Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272945.roa
File:                     AS272945.roa (raw, json)
Hash identifier:          NxjElhGvdi2vxVEjhIF6e65md3Lug88jADDdSx0Eyec=
Subject key identifier:   D3:9B:00:D9:58:E4:F3:D3:19:1C:32:A1:48:E2:EE:84:A8:B2:09:0A
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       7F846CE693533873436A2A5AAE93C9B34EDF1A2C
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272945.roa
Signing time:             Tue 05 Mar 2024 18:07:55 +0000
ROA not before:           Tue 05 Mar 2024 18:02:55 +0000
ROA not after:            Tue 04 Mar 2025 18:07:55 +0000
asID:                     272945
IP address blocks:        179.40.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:84:6c:e6:93:53:38:73:43:6a:2a:5a:ae:93:c9:b3:4e:df:1a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Mar  5 18:02:55 2024 GMT
            Not After : Mar  4 18:07:55 2025 GMT
        Subject: CN=D39B00D958E4F3D3191C32A148E2EE84A8B2090A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:cf:80:fb:62:0d:f6:70:6f:d1:68:c5:2a:
                    48:1b:a8:3c:0b:27:e3:51:86:b7:4b:ea:1f:b9:f7:
                    e7:c0:28:38:c3:3f:99:e4:1b:36:00:32:20:81:26:
                    22:28:fd:cc:5b:da:00:4e:75:08:db:d3:91:8a:e6:
                    21:2d:36:92:3c:e4:62:76:6c:7d:b2:60:96:db:a1:
                    d6:bf:3e:57:46:02:d4:ac:51:74:c5:20:f1:08:a3:
                    d6:29:1e:58:33:b2:e2:d9:2f:2c:05:22:ca:95:ef:
                    cc:19:43:e3:b4:bf:8a:b7:54:52:91:6c:ba:00:ce:
                    ba:af:da:7f:39:b3:72:2e:76:16:6f:fa:28:cd:aa:
                    8e:0b:89:b3:4f:9b:fe:31:55:c4:d8:21:9e:d3:f0:
                    b0:da:c7:16:c3:58:9c:0a:58:b4:0f:d1:ec:fe:d2:
                    74:b4:d5:03:db:33:8e:39:69:50:70:90:de:4e:05:
                    98:d8:75:34:f1:fd:9c:a8:12:bb:9a:11:61:14:b0:
                    80:28:1e:20:d9:a4:7e:48:ed:c2:98:bf:4d:8c:02:
                    14:8e:2f:40:e1:0e:df:29:22:42:dd:27:e6:d9:90:
                    f3:bb:48:38:46:e8:d0:14:b1:14:f8:68:a9:f9:d0:
                    be:6a:b1:85:47:83:67:4f:4c:a9:0b:89:38:99:7c:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:00:D9:58:E4:F3:D3:19:1C:32:A1:48:E2:EE:84:A8:B2:09:0A
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS272945.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:72:51:c7:c6:a2:9d:c1:0d:97:86:dc:24:13:e0:d1:b0:
         9d:97:98:5d:d1:a1:62:4d:57:f6:52:60:8e:20:9c:14:9d:87:
         99:61:c8:b8:f5:20:84:02:b2:b4:d1:11:a9:c4:ba:c1:21:97:
         f1:3d:b7:8b:37:da:39:95:0c:f0:bd:9a:38:af:d4:a0:98:db:
         e3:8e:85:dd:3a:48:b9:d7:3a:8b:ab:1a:b4:3a:b0:c3:b2:39:
         af:6b:82:99:c5:19:c2:4c:39:38:50:17:3a:5a:f6:7b:6c:41:
         b2:97:69:61:30:83:70:d5:8a:49:eb:6c:b5:5e:13:90:c3:f7:
         55:90:ee:4c:9c:ff:6e:4f:04:6e:0b:e5:c4:8e:23:26:b5:c5:
         be:78:d6:19:b8:63:cb:1d:3b:4e:2b:2b:96:6c:1f:ad:00:37:
         e1:35:8d:52:92:4b:84:fa:1e:2f:a9:9c:ed:ee:2c:ac:50:65:
         a9:b2:fd:f1:b7:0b:25:89:0d:2a:ca:a9:f5:a1:47:a2:3f:8a:
         8f:a3:3a:a9:c9:5a:bc:09:e9:85:4d:00:d9:c9:b5:e9:a2:05:
         74:a8:7f:d3:d0:a9:17:67:13:90:82:ba:7f:a3:48:c9:4b:7f:
         89:da:92:11:df:03:d6:be:1c:da:61:73:d6:12:e0:f1:35:66:
         12:9b:03:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org