    ec:6e:96:ab:f8:42:e2:07:d9:0b:2e:37:83:2f:fa:
                    7a:ba:a0:93:5c:06:6a:3d:ef:20:bb:f9:fe:cf:91:
                    a3:41:5a:29:5d:35:3e:26:65:df:84:14:d4:99:4e:
                    6a:4e:56:f3:3e:55:58:83:dc:94:24:6d:32:14:c0:
                    67:a5:2f:61:d2:e7:04:5d:0b:fd:1d:98:d4:da:5f:
                    8c:d0:b2:60:52:23:92:78:02:ac:1f:a5:44:5e:24:
                    6b:21:99:3a:5e:f5:df:e3:a2:ec:73:b2:67:92:23:
                    8b:2a:ff:a2:d5:83:28:3f:12:53:50:41:e5:a4:08:
                    21:6c:0b:d1:d4:22:c3:ac:05:b5:78:90:d0:8d:c3:
                    c3:d5:2e:57:c4:3b:b2:55:aa:23:2f:e2:9e:29:01:
                    db:14:bc:ab:a6:2b:ff:f4:5e:83:5e:3e:56:fe:a4:
                    72:4a:d7:6e:89:cc:05:47:44:d7:79:1d:eb:ca:a1:
                    c3:71:c7:86:07:c3:42:88:dd:54:84:5c:72:81:43:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:49:76:98:08:8D:F8:54:38:8F:F6:06:A5:CA:42:77:A2:AA:1B:03
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33392e302f32342d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:6c:89:7f:00:2d:ef:a8:16:68:a7:af:a6:34:1e:fb:91:
         4f:98:fb:6e:bc:17:91:6b:ab:12:fa:45:b2:c7:c5:d0:6b:f0:
         97:c5:76:21:71:ce:46:e1:09:5c:e8:ec:5e:ca:79:c0:04:89:
         2a:51:d5:e9:bf:12:fb:ae:de:03:c0:08:d7:0a:f4:68:70:4d:
         a9:68:68:08:20:e5:cd:e7:f0:48:e4:98:58:e2:bd:a5:70:0f:
         49:99:be:5d:d2:a2:f5:44:13:92:ca:84:17:55:ae:0c:85:9a:
         cf:eb:a5:fa:be:2d:6c:71:f7:94:07:6d:d3:0f:b7:d4:7b:a3:
         a2:f5:c1:1f:36:f7:3f:0b:5e:a9:95:ac:df:3b:52:bb:ca:a3:
         68:b4:48:b1:33:ae:8b:16:1c:40:d9:38:63:fe:7e:72:f4:de:
         67:66:60:87:4a:c6:63:65:a6:a2:f5:fa:53:61:91:c5:1a:17:
         3a:4c:49:f8:71:81:19:c6:8d:1f:8a:e1:f0:4d:c9:b5:b5:f3:
         d0:91:66:cf:d9:22:8f:63:d4:04:23:5e:f3:1d:05:8b:71:90:
         11:9a:e9:a7:88:b8:a0:6f:34:43:38:28:bc:0c:93:fa:a0:a7:
         2e:93:23:15:db:12:b0:ea:f0:55:8f:74:b5:eb:11:df:c8:81:
         2c:1c:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org