Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa
File:                     34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa (raw, json)
Hash identifier:          aU0/G+Wod26Fq+dyDBm3JS0mBDiQSxobabE1eyyyV4c=
Subject key identifier:   C6:48:82:74:51:9C:7D:9B:BB:7B:46:A3:B2:65:1A:2F:2F:B4:9B:8F
Certificate issuer:       /CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
Certificate serial:       67645D5E36695244CD4764F16C5484FB82626890
Authority key identifier: 7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa
Signing time:             Tue 05 Mar 2024 18:04:40 +0000
ROA not before:           Tue 05 Mar 2024 17:59:40 +0000
ROA not after:            Tue 04 Mar 2025 18:04:40 +0000
asID:                     267849
IP address blocks:        45.175.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:64:5d:5e:36:69:52:44:cd:47:64:f1:6c:54:84:fb:82:62:68:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5922CAF9214C6E4545724FFE93FC180331E96
        Validity
            Not Before: Mar  5 17:59:40 2024 GMT
            Not After : Mar  4 18:04:40 2025 GMT
        Subject: CN=C6488274519C7D9BBB7B46A3B2651A2F2FB49B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:d5:36:be:c2:26:23:2d:56:c9:29:89:15:
                    31:fb:74:1c:ce:9c:82:20:32:c7:ff:fa:2b:8c:38:
                    30:0d:22:1c:50:38:1c:34:90:f4:93:5d:b9:ef:16:
                    a0:8e:e7:3c:37:bb:df:35:86:33:27:e8:0d:4a:0c:
                    31:31:18:36:26:8f:36:d5:47:f0:40:b8:c3:c5:6d:
                    86:a9:a6:36:c3:ee:d3:b2:16:b2:65:05:05:15:f3:
                    99:f8:a1:30:3d:38:f2:0a:db:31:a8:3c:22:24:8c:
                    57:97:a7:2f:ba:5c:08:1c:1a:40:0c:83:33:a8:7d:
                    bc:14:ad:0f:95:01:ff:e9:94:a9:d3:c1:0d:47:f3:
                    47:23:cc:90:42:b2:ca:a4:14:7f:62:3b:bd:e4:e1:
                    d3:a0:3a:a5:eb:63:9a:ef:0e:b2:82:69:2f:23:8c:
                    3d:aa:bb:58:34:d7:1c:83:a6:a9:c0:cf:26:01:7a:
                    0d:db:22:11:a0:e8:f0:7d:d4:37:a3:31:29:84:55:
                    ba:81:c6:1f:20:73:be:14:05:e1:40:fb:b8:7b:f3:
                    2b:c2:10:96:5b:64:11:19:7c:42:4e:b8:bc:ae:83:
                    d3:84:cf:59:57:ea:4e:01:00:0f:01:cb:45:f9:a5:
                    4e:f9:ee:4f:76:d2:8c:19:74:bb:a4:4d:c3:40:0a:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:48:82:74:51:9C:7D:9B:BB:7B:46:A3:B2:65:1A:2F:2F:B4:9B:8F
            X509v3 Authority Key Identifier:
                keyid:7D:A5:92:2C:AF:92:14:C6:E4:54:57:24:FF:E9:3F:C1:80:33:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7DA5922CAF9214C6E4545724FFE93FC180331E96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D4E961A231CD13A76EEB28F44BD4C7BE9C86B64213124A12BAD2CDD7DC61586/0/34352e3137352e3136362e302f32342d3234203d3e20323637383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:ca:a8:07:a8:33:55:7e:ab:a2:a0:11:a5:a5:1c:db:99:
         8f:fa:bb:b6:c1:00:a8:3d:67:8d:d9:2f:1d:49:2a:72:d6:9f:
         d1:15:b0:d7:61:fe:52:94:50:25:47:43:4a:21:6c:6c:b8:de:
         71:97:c3:3b:4b:c9:1f:46:a6:14:ef:10:2c:1a:dc:ca:ff:23:
         75:f6:50:69:bc:3f:be:cd:78:e3:b4:68:cc:ec:c2:6d:bf:ce:
         a2:cf:e9:91:19:d1:cb:96:0a:ef:bc:0b:ad:b4:eb:2b:f0:5e:
         d9:2a:5e:5f:87:8a:90:68:a4:b3:68:32:92:2b:86:d6:e8:b2:
         03:61:4b:d2:57:d1:91:6a:56:a8:ab:e4:97:60:ff:c4:3d:bc:
         c7:15:1e:85:5f:db:71:5b:8a:4a:4f:f6:5f:5e:e8:54:fd:f3:
         ee:3f:2a:ad:39:45:c6:60:ac:13:e2:fa:ea:7e:00:d0:36:9f:
         5e:e1:44:9a:17:15:d9:a3:f2:07:f4:bb:a4:73:8b:60:39:71:
         ea:2c:8f:ae:f4:94:87:4b:78:ff:dc:d4:f3:41:3c:ae:33:51:
         73:4d:f0:6d:10:69:91:05:e3:c5:ec:11:99:04:ef:e2:f5:d9:
         b1:af:86:f6:1b:31:07:39:e7:d7:ed:00:7d:9d:72:0b:2a:22:
         17:8f:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:23:26 2024 by rpki-client on console-ams.rpki-client.org