Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3131302e302f32342d3234203d3e203135303833.roa
File:                     34352e3136362e3131302e302f32342d3234203d3e203135303833.roa (raw, json)
Hash identifier:          DiTJUGUk+kDx/N5NmGpAc93owmLnnCQn2mg0KabVYys=
Subject key identifier:   75:5C:03:81:3D:49:F5:77:72:0B:4D:31:A4:E4:55:20:0D:C1:6B:FD
Certificate issuer:       /CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
Certificate serial:       38E08C8D3DC78FC51938D20397259A48744ED56D
Authority key identifier: 2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3131302e302f32342d3234203d3e203135303833.roa
Signing time:             Tue 03 Dec 2024 21:20:00 +0000
ROA not before:           Tue 03 Dec 2024 21:15:00 +0000
ROA not after:            Tue 02 Dec 2025 21:20:00 +0000
asID:                     15083
IP address blocks:        45.166.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e0:8c:8d:3d:c7:8f:c5:19:38:d2:03:97:25:9a:48:74:4e:d5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E53C3E1222D746A5EEABB43EDFC93BA4037CACD
        Validity
            Not Before: Dec  3 21:15:00 2024 GMT
            Not After : Dec  2 21:20:00 2025 GMT
        Subject: CN=755C03813D49F577720B4D31A4E455200DC16BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:aa:6c:8e:7d:9f:ad:7e:8a:66:bf:7e:31:
                    9e:01:99:4d:9a:95:55:9d:b1:ea:3d:ac:09:88:a6:
                    88:cf:63:8f:07:1a:ba:ed:9b:3e:5d:c9:83:d6:f2:
                    83:b7:f1:da:10:a9:68:5e:0e:05:30:60:1b:c7:81:
                    62:0d:3a:04:56:f5:f2:6d:6f:e0:24:6a:2f:73:3c:
                    02:e7:8a:d0:99:6d:c7:4e:e0:d6:80:40:79:57:f0:
                    69:6a:e8:89:d6:82:64:f1:08:14:01:a8:10:84:3b:
                    04:81:49:24:ec:09:82:61:06:91:04:5b:48:77:08:
                    d3:8b:2e:f0:6e:e3:92:dc:31:4f:c1:23:68:d2:c4:
                    d8:2b:b0:d3:a1:0c:93:b2:8c:ef:07:74:39:95:88:
                    86:5b:26:ef:21:fc:c6:cd:aa:af:06:a3:ce:aa:c2:
                    93:f5:af:26:62:5d:63:1d:c0:6f:f6:c1:fc:33:c5:
                    d1:f2:ea:31:f4:5f:59:7e:e4:a2:2b:ea:58:f9:9d:
                    0c:05:ab:ce:4a:70:6a:cb:8c:92:d3:f7:41:1a:c6:
                    0f:e4:a2:92:79:79:1f:ba:6f:e3:2b:50:48:9d:bc:
                    39:9d:a4:10:7e:73:e3:6f:82:82:19:a8:e7:34:8b:
                    01:25:cb:b6:ec:72:8c:d8:ba:c6:e0:dc:a0:14:fc:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5C:03:81:3D:49:F5:77:72:0B:4D:31:A4:E4:55:20:0D:C1:6B:FD
            X509v3 Authority Key Identifier:
                keyid:2E:53:C3:E1:22:2D:74:6A:5E:EA:BB:43:ED:FC:93:BA:40:37:CA:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E53C3E1222D746A5EEABB43EDFC93BA4037CACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DDB77BDFECD10C318201A65CED5B8BCE02C4D68E5CC5484F58784D44A4E0861/0/34352e3136362e3131302e302f32342d3234203d3e203135303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:55:fa:79:4f:e6:49:d6:26:a3:9f:e1:55:ed:f5:81:67:b8:
         fa:ef:b9:1a:37:b8:45:4f:ef:4c:72:11:69:73:d6:86:f9:73:
         bf:77:bc:4c:93:c1:83:17:c1:a6:15:da:04:fc:f2:41:81:84:
         84:cb:a5:e8:f2:e7:ec:48:9a:e9:68:31:8d:bb:69:da:44:15:
         77:a9:79:83:f2:bc:09:6f:00:c6:06:a3:ad:3c:10:7a:e1:b5:
         1b:78:76:0c:a8:0b:e1:ba:eb:3a:e1:19:64:f8:a8:c2:e7:7b:
         12:8f:2f:ef:77:da:cf:b4:b8:83:b3:55:f1:7c:a9:a9:5c:e0:
         76:05:07:d7:11:3f:05:ba:b3:a9:6e:61:f9:bf:6f:9b:59:66:
         45:94:24:f2:59:38:a7:4c:6f:e6:65:6e:b0:98:ce:40:52:d8:
         ec:49:35:0a:34:b1:42:30:22:c0:18:98:6f:e1:17:f0:47:86:
         09:a2:3c:e1:29:98:3f:57:2b:00:cf:1e:3f:92:8c:56:68:5b:
         c2:3a:8f:61:e7:d3:82:11:69:d7:65:12:96:f5:3c:e1:c6:b1:
         f5:34:e8:76:ba:82:2f:64:9d:8b:39:f6:05:43:94:73:9f:57:
         d4:19:c5:3e:d2:2d:fc:0d:06:10:a3:f3:6c:d0:25:7d:d5:88:
         5c:97:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:57 2025 by rpki-client