Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/34352e3136362e37322e302f32342d3234203d3e20323636373731.roa
File:                     34352e3136362e37322e302f32342d3234203d3e20323636373731.roa (raw, json)
Hash identifier:          Rk+u+kukxOWk9KXjF1Y2q0L+ln4VuSJjnzinh8td7Xw=
Subject key identifier:   40:A1:9D:77:E4:5F:50:51:4E:0C:F1:1A:D0:7F:1F:7D:CD:50:DA:FD
Certificate issuer:       /CN=0BA8E66315F819CD6B55A83C376518C0B115A2A8
Certificate serial:       2209BD7BF1A4FBB14BC67F138104643535D7C82F
Authority key identifier: 0B:A8:E6:63:15:F8:19:CD:6B:55:A8:3C:37:65:18:C0:B1:15:A2:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/34352e3136362e37322e302f32342d3234203d3e20323636373731.roa
Signing time:             Tue 05 Mar 2024 18:14:26 +0000
ROA not before:           Tue 05 Mar 2024 18:09:26 +0000
ROA not after:            Tue 04 Mar 2025 18:14:26 +0000
asID:                     266771
IP address blocks:        45.166.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:09:bd:7b:f1:a4:fb:b1:4b:c6:7f:13:81:04:64:35:35:d7:c8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BA8E66315F819CD6B55A83C376518C0B115A2A8
        Validity
            Not Before: Mar  5 18:09:26 2024 GMT
            Not After : Mar  4 18:14:26 2025 GMT
        Subject: CN=40A19D77E45F50514E0CF11AD07F1F7DCD50DAFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:98:ff:de:c0:d4:d0:8e:bf:49:5f:af:0e:
                    e5:35:22:44:a7:99:02:a9:fe:70:4a:23:c2:eb:7f:
                    61:52:39:55:07:fc:d4:3f:b9:da:a5:7d:55:c1:16:
                    92:4c:ba:ed:4e:9a:d4:89:cf:ab:f4:cf:31:02:01:
                    91:f4:d8:2d:d4:f4:77:c7:43:16:a4:93:fa:64:10:
                    7d:d1:87:23:c5:68:46:51:ff:b0:d3:40:0f:fc:5a:
                    f7:20:20:a7:9d:10:90:ed:5e:e8:88:c4:cc:10:a2:
                    ab:13:0b:10:dd:e5:fd:f2:85:a2:c1:fe:8b:87:1e:
                    4e:e1:02:92:5f:0c:7e:24:eb:a3:20:1c:1e:4a:98:
                    fa:41:fb:ec:2e:8f:ba:9c:11:c1:d2:70:5c:77:1f:
                    83:e2:4a:47:54:bc:c0:2f:e1:5d:76:e6:8c:95:4c:
                    95:ce:30:fb:c5:ae:7c:59:6a:2b:cd:2d:76:21:69:
                    4a:f8:81:93:5c:22:c3:ff:39:1b:bf:3b:e6:6e:66:
                    c4:95:4f:38:32:2a:79:f2:2d:ac:53:b1:53:29:a4:
                    4e:d2:7b:62:37:69:d3:45:8a:45:3f:15:4b:0f:96:
                    46:30:1d:50:f0:84:60:14:29:96:d2:68:2f:1f:0e:
                    91:d4:3e:97:3b:7e:ae:7b:c2:4a:b9:58:60:39:9b:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A1:9D:77:E4:5F:50:51:4E:0C:F1:1A:D0:7F:1F:7D:CD:50:DA:FD
            X509v3 Authority Key Identifier:
                keyid:0B:A8:E6:63:15:F8:19:CD:6B:55:A8:3C:37:65:18:C0:B1:15:A2:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0BA8E66315F819CD6B55A83C376518C0B115A2A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1109DB714359366BFC890257739CEEC66ADE95669DBC987FAB13A15827AE07E2/0/34352e3136362e37322e302f32342d3234203d3e20323636373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:40:75:4a:09:1f:79:c8:24:5a:1a:3b:a5:4d:e3:5c:a0:
         d2:28:f9:f8:a3:a9:a4:c4:d1:65:ff:dd:b7:78:9a:72:b3:81:
         80:d2:34:fb:f9:84:ed:e5:26:8c:dc:09:90:8c:7d:dd:17:4e:
         22:8a:58:99:bb:92:7f:f1:aa:a7:e1:8d:79:fc:3b:a9:f0:81:
         85:93:d6:31:b8:57:d3:dc:fd:58:21:ec:33:59:ef:c3:c7:d9:
         16:1d:96:0a:fd:b5:62:08:f6:04:24:dc:1b:73:b5:10:4a:10:
         83:31:86:c9:b7:56:0f:7f:3e:73:62:d5:ee:16:49:ab:e8:dd:
         4b:69:15:f2:7c:0b:18:71:79:42:5a:12:ba:c5:65:45:34:f1:
         46:21:7f:91:7a:08:64:83:1e:9f:5f:05:b1:3d:ec:0d:7f:72:
         87:6d:75:05:c9:38:11:bb:76:37:e8:61:dd:1e:f9:f5:a1:62:
         2b:9d:34:ed:8d:f2:f4:51:0d:f6:90:cf:59:5b:34:42:6d:df:
         b5:d8:10:06:24:61:cb:12:a2:23:74:27:81:57:a0:99:90:93:
         a0:5c:f1:01:09:6d:ad:f4:42:4f:7e:11:e1:14:49:b8:ab:42:
         af:e2:de:3d:21:d6:79:5a:69:e3:f5:4a:ce:6b:ad:2c:d6:36:
         b3:45:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 10:57:08 2024 by rpki-client on console-ams.rpki-client.org