Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203237393531.roa
File:                     34352e3137362e3233322e302f32322d3234203d3e203237393531.roa (raw, json)
Hash identifier:          cz02YodhNxRboCAmBCCt5tjG+Cp/dLR16fKWlvXWLB8=
Subject key identifier:   F1:70:12:E7:81:46:86:6D:CE:DE:00:9E:88:36:85:7E:AD:00:10:CA
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       244D676F59852A362409CC6C205084EB74B7F253
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203237393531.roa
Signing time:             Tue 05 Mar 2024 17:45:02 +0000
ROA not before:           Tue 05 Mar 2024 17:40:02 +0000
ROA not after:            Tue 04 Mar 2025 17:45:02 +0000
asID:                     27951
IP address blocks:        45.176.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 11 May 2024 23:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4d:67:6f:59:85:2a:36:24:09:cc:6c:20:50:84:eb:74:b7:f2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Mar  5 17:40:02 2024 GMT
            Not After : Mar  4 17:45:02 2025 GMT
        Subject: CN=F17012E78146866DCEDE009E8836857EAD0010CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:dc:0d:ca:81:41:d2:aa:48:6d:67:ff:01:
                    13:06:44:bc:3c:7d:df:1c:ee:b0:35:c4:92:ab:d5:
                    9f:50:9c:42:3a:60:37:9c:e1:90:b4:ae:b1:38:fb:
                    87:6d:3d:75:e6:98:61:fb:2a:4b:6e:28:a3:d5:2c:
                    e3:19:85:a7:f5:ae:10:37:e3:41:ab:d7:dc:bd:35:
                    82:79:ad:46:29:a3:1a:97:d4:4f:80:dd:b2:e2:37:
                    1f:17:e6:1a:d9:1c:5a:3e:25:62:81:29:9e:bf:ac:
                    f3:4e:78:a3:92:7d:e2:e1:b0:5b:80:01:b5:22:50:
                    54:a9:0f:d9:a8:b4:b1:be:5a:74:8c:a8:76:4f:dc:
                    15:fc:fe:3e:25:60:3a:80:29:f5:88:3e:c4:f4:5f:
                    5a:82:8f:fe:46:5f:46:98:86:4d:e6:c0:c4:00:af:
                    ff:31:7e:c8:e0:90:04:41:b0:84:e2:b7:a0:d6:bc:
                    3c:59:8f:ec:6d:1f:50:76:c8:06:a8:d4:99:fa:42:
                    5e:f0:05:ef:aa:a9:c6:04:c6:c8:00:45:bc:9e:e0:
                    75:9a:7d:b7:e9:a1:ed:5b:54:de:93:fa:2b:c9:1d:
                    3a:b2:9e:af:20:bc:6d:dd:e0:3b:fd:e7:a3:9f:44:
                    8d:05:19:c5:9f:b2:23:ed:30:e5:82:4b:43:be:20:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:12:E7:81:46:86:6D:CE:DE:00:9E:88:36:85:7E:AD:00:10:CA
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:be:bf:0e:e0:be:6e:9a:7d:68:84:aa:60:7c:1e:c3:0b:e9:
         e3:51:80:ce:94:5d:6a:6c:27:bd:cb:af:9b:86:24:64:15:88:
         09:76:ea:65:cd:d2:e7:7b:57:34:3c:c3:f1:aa:98:e6:90:7c:
         0b:ce:4e:c6:20:ce:69:3d:1b:ba:d6:2a:10:0a:6f:3d:2c:3f:
         50:20:74:ed:3f:ae:af:8f:10:6f:44:d1:ea:66:a4:1e:bf:7e:
         30:16:4a:b7:1a:6c:ba:63:35:94:af:88:47:18:c1:08:d5:4c:
         3e:0d:5d:a7:c1:8d:e1:28:dd:1b:ac:e1:a4:87:96:15:3b:05:
         40:72:25:b6:c5:2f:dd:5c:bb:e4:e3:6f:c4:87:c1:b2:65:85:
         30:dc:fe:57:a7:04:ea:9a:7e:49:a0:09:ef:7f:d4:31:99:6f:
         62:bd:ea:94:56:e2:ab:a3:d5:6e:75:49:da:a8:c7:af:b5:97:
         63:6d:1a:b4:1d:03:14:f3:10:32:3e:e0:8f:df:80:98:85:c7:
         8b:f6:18:01:94:78:db:5e:19:8e:96:e4:78:0b:37:96:5f:78:
         29:25:ce:41:37:9e:0a:4a:14:2c:c4:02:5a:f6:09:6f:1b:bd:
         ee:8b:5a:1a:fa:82:e9:31:b8:73:35:2a:e2:14:f0:95:27:0e:
         72:0e:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 00:09:05 2024 by rpki-client on console-fra.rpki-client.org