Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa
File:                     34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          55McRjzTYHRiHs8/JKJyWZM/RRvwBa9ibWFuUq7Haro=
Subject key identifier:   EC:55:A0:45:7A:80:B1:F3:09:71:FC:24:02:21:5F:5D:6E:4B:8A:36
Certificate issuer:       /CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
Certificate serial:       7FF96698DF5754792F3D9477CD09537FEB95332D
Authority key identifier: 2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa
Signing time:             Tue 05 Mar 2024 17:57:59 +0000
ROA not before:           Tue 05 Mar 2024 17:52:59 +0000
ROA not after:            Tue 04 Mar 2025 17:57:59 +0000
asID:                     396356
IP address blocks:        45.166.108.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f9:66:98:df:57:54:79:2f:3d:94:77:cd:09:53:7f:eb:95:33:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
        Validity
            Not Before: Mar  5 17:52:59 2024 GMT
            Not After : Mar  4 17:57:59 2025 GMT
        Subject: CN=EC55A0457A80B1F30971FC2402215F5D6E4B8A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:50:70:e1:19:e0:b3:a5:74:3b:45:1e:a8:13:
                    2b:3f:1c:58:29:69:34:75:26:af:c7:24:4f:a2:98:
                    61:d1:0c:18:4f:3c:3e:c8:33:81:67:0a:35:ae:70:
                    53:0c:23:62:ac:e4:88:cf:a2:6d:1c:a3:ba:78:19:
                    ad:db:18:b0:c7:68:66:7f:8f:29:6e:ea:59:a7:e6:
                    cc:b1:b2:8c:7c:5b:3d:50:9e:09:15:72:d0:69:0b:
                    50:5e:f1:fb:be:aa:02:79:f7:44:a1:3f:3a:5b:96:
                    6a:86:38:5c:48:95:61:e8:46:b3:96:95:8c:73:d1:
                    e3:fe:d7:34:eb:93:95:b3:ef:ca:b5:67:8f:f8:30:
                    6b:6c:39:1c:32:6d:b8:c7:cb:1a:1d:ae:26:98:57:
                    50:50:ce:7c:9a:26:38:a8:d8:76:9a:81:80:cd:63:
                    65:38:dd:26:b7:b1:61:9d:4c:f2:7f:70:02:ae:a6:
                    61:9e:7e:bb:34:db:e8:56:a2:27:ff:24:7f:61:3c:
                    97:ba:8b:20:43:62:c7:8a:98:38:97:a2:81:a2:88:
                    12:23:c2:cf:19:fd:d9:0e:37:c4:1e:0d:14:65:ee:
                    9b:de:d5:a2:20:11:e3:7d:34:a0:aa:f2:2a:e5:5b:
                    f3:ea:86:f6:d1:36:a7:c1:c2:f0:e4:97:54:96:b7:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:55:A0:45:7A:80:B1:F3:09:71:FC:24:02:21:5F:5D:6E:4B:8A:36
            X509v3 Authority Key Identifier:
                keyid:2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3130382e302f32332d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:d9:fc:d8:2a:8e:a9:31:10:7d:99:8d:89:d7:4d:8b:f5:f4:
         6f:cd:95:b1:03:d7:3b:3b:f7:f7:da:0e:dc:6e:61:1c:43:07:
         a8:ab:ae:81:5f:a5:ce:74:0c:b5:67:f3:3e:c8:b1:a2:68:f5:
         14:3f:99:8a:0a:06:a4:2c:3e:2c:69:1f:19:f3:39:0e:e8:b8:
         12:40:6c:a2:ef:21:b4:a1:d4:e5:c0:c0:b5:57:25:62:43:58:
         b6:b2:0d:96:fb:14:77:cd:0b:09:9e:b6:ea:77:fb:8c:71:99:
         6d:89:4f:0c:18:19:d3:c4:a1:28:ee:4f:bf:08:77:1a:b4:9e:
         25:7e:5c:e9:12:c4:34:75:d6:20:a2:ad:93:33:b1:0b:af:7d:
         e8:49:98:f5:b4:3d:40:b4:96:c1:c6:b2:15:b0:81:f6:20:d1:
         3d:14:42:72:c1:ce:1a:c8:d4:8d:35:be:b2:ba:db:15:44:62:
         15:48:3f:05:3f:61:1b:94:26:97:f6:14:fb:79:51:82:4c:e2:
         0c:19:67:69:a1:93:11:f2:11:ea:87:87:f5:69:44:d2:82:ed:
         11:3e:af:e7:b8:31:a8:d8:5c:e8:0a:f0:53:ae:d8:34:e9:2b:
         9b:6e:eb:66:b2:19:03:95:f4:e8:d9:c7:2c:17:11:9c:fb:db:
         a4:b3:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:11 2024 by rpki-client on console-fra.rpki-client.org