Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/34352e3137372e37352e302f32342d3234203d3e20323637393330.roa
File:                     34352e3137372e37352e302f32342d3234203d3e20323637393330.roa (raw, json)
Hash identifier:          bcQtJx1a38Ws1XX/ND6r5lP+tKWYSVt5yHudm0PGBHo=
Subject key identifier:   7A:C2:B4:E1:23:30:67:A3:2F:32:18:69:14:02:73:01:C4:50:ED:DF
Certificate issuer:       /CN=83D56D0FC54D143DFDA06E7172FF524B1AEA053C
Certificate serial:       557118B1E0B71B5B3C12447E7CB6293199710795
Authority key identifier: 83:D5:6D:0F:C5:4D:14:3D:FD:A0:6E:71:72:FF:52:4B:1A:EA:05:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/34352e3137372e37352e302f32342d3234203d3e20323637393330.roa
Signing time:             Tue 05 Mar 2024 17:42:08 +0000
ROA not before:           Tue 05 Mar 2024 17:37:08 +0000
ROA not after:            Tue 04 Mar 2025 17:42:08 +0000
asID:                     267930
IP address blocks:        45.177.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:71:18:b1:e0:b7:1b:5b:3c:12:44:7e:7c:b6:29:31:99:71:07:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83D56D0FC54D143DFDA06E7172FF524B1AEA053C
        Validity
            Not Before: Mar  5 17:37:08 2024 GMT
            Not After : Mar  4 17:42:08 2025 GMT
        Subject: CN=7AC2B4E1233067A32F32186914027301C450EDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:eb:e1:8c:e9:22:e2:b4:79:b0:03:38:e2:
                    41:a7:a8:01:bd:be:2a:72:32:94:cb:d8:6b:74:c0:
                    1d:80:07:fd:79:67:43:f9:c1:68:b6:f7:72:b0:cc:
                    b3:be:68:61:75:fa:01:37:21:e1:9e:fe:87:f2:7c:
                    87:46:40:2a:08:1f:a6:04:c1:50:4f:2a:f2:c3:9e:
                    cb:da:ed:bd:a9:f0:b3:08:68:e6:61:db:ef:3d:a2:
                    3e:61:1c:7e:7c:3f:b8:d3:15:5a:87:35:66:05:61:
                    fa:f8:b8:8d:96:e3:54:fc:fb:1d:56:0a:39:03:df:
                    98:cf:bb:af:0b:9a:64:30:19:50:2e:43:91:51:ae:
                    4f:02:e4:ef:7f:76:ef:7e:29:0c:6a:d3:b0:9c:f3:
                    6e:7b:d8:c1:8f:28:25:0a:cf:03:fd:a5:c8:2b:4e:
                    7b:62:ce:23:39:a8:1f:b1:be:6d:7a:04:06:bd:24:
                    96:ed:24:ad:ac:22:ef:a0:cc:52:c1:9d:c5:f6:3b:
                    b6:bb:d7:cf:da:1c:bd:3f:78:7b:1a:6b:89:e9:17:
                    26:fb:cb:5b:96:8f:14:bd:64:ea:d5:0c:31:a1:91:
                    f7:18:e9:1f:42:b4:01:52:86:ef:03:f5:73:60:42:
                    57:63:fa:67:a0:98:e6:8d:06:9a:90:36:be:b6:df:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C2:B4:E1:23:30:67:A3:2F:32:18:69:14:02:73:01:C4:50:ED:DF
            X509v3 Authority Key Identifier:
                keyid:83:D5:6D:0F:C5:4D:14:3D:FD:A0:6E:71:72:FF:52:4B:1A:EA:05:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/83D56D0FC54D143DFDA06E7172FF524B1AEA053C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D0A554FCFAED8F99B5EE1E73EA8259DB21F09E7923895F00B7A6279ABC889A3/0/34352e3137372e37352e302f32342d3234203d3e20323637393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:22:96:ac:68:72:e8:3c:d7:22:a6:8d:58:5b:e0:63:5d:d4:
         8f:c1:27:20:17:9f:66:5d:4f:78:b9:36:31:c2:50:37:58:de:
         e7:9c:0d:bf:45:a5:1f:4c:de:d5:bb:73:4c:26:c3:6a:33:69:
         0f:7b:a3:a3:68:3f:a5:78:5b:29:fb:02:77:e8:34:8c:07:67:
         5a:48:b6:05:51:4c:42:36:bd:cb:0a:2b:83:1d:aa:48:11:cf:
         db:12:59:44:1a:0a:07:a5:70:58:13:69:8d:0c:91:95:ca:39:
         a3:12:4e:f9:75:13:90:f3:68:5f:d4:de:32:10:d2:8f:32:f1:
         fd:2d:96:62:b5:9e:8d:eb:75:77:b1:13:5f:ce:06:20:de:5a:
         c6:ae:62:6d:b0:09:41:85:a5:26:ba:3e:3f:ef:9c:c4:dd:99:
         ab:6f:33:67:a2:d4:72:d1:fb:c7:3b:b6:f8:a7:89:2a:1f:4e:
         c8:76:94:e6:14:64:16:dc:f9:68:ea:0d:d0:70:85:0c:f9:d8:
         85:3a:45:d9:7e:8c:51:d2:38:44:73:1d:f5:01:55:57:cb:68:
         9e:2c:cb:b1:fa:15:5f:9e:27:f1:bd:64:92:a8:93:b7:71:61:
         ff:0d:b6:ab:93:18:ee:e1:0e:99:9b:1b:16:c1:29:88:78:f2:
         aa:2f:32:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org