Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa
File:                     34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          fBquqhCnz5SX27rShvZRpsDMLIobCq2PutDLJvJyOYY=
Subject key identifier:   6E:87:13:4D:2F:4C:07:6A:19:88:19:1B:8C:72:A2:00:B2:6A:EC:F2
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       1FC3939C82DF20FC04CCDDE1E51F47E796A7ADDB
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa
Signing time:             Tue 05 Mar 2024 18:00:51 +0000
ROA not before:           Tue 05 Mar 2024 17:55:51 +0000
ROA not after:            Tue 04 Mar 2025 18:00:51 +0000
asID:                     267730
IP address blocks:        45.166.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c3:93:9c:82:df:20:fc:04:cc:dd:e1:e5:1f:47:e7:96:a7:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Mar  5 17:55:51 2024 GMT
            Not After : Mar  4 18:00:51 2025 GMT
        Subject: CN=6E87134D2F4C076A1988191B8C72A200B26AECF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:00:33:07:f5:9d:08:41:93:66:3f:72:34:
                    4f:b7:cb:6b:71:3a:c2:72:e3:19:17:82:4c:fc:a8:
                    64:b3:40:b1:1b:fe:f9:10:a3:ed:03:d7:76:14:b0:
                    a6:c7:2a:f4:97:9c:38:51:f9:25:fe:9f:77:f9:9a:
                    eb:04:92:bc:0b:d1:77:b4:c7:d2:11:7a:73:d8:c0:
                    44:6f:50:5a:e3:f2:ed:48:5a:55:b5:53:84:21:7b:
                    79:d5:46:2d:71:54:55:7a:11:c7:d5:20:af:7b:d7:
                    68:05:bc:93:a3:0b:54:63:d3:70:ab:05:61:8c:6d:
                    7c:7b:f4:49:a7:9c:bf:4f:c8:6d:b7:de:c8:d3:ae:
                    f5:2f:7c:71:ca:e3:ef:05:7c:eb:4b:5e:40:72:f8:
                    78:be:a2:b7:f8:1d:a7:0c:56:5e:b3:2f:05:e7:9a:
                    50:c6:c6:01:0c:bd:0d:50:c3:12:70:d0:45:7d:ee:
                    2a:4e:9d:0b:e3:e5:35:49:26:75:6e:83:86:92:ce:
                    3a:51:e3:2f:87:10:b9:20:da:cf:7b:92:f9:d9:77:
                    92:f6:47:e4:68:e9:61:cc:21:58:3d:c9:e5:44:88:
                    7c:ce:9c:84:be:3c:d1:a8:b5:28:d6:37:e5:2f:0b:
                    e5:fd:4a:9a:c5:1d:b7:a9:ff:be:96:15:3f:5b:2c:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:87:13:4D:2F:4C:07:6A:19:88:19:1B:8C:72:A2:00:B2:6A:EC:F2
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32322d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:18:c5:15:1a:74:a7:97:cb:5b:a0:3e:08:e9:1c:85:23:
         db:2c:74:fc:d5:5a:71:96:5f:d7:07:56:76:d2:21:0e:ff:bf:
         59:5e:ae:84:03:0f:70:c8:bf:af:16:81:6e:33:1e:eb:17:27:
         d3:5e:df:ce:6d:64:2b:b4:24:7a:d8:dd:45:92:94:89:d7:50:
         ea:a7:2b:db:85:2a:fa:31:71:23:83:f3:83:b2:f2:0d:0c:48:
         f6:3b:aa:2e:a7:de:e0:13:6e:f0:a0:a1:ff:eb:17:49:35:a0:
         94:54:83:d7:ba:a1:e1:6b:40:8b:8e:69:c4:19:20:4e:ec:63:
         83:dd:f1:8e:23:02:ea:2f:8e:8a:70:b5:5c:c0:69:0d:e2:49:
         dc:de:3d:58:bf:60:ed:1c:cf:a6:da:c3:c1:58:e0:4b:29:93:
         e2:33:5f:25:7b:0e:bd:e3:90:cd:7a:f0:2d:19:ad:39:7c:bf:
         3a:cf:7e:c2:30:cb:cd:38:0e:45:9a:e6:6d:30:ac:a1:df:a3:
         9b:4e:30:c6:03:3f:e1:7b:62:14:e6:6f:83:cb:9b:3d:ef:74:
         14:bd:86:e5:9a:d7:7f:6b:b0:9a:5c:01:70:e3:1e:bc:af:a4:
         dc:02:00:c1:04:75:3e:2e:01:3d:9f:83:16:0a:3d:b1:3e:24:
         70:cc:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:47 2024 by rpki-client on console-ams.rpki-client.org