Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203138363738.roa
File:                     34352e3137362e3233322e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier:          PVltAjYsq77aS4dJI3VCmjD1zINc+/W/9jFfz3gbtXs=
Subject key identifier:   3E:04:77:BC:98:88:7B:61:27:B3:FF:7C:52:32:25:EA:01:FF:BB:89
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       476B55580A4B2BEC70A961B67065B3968F8E4C28
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203138363738.roa
Signing time:             Tue 05 Mar 2024 17:45:02 +0000
ROA not before:           Tue 05 Mar 2024 17:40:02 +0000
ROA not after:            Tue 04 Mar 2025 17:45:02 +0000
asID:                     18678
IP address blocks:        45.176.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:6b:55:58:0a:4b:2b:ec:70:a9:61:b6:70:65:b3:96:8f:8e:4c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Mar  5 17:40:02 2024 GMT
            Not After : Mar  4 17:45:02 2025 GMT
        Subject: CN=3E0477BC98887B6127B3FF7C523225EA01FFBB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e3:e0:2b:29:ac:d5:4f:76:a2:01:0e:17:15:
                    78:07:7f:2e:d4:34:56:a7:84:0c:35:c1:34:62:b1:
                    b9:01:09:15:fc:b2:8b:5e:06:97:65:0f:80:f4:3b:
                    36:fc:7c:10:7f:e8:89:0b:11:4d:b0:1d:3e:d9:df:
                    f6:d0:91:32:63:11:39:10:40:27:62:45:f8:2d:83:
                    66:44:c4:e8:c6:e6:3c:08:3b:10:83:73:a5:98:24:
                    f6:ab:d5:6f:13:ab:6f:3c:96:7d:aa:eb:2b:ca:b4:
                    24:bb:aa:75:0f:b3:87:09:95:c0:fc:9f:86:cc:e9:
                    ad:cf:f8:0f:cc:71:fd:cf:c0:9e:06:39:f4:0d:71:
                    67:b3:f9:0f:75:b5:84:10:9a:08:31:f7:9f:e2:a9:
                    f3:a9:d6:65:70:4f:4a:8f:d4:42:be:51:ca:38:cf:
                    dd:6a:8c:5c:1d:a4:f7:ec:8a:b3:8c:c5:ba:0c:6c:
                    de:61:4e:0b:2e:b3:e1:21:f6:09:fe:10:b5:03:37:
                    6d:c9:9c:75:3e:fa:4d:38:2a:3a:b5:0a:f1:cc:61:
                    52:00:0e:61:7a:8d:f2:d6:da:5b:da:34:67:13:12:
                    f2:bc:98:36:49:ba:71:84:89:01:2d:99:72:31:10:
                    9f:5a:c0:11:09:4d:bf:07:f8:9a:2b:d4:89:3f:b3:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:04:77:BC:98:88:7B:61:27:B3:FF:7C:52:32:25:EA:01:FF:BB:89
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:e9:05:fa:e9:5a:d8:9f:a3:cd:fe:5e:04:0b:3b:0c:dc:0c:
         3d:46:d9:bc:18:70:a9:fb:a1:8f:dd:49:17:f8:47:da:dd:1e:
         f8:82:cb:31:40:54:d9:0e:63:5d:96:bb:a0:23:8b:2a:fb:65:
         75:74:52:9a:6f:94:73:1f:0b:48:7b:02:5d:f5:98:f0:ff:9c:
         ac:b8:57:29:cb:f6:10:d1:f3:2e:8c:31:f5:cf:cf:a7:40:a7:
         89:b2:3e:66:2f:7a:db:48:f3:cb:f9:aa:34:5e:7d:ef:d5:f0:
         4d:c4:ea:f3:86:a7:9a:9f:92:ca:64:44:0e:86:1e:f6:86:d5:
         95:36:91:c3:02:57:68:fe:43:c5:70:da:84:4d:d5:0b:58:6e:
         03:92:d2:f4:c4:d4:3c:48:8c:b9:e6:f0:08:25:c1:f5:86:11:
         16:7f:df:7c:62:70:d3:dd:90:85:cc:d9:e3:46:20:6a:11:a8:
         6f:df:89:d8:a2:01:d7:1d:8b:8a:89:2a:71:c4:ea:80:27:62:
         28:c7:bc:9a:71:7a:1d:b4:fc:dc:a1:df:bb:c6:07:e1:00:5b:
         e4:ac:05:c6:c7:4f:81:b2:3a:6f:44:b5:a7:d2:c7:85:94:cd:
         67:96:10:94:6c:8f:33:f0:89:14:eb:5e:a3:bc:f0:d2:0a:c1:
         f0:68:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:52 2024 by rpki-client on console-ams.rpki-client.org