Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134372e36342f32372d3237203d3e20323634373332.roa
File:                     34352e3137372e3134372e36342f32372d3237203d3e20323634373332.roa (raw, json)
Hash identifier:          G7izwwveEaVfC5tDMj1aG6K5C2o2LVpC+tCs/LM9c5M=
Subject key identifier:   01:A2:3D:74:23:C8:02:C0:48:64:BA:DA:38:39:1F:3C:8F:9A:09:93
Certificate issuer:       /CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
Certificate serial:       5D95B0021B5590D1A2860D2CAD14ADEC1901F0B7
Authority key identifier: 1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134372e36342f32372d3237203d3e20323634373332.roa
Signing time:             Tue 05 Mar 2024 17:41:07 +0000
ROA not before:           Tue 05 Mar 2024 17:36:07 +0000
ROA not after:            Tue 04 Mar 2025 17:41:07 +0000
asID:                     264732
IP address blocks:        45.177.147.64/27 maxlen: 27

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Jun 2024 07:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:95:b0:02:1b:55:90:d1:a2:86:0d:2c:ad:14:ad:ec:19:01:f0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
        Validity
            Not Before: Mar  5 17:36:07 2024 GMT
            Not After : Mar  4 17:41:07 2025 GMT
        Subject: CN=01A23D7423C802C04864BADA38391F3C8F9A0993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ec:fc:0e:03:6a:ea:e3:3f:5f:cb:5a:94:ca:
                    43:9e:8a:fc:ca:e0:8d:f4:83:f0:6e:36:a1:c8:4c:
                    0b:18:5c:6b:b6:15:0d:b8:6e:1c:c9:65:8a:63:53:
                    b3:cc:a9:1e:af:8e:b5:60:9d:c7:6f:71:fc:e1:49:
                    21:5d:7f:0b:c8:fe:0e:54:09:ba:e0:c2:28:3d:11:
                    b8:a9:b1:12:00:d0:c6:81:0c:31:76:ee:b0:97:5d:
                    d6:f3:87:e1:1e:52:b7:a9:b5:ec:22:13:5c:b2:ee:
                    54:ed:3a:c7:3b:fe:58:18:48:89:f9:11:c6:a4:15:
                    84:e2:69:ae:5b:49:f1:41:0b:44:ff:a7:2e:8f:f3:
                    8d:f4:35:51:22:e7:c6:30:f5:46:75:4c:84:13:90:
                    31:b3:4f:a6:83:cb:95:9f:11:1e:82:7f:cc:78:95:
                    cd:75:d3:85:ef:e5:74:04:0f:fb:27:40:bc:9d:93:
                    4f:d6:f5:a8:a6:ca:44:29:a3:20:52:d4:13:7f:2b:
                    98:da:db:b9:92:aa:24:e9:0c:53:83:94:b9:45:d8:
                    49:a4:83:59:43:dc:41:28:12:f4:e8:22:e4:8a:8e:
                    cf:40:a2:d6:48:f5:2d:53:1f:28:64:59:01:84:1c:
                    12:4e:b3:70:1b:ce:ff:ca:c2:0d:74:79:66:c9:08:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A2:3D:74:23:C8:02:C0:48:64:BA:DA:38:39:1F:3C:8F:9A:09:93
            X509v3 Authority Key Identifier:
                keyid:1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/34352e3137372e3134372e36342f32372d3237203d3e20323634373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.147.64/27

    Signature Algorithm: sha256WithRSAEncryption
         7a:9f:ab:74:c0:ac:95:9a:33:7d:22:0e:3f:08:5a:97:31:c0:
         e2:21:1a:4e:c4:47:97:29:69:ad:23:df:04:24:f4:8b:8a:60:
         8f:d0:c1:df:4e:76:81:7c:06:02:05:d4:99:58:c2:29:8c:f4:
         c8:3d:6f:25:72:d9:06:d4:33:4c:0b:8c:93:a6:6e:fa:39:3d:
         1b:c6:ea:cd:56:f8:29:93:4a:1e:35:9e:d4:ed:a6:62:e3:b6:
         70:ed:05:ae:2a:ee:c3:d9:d9:f3:4e:90:a4:ed:bb:fb:9f:4a:
         2d:9d:c2:3c:75:f1:25:57:d9:45:1e:8b:d1:c6:80:2f:ac:d5:
         87:ab:9d:c8:bb:4e:5a:ac:56:8a:8c:12:2a:08:1b:9b:d3:25:
         5f:da:79:94:28:58:ee:cb:8b:52:65:48:9b:a6:7c:96:62:f7:
         c4:4b:84:fc:a8:37:43:34:4f:12:36:af:d8:af:3e:4f:6b:b0:
         64:f3:b5:28:7e:bb:7a:b8:54:4e:0a:84:5f:cf:7c:58:ec:5e:
         d1:6e:14:92:62:2c:cf:ed:ea:35:c2:7f:aa:51:af:06:2b:40:
         08:dc:cc:c0:e2:bf:da:c9:c2:c1:b8:34:fb:08:a9:bd:ac:60:
         49:40:8d:90:44:23:90:1b:b7:93:31:87:2d:ea:de:91:60:ae:
         fa:79:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 07:36:22 2024 by rpki-client on console-ams.rpki-client.org