Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa
File:                     34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          m2tj0RHCwszuddlmTdL11otjJRjuztw7gGyjEv2i5nY=
Subject key identifier:   ED:8C:52:FC:29:27:7B:1E:A2:21:D8:4F:CC:9E:8E:66:06:05:4A:25
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       2748392717ABBE2E170AA2D1513C67866AFDDC9F
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa
Signing time:             Tue 05 Mar 2024 18:00:50 +0000
ROA not before:           Tue 05 Mar 2024 17:55:50 +0000
ROA not after:            Tue 04 Mar 2025 18:00:50 +0000
asID:                     267730
IP address blocks:        45.166.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:48:39:27:17:ab:be:2e:17:0a:a2:d1:51:3c:67:86:6a:fd:dc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Mar  5 17:55:50 2024 GMT
            Not After : Mar  4 18:00:50 2025 GMT
        Subject: CN=ED8C52FC29277B1EA221D84FCC9E8E6606054A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:72:50:5a:26:92:2f:24:e7:71:c5:3e:a3:
                    94:37:93:f3:fa:bf:34:77:5c:64:73:e9:01:48:53:
                    e2:e9:2f:af:7a:02:4e:4b:78:22:ed:85:f7:5b:fe:
                    8f:48:47:8a:a5:8e:e8:c4:ed:f9:68:b8:8b:78:a1:
                    42:4c:60:1b:ef:0e:94:7c:4b:43:50:cd:af:53:70:
                    ef:62:70:f8:56:a9:3d:06:0d:9e:f5:6b:db:6e:a6:
                    ec:a5:cd:c3:4e:ac:2f:fb:f8:91:8e:17:e6:3d:d0:
                    74:ca:b5:33:57:69:d2:19:fd:fd:01:56:a4:35:b9:
                    d2:c9:0b:2f:32:46:19:63:05:bb:5b:50:1d:c7:99:
                    2b:14:da:d3:22:d7:3c:93:d3:53:00:08:4a:b5:98:
                    97:7e:3b:66:b3:d8:70:7b:49:17:d5:5a:bf:dd:c0:
                    6c:fb:29:d2:10:de:49:9a:32:bd:bd:fd:27:04:cf:
                    4b:f1:d8:e3:a3:a7:d6:95:94:c0:5d:7f:df:a0:5c:
                    9a:ee:17:84:2c:6d:2d:85:eb:3a:c2:d2:06:1d:97:
                    9c:52:51:ca:01:75:e8:7f:9c:f8:4a:3d:2a:08:a9:
                    ef:12:56:83:24:17:c6:dc:c9:48:d2:2b:ab:24:55:
                    bc:f7:5b:08:73:09:9f:98:08:ae:13:61:60:fe:5b:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8C:52:FC:29:27:7B:1E:A2:21:D8:4F:CC:9E:8E:66:06:05:4A:25
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:20:5b:d4:d2:97:a8:f9:7f:09:47:a9:f6:51:3c:e8:dc:34:
         63:df:58:76:dc:23:21:91:06:4d:b7:44:ae:d5:c5:ae:1e:f7:
         28:9c:5d:d7:e8:c3:92:66:26:89:a2:95:f0:b1:49:f7:21:c3:
         87:09:14:ed:21:b8:df:d1:da:29:b7:c8:1d:a4:43:c5:2b:91:
         6b:5f:3d:5a:dc:eb:3d:9e:34:3c:7d:8a:19:bf:38:7d:3d:d6:
         07:9f:07:ea:30:e9:17:64:c6:0f:06:29:0d:ab:3e:c2:48:5a:
         0b:38:c2:e7:63:58:86:9a:4c:f4:a9:44:71:1a:2a:70:a4:4c:
         fd:6a:a0:aa:5d:9c:17:f1:f8:92:c2:87:b4:f0:44:33:95:d8:
         9d:16:6d:39:d5:e6:30:33:ea:95:6d:8a:3a:61:b0:0e:87:5f:
         03:4a:eb:15:d2:1c:f9:62:a8:06:66:3d:1e:52:62:d8:03:3a:
         78:8c:6f:7d:ce:1a:a1:a5:1e:48:ee:a4:f3:64:93:b8:61:ee:
         ef:0c:60:ab:68:61:04:b4:2a:d6:35:25:77:b9:23:64:f0:6f:
         6e:6e:d1:0b:1f:a8:73:d8:f3:a6:08:9d:b3:0f:f8:c9:79:ea:
         ca:98:70:8c:e2:e2:66:ed:c9:15:af:fe:21:af:ac:0f:30:35:
         f4:3d:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 12:11:45 2024 by rpki-client on console-fra.rpki-client.org