Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137392e302f32342d3234203d3e20323637373330.roa
File:                     34352e3136362e3137392e302f32342d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          5NZDyN7vzgUxj00Na8lJsSQPrl63RCGnrlXMjV3y7qQ=
Subject key identifier:   C6:5E:B7:89:26:4A:B4:C9:70:38:AE:31:4C:2B:70:D0:49:FF:2B:82
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       4B7D73DD31CCB296D8F765CE0D8BD7E4512482B9
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137392e302f32342d3234203d3e20323637373330.roa
Signing time:             Tue 05 Mar 2024 18:00:50 +0000
ROA not before:           Tue 05 Mar 2024 17:55:50 +0000
ROA not after:            Tue 04 Mar 2025 18:00:50 +0000
asID:                     267730
IP address blocks:        45.166.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7d:73:dd:31:cc:b2:96:d8:f7:65:ce:0d:8b:d7:e4:51:24:82:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Mar  5 17:55:50 2024 GMT
            Not After : Mar  4 18:00:50 2025 GMT
        Subject: CN=C65EB789264AB4C97038AE314C2B70D049FF2B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:83:64:64:39:43:10:67:a9:fd:37:c0:ea:
                    80:a7:d4:30:76:a2:bf:07:aa:6f:67:b5:be:cc:ad:
                    08:bb:df:4c:c1:17:1e:78:29:65:91:bd:06:c6:cd:
                    ba:b3:18:d7:f5:ec:ee:09:47:3c:03:c3:e1:64:1b:
                    f6:e2:be:bc:06:ab:56:47:cf:1f:ba:2e:61:11:b2:
                    5d:5f:80:44:11:34:2a:ba:5f:e1:29:7f:99:f0:ae:
                    52:69:7e:8c:c3:37:05:0f:8b:ba:e3:8c:27:83:4a:
                    a9:74:cc:a9:e3:97:4f:2a:b5:0f:91:6a:15:75:31:
                    ee:3e:7f:12:0a:4c:24:1f:79:f5:9c:b4:f3:87:a0:
                    46:2b:ff:65:f0:0e:7c:6f:6c:d0:08:62:ca:ce:22:
                    17:7b:23:c2:72:b0:7b:2f:f0:42:83:a7:4f:44:07:
                    3d:0c:a9:b2:f4:42:32:3f:6f:5c:4b:d9:38:77:90:
                    c8:45:c2:c2:34:fb:92:9f:7d:f4:c3:08:24:83:2a:
                    65:a5:68:78:2c:a2:df:62:f5:30:cc:5e:54:95:1a:
                    d4:db:00:09:2a:69:83:f2:ce:02:99:73:70:4c:f3:
                    66:ce:4c:a6:1b:51:83:03:b1:42:86:ca:60:22:11:
                    ec:30:4b:42:c7:ca:cf:f5:48:56:a6:4f:ec:a2:c8:
                    61:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:B7:89:26:4A:B4:C9:70:38:AE:31:4C:2B:70:D0:49:FF:2B:82
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137392e302f32342d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:d4:38:b0:7c:b1:81:78:5e:93:f4:8b:14:1f:b9:ac:24:2c:
         42:95:58:7a:5a:b3:58:90:4a:42:8c:3d:a2:ae:9f:a7:d5:f0:
         69:04:41:33:4c:c8:a3:77:c5:98:a6:57:8b:08:48:79:da:0f:
         0c:f6:b9:98:69:bd:67:d1:b5:9c:88:60:3f:a7:22:af:18:62:
         fc:70:f0:bf:67:bd:40:76:fe:5d:3a:15:57:42:5a:5c:00:67:
         ef:38:a2:19:5e:78:af:72:0c:bd:d6:6c:93:aa:b8:d1:98:01:
         e1:2c:24:62:8c:81:74:6b:bf:69:6a:67:70:02:5d:dc:64:26:
         ae:60:6b:39:0e:e7:5a:56:d0:a4:f5:db:46:51:f9:e0:2c:9a:
         ad:5a:c2:22:f1:99:c7:45:78:ed:ca:c5:91:92:c9:9a:f3:fb:
         a1:6b:c3:97:dd:34:1b:6d:29:ef:56:24:12:d3:dc:d9:24:01:
         c2:8f:eb:ad:92:e0:85:3b:f8:7e:a5:44:32:9e:19:18:62:ea:
         db:78:a0:c5:1b:57:71:3d:8e:f5:8b:57:73:b6:17:5e:7b:34:
         0d:14:fc:b4:62:c3:26:03:d7:07:b9:4d:44:5c:5c:26:66:8a:
         e4:c8:71:5a:fb:32:a3:0b:28:69:b7:c2:e3:5a:e3:f5:6e:8d:
         25:a1:82:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org