Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa
File:                     34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa (raw, json)
Hash identifier:          MCBwNXvMbAYN4OVXieR0Xwb0LJ3yNM6Q87N3rpM+gJM=
Subject key identifier:   2B:93:49:06:76:53:CE:EB:04:9C:C2:2A:A8:12:FF:72:55:F3:CA:C2
Certificate issuer:       /CN=A03E273474BBDFDE62E65D4B92BF09E5B6DC6421
Certificate serial:       77279DC33244A4733DDAAFCA4BC062F9C7E77AD6
Authority key identifier: A0:3E:27:34:74:BB:DF:DE:62:E6:5D:4B:92:BF:09:E5:B6:DC:64:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa
Signing time:             Tue 05 Mar 2024 17:47:31 +0000
ROA not before:           Tue 05 Mar 2024 17:42:31 +0000
ROA not after:            Tue 04 Mar 2025 17:47:31 +0000
asID:                     269777
IP address blocks:        45.183.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 12:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:27:9d:c3:32:44:a4:73:3d:da:af:ca:4b:c0:62:f9:c7:e7:7a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A03E273474BBDFDE62E65D4B92BF09E5B6DC6421
        Validity
            Not Before: Mar  5 17:42:31 2024 GMT
            Not After : Mar  4 17:47:31 2025 GMT
        Subject: CN=2B9349067653CEEB049CC22AA812FF7255F3CAC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:ef:2b:b8:24:d8:67:24:3e:49:45:ee:66:
                    2d:59:93:1d:0b:cc:9b:51:ce:c4:55:ba:5f:de:54:
                    cd:74:2e:4e:79:66:36:d4:a0:38:f9:27:ad:63:78:
                    5a:9f:48:58:ca:cb:e7:0d:a1:c9:67:16:9b:3a:08:
                    3d:7e:76:52:b7:78:61:2f:e7:e2:b1:ed:14:6b:e1:
                    e4:6e:c5:6a:0a:06:97:c9:91:8c:9b:8a:ec:8c:7d:
                    7a:da:63:12:b0:57:fe:14:13:3e:1b:ae:27:d3:cd:
                    1a:b6:62:35:51:00:c5:4b:02:d9:2b:ad:99:06:9f:
                    bf:ae:5b:60:d6:92:b3:0a:99:c3:26:71:3b:a6:de:
                    ac:dc:c2:d0:99:ab:a5:c1:5f:27:cf:24:a7:af:a0:
                    33:83:8d:8a:ca:a7:7f:e9:5b:3c:fc:3d:e3:45:96:
                    6e:22:67:d5:12:74:2d:f2:66:ea:6d:dd:76:b6:6d:
                    49:de:84:bc:51:31:c6:5b:22:6f:64:5d:1e:bb:38:
                    8a:b6:e5:1b:9f:33:4f:73:20:91:d2:42:f2:46:b8:
                    a7:7c:49:98:20:29:1e:39:c6:da:b4:11:a0:43:0a:
                    70:bb:1a:24:6f:ca:3c:5b:d2:fb:6b:b1:80:30:4e:
                    59:8c:fb:8a:f1:5c:c7:b4:0a:3f:42:fa:e9:57:b5:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:93:49:06:76:53:CE:EB:04:9C:C2:2A:A8:12:FF:72:55:F3:CA:C2
            X509v3 Authority Key Identifier:
                keyid:A0:3E:27:34:74:BB:DF:DE:62:E6:5D:4B:92:BF:09:E5:B6:DC:64:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A03E273474BBDFDE62E65D4B92BF09E5B6DC6421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F1A4C7477FCA32AE59DF430EB6B4E46023A9340755706B493F9775064B1BD16/0/34352e3138332e3234372e302f32342d3234203d3e20323639373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:7d:21:e1:b4:ff:a2:9e:87:b5:6b:4c:44:0b:ab:3e:cf:b0:
         1f:fb:28:5d:c0:37:16:0d:22:63:70:50:38:68:42:2b:37:4e:
         fd:c7:70:a6:98:ab:a0:2f:7a:e2:35:1c:f4:d7:7e:7e:a0:2a:
         19:8e:70:c1:64:06:7c:1c:67:ae:0c:61:32:34:fa:c1:d4:ab:
         04:4a:37:81:be:d6:19:dd:37:b2:4c:cc:24:22:7c:4d:31:0d:
         e4:94:f2:6e:5a:31:cc:b1:dc:a8:25:df:d2:a6:a0:1f:b8:82:
         2a:e2:c6:fd:50:07:03:a5:f3:00:8b:56:14:42:b2:08:84:b8:
         74:fe:70:e1:9d:e4:2f:10:73:d2:5d:f7:97:27:eb:61:b3:12:
         6e:c2:79:4e:74:28:d8:bf:87:c0:5f:94:1c:71:3f:a9:85:e3:
         45:92:c7:05:b1:0d:10:a2:1b:88:74:b2:5a:ad:cd:a6:5d:ff:
         f6:91:1f:6c:1f:69:6d:77:12:28:a5:f5:5d:d9:3f:91:22:3a:
         b2:7c:db:fa:9f:d6:2b:8f:37:c9:ec:4c:42:e1:f5:18:e9:5f:
         e0:7b:76:af:b5:0b:a0:c9:1d:cf:6d:09:69:a7:87:d6:d9:1a:
         68:40:16:d3:8b:35:41:a1:03:fa:2a:fc:05:30:99:a6:37:ae:
         15:d3:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:11:53 2024 by rpki-client on console-ams.rpki-client.org