Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31382e302f32342d3234203d3e20323635383639.roa
File:                     34352e3232372e31382e302f32342d3234203d3e20323635383639.roa (raw, json)
Hash identifier:          sXota4/Mm/Pz2poc2r4nh/EicnrVcVPSbZbtDfBlgy8=
Subject key identifier:   1F:C8:BA:C7:D7:09:BF:26:09:03:B8:68:D9:54:53:A6:CA:8D:2B:B7
Certificate issuer:       /CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
Certificate serial:       27EF08011D7C28EF703357F16B6284D3E26373BA
Authority key identifier: E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31382e302f32342d3234203d3e20323635383639.roa
Signing time:             Tue 05 Mar 2024 17:58:12 +0000
ROA not before:           Tue 05 Mar 2024 17:53:12 +0000
ROA not after:            Tue 04 Mar 2025 17:58:12 +0000
asID:                     265869
IP address blocks:        45.227.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:08:01:1d:7c:28:ef:70:33:57:f1:6b:62:84:d3:e2:63:73:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
        Validity
            Not Before: Mar  5 17:53:12 2024 GMT
            Not After : Mar  4 17:58:12 2025 GMT
        Subject: CN=1FC8BAC7D709BF260903B868D95453A6CA8D2BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:f3:42:ab:37:65:11:b2:ff:0c:98:43:5e:
                    94:4e:d8:66:98:0e:ca:e5:c2:c1:3b:ab:25:71:4b:
                    d7:8e:11:e3:36:e4:93:a5:a0:81:e8:e2:ef:d9:ac:
                    19:49:1e:f6:20:d0:58:11:2e:6e:9c:16:ea:df:ec:
                    26:df:dc:d0:88:96:13:74:04:44:cc:48:46:c9:8c:
                    3d:a9:13:a1:47:79:cd:ce:a2:d0:27:fd:d6:a8:44:
                    8f:c8:20:88:8b:78:b3:31:8a:11:73:5c:7b:52:a8:
                    31:5d:a7:fc:43:5b:4d:b7:ab:80:cb:e7:2a:0c:7d:
                    d3:28:f9:7a:7d:e3:86:e4:48:0e:b5:de:d9:ac:4b:
                    9b:1b:e0:ef:80:35:0a:9f:14:5d:86:a5:d8:5f:b2:
                    e6:98:60:28:10:e1:a7:4d:10:fc:ae:46:c6:0e:d1:
                    98:1e:a7:a7:33:00:ff:dd:b8:56:23:df:e6:82:8c:
                    72:63:04:1b:c4:55:ca:f5:9e:a8:10:72:5f:e2:1b:
                    bb:09:a2:d1:a4:68:30:c3:0c:bc:79:0c:05:c3:76:
                    f6:ad:51:f7:d7:45:96:ad:87:05:05:3b:30:01:33:
                    b2:19:75:28:0b:fa:d7:85:82:e1:8e:99:a7:56:90:
                    cf:c9:88:aa:53:3a:36:00:1a:bc:65:6a:f3:d3:02:
                    7a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C8:BA:C7:D7:09:BF:26:09:03:B8:68:D9:54:53:A6:CA:8D:2B:B7
            X509v3 Authority Key Identifier:
                keyid:E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31382e302f32342d3234203d3e20323635383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:50:c2:6e:80:ba:a3:ec:94:08:3c:10:4e:41:3e:06:23:6d:
         f8:42:75:a9:2a:1a:08:1f:70:30:a0:70:42:3e:6d:bb:26:00:
         22:59:ce:c1:db:06:fd:3a:ab:4a:cc:ed:50:58:6b:78:97:65:
         c9:d2:a4:a7:07:d9:cf:c7:a6:7d:61:e5:ba:fd:59:c8:e0:35:
         cb:06:a4:4e:a4:48:85:74:dd:7e:65:4f:e1:1b:86:f3:8d:37:
         49:d0:1e:f0:3e:19:f4:d8:d0:76:87:4d:6f:b1:c8:15:b6:bc:
         c9:37:c8:28:fa:27:b3:af:49:7c:1d:08:69:4d:92:de:24:ba:
         5a:52:09:b9:1a:d3:ae:96:10:95:f2:fa:58:dd:28:65:0e:a7:
         cc:16:8f:08:78:76:6b:41:6b:6f:f8:f0:89:19:7d:b3:56:35:
         38:15:d2:f8:25:20:ab:cb:17:0a:7b:09:53:aa:50:de:03:e8:
         21:96:5e:c9:e0:be:d0:f1:86:ca:ca:06:e7:d8:14:ab:06:a5:
         cb:b7:2c:b2:3e:da:34:de:b1:a1:19:a8:51:8e:f0:bb:87:fa:
         c6:38:f8:42:ce:eb:bb:88:8f:1f:a7:29:e4:3d:ff:5b:1a:bb:
         19:54:95:da:de:e6:fb:01:b8:1f:43:84:3e:38:d6:fa:3a:44:
         45:32:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org