Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34352e302f32342d3234203d3e20323636393032.roa
File:                     34352e3136312e34352e302f32342d3234203d3e20323636393032.roa (raw, json)
Hash identifier:          82UDhF553AYpc1zwYt1Fgk9WNvhTLg6R0CHxhkAhQRc=
Subject key identifier:   E1:66:B0:C2:60:EC:FC:06:83:CA:9A:B8:2B:77:2E:27:56:1F:90:E0
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       42A8D383DFCE30E7BC262008B3DC9CCC84136A10
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34352e302f32342d3234203d3e20323636393032.roa
Signing time:             Tue 05 Mar 2024 17:46:24 +0000
ROA not before:           Tue 05 Mar 2024 17:41:24 +0000
ROA not after:            Tue 04 Mar 2025 17:46:24 +0000
asID:                     266902
IP address blocks:        45.161.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:a8:d3:83:df:ce:30:e7:bc:26:20:08:b3:dc:9c:cc:84:13:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Mar  5 17:41:24 2024 GMT
            Not After : Mar  4 17:46:24 2025 GMT
        Subject: CN=E166B0C260ECFC0683CA9AB82B772E27561F90E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:b5:9d:2c:0b:a4:71:84:c5:b3:d7:2e:13:
                    9d:54:62:e8:38:aa:6f:28:61:13:b1:6f:c4:18:03:
                    8c:43:aa:ac:6e:49:e5:81:ce:ad:cc:fe:a6:ab:51:
                    09:60:20:97:83:16:31:cd:cf:50:4b:11:97:2d:85:
                    38:7e:cf:50:eb:5c:2f:9f:e1:af:32:3a:44:60:29:
                    b1:a5:9b:47:dc:ee:ab:49:a8:52:15:c9:fc:a4:ab:
                    48:88:ed:86:96:d0:5d:78:c8:65:94:5f:c7:17:94:
                    d5:32:5e:fe:cf:81:28:02:56:cc:f9:59:fe:6b:b6:
                    cd:35:e2:34:87:3f:64:c7:07:cb:cf:7d:ba:ab:55:
                    08:dc:29:00:68:cb:29:ed:7d:74:89:48:06:3c:34:
                    1d:71:c8:f5:5c:ff:b0:0d:d8:fc:5b:8b:21:88:fb:
                    d0:06:88:70:d7:ab:82:59:c1:8e:d2:ac:95:7f:18:
                    ef:7d:39:12:a5:a0:96:ed:51:83:56:8d:8b:42:ee:
                    be:25:07:2f:da:c1:94:70:11:9e:8e:98:ea:b9:39:
                    67:09:b9:d2:ab:69:f5:37:c6:34:4d:40:81:31:fe:
                    bc:16:64:40:90:c9:d5:ea:4f:d5:a6:a4:3d:c3:60:
                    9e:2e:59:2a:a0:10:f9:c2:f6:f0:af:24:3a:41:92:
                    73:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:66:B0:C2:60:EC:FC:06:83:CA:9A:B8:2B:77:2E:27:56:1F:90:E0
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34352e302f32342d3234203d3e20323636393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:80:28:97:dd:16:ab:21:0b:fa:1f:cb:78:2c:4c:87:e7:3f:
         a5:4f:9e:97:fe:65:bb:cf:20:7f:62:83:e5:28:2b:0b:d4:81:
         88:aa:ee:70:74:c1:f7:ed:31:7d:4e:73:b6:3f:21:94:34:fa:
         c5:18:9f:d2:a6:2e:9d:6f:d1:e2:b0:d2:7e:e0:0f:b7:80:41:
         3a:24:b1:64:53:3a:b5:70:f3:20:d9:a9:a1:fc:a7:ca:9f:ce:
         f6:1b:d4:ea:84:07:61:38:9c:37:7b:df:eb:a7:c8:06:c6:44:
         25:ac:02:6f:91:9a:a8:70:18:52:be:ff:43:3f:d3:c5:6b:83:
         b7:f1:4e:27:6d:a9:9c:36:35:86:b9:b8:89:fd:37:36:48:33:
         02:91:71:e7:3c:91:ea:60:f9:f5:3b:32:07:07:c0:6a:5e:db:
         7b:93:1b:cc:00:da:5a:77:63:7c:bb:28:a6:ae:bc:52:ab:4e:
         9c:86:50:6c:93:46:53:5a:33:de:3f:8e:df:ee:be:9f:71:5d:
         c8:9a:ad:a3:3e:1f:b2:12:b9:c0:3b:4b:b8:ff:a4:76:64:08:
         a4:41:91:15:6f:c5:4b:94:e3:8c:19:86:b9:66:e6:b9:89:87:
         a1:96:30:82:c6:92:61:60:bd:ae:75:2a:3d:ad:77:e9:0b:21:
         fe:31:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org