Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32342d3234203d3e20323637383738.roa
File:                     34352e3137352e3134382e302f32342d3234203d3e20323637383738.roa (raw, json)
Hash identifier:          mympRuBspeC+F6vXvJbXrlSUJIIwJo53NqxHMrMDPmU=
Subject key identifier:   A1:5F:C5:E6:EB:1B:6E:2C:1B:E6:AC:7B:F7:D5:12:51:0E:10:A6:A9
Certificate issuer:       /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial:       02C9ECF23D803C781834AF9B7315ADBE24B9E4AD
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32342d3234203d3e20323637383738.roa
Signing time:             Tue 05 Mar 2024 17:50:58 +0000
ROA not before:           Tue 05 Mar 2024 17:45:58 +0000
ROA not after:            Tue 04 Mar 2025 17:50:58 +0000
asID:                     267878
IP address blocks:        45.175.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c9:ec:f2:3d:80:3c:78:18:34:af:9b:73:15:ad:be:24:b9:e4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
        Validity
            Not Before: Mar  5 17:45:58 2024 GMT
            Not After : Mar  4 17:50:58 2025 GMT
        Subject: CN=A15FC5E6EB1B6E2C1BE6AC7BF7D512510E10A6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:f5:39:d0:0e:5e:b8:63:f4:83:15:65:35:
                    9e:92:de:53:a2:65:02:6b:e8:a5:f1:88:27:54:99:
                    83:97:cf:f3:85:7e:06:77:db:68:14:cd:07:50:4e:
                    51:c0:82:27:d0:01:64:b8:29:e4:4b:e4:12:64:8e:
                    46:49:b7:96:12:2b:e2:9a:aa:51:e8:b5:f3:18:07:
                    00:66:76:dc:70:8b:63:5f:38:c4:0d:58:8c:a4:95:
                    72:0a:16:d7:91:75:f0:0e:65:fd:7b:15:82:48:1b:
                    84:4f:04:92:22:1c:4f:ec:18:1b:61:2e:5b:b1:3e:
                    3b:0a:58:f5:67:36:39:fc:b9:4f:e3:c8:fa:3d:f1:
                    dd:f4:28:69:5c:e9:1b:ce:46:c6:30:10:86:95:0d:
                    fe:ca:1a:87:30:12:2b:01:fd:3e:40:ef:2b:a4:40:
                    28:89:b7:48:6c:85:37:42:0e:58:9c:0c:cc:e3:a5:
                    1e:6b:d7:c9:c5:12:41:9f:6c:8e:09:a8:9e:93:ea:
                    5f:f1:90:3d:6b:3c:b4:68:b3:f2:ae:b5:e6:74:af:
                    51:99:d3:84:67:d6:7f:35:8d:11:ef:e1:a6:85:25:
                    20:51:ac:02:a7:2b:6e:ed:23:39:9a:98:4c:a0:b7:
                    fb:ff:ab:7a:a9:19:fd:3b:e4:eb:f4:87:90:29:53:
                    79:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:C5:E6:EB:1B:6E:2C:1B:E6:AC:7B:F7:D5:12:51:0E:10:A6:A9
            X509v3 Authority Key Identifier:
                keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3134382e302f32342d3234203d3e20323637383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f4:f7:ad:7a:ae:52:d3:9a:b1:fc:f5:e1:0f:41:fb:81:50:
         c6:19:e9:19:9d:65:55:1c:73:fd:aa:e8:f3:cf:be:b4:63:04:
         bd:c8:10:4d:29:1e:25:ff:88:10:95:9e:9c:54:a1:16:8e:22:
         80:19:df:ad:0f:25:52:50:6f:44:b4:b9:f8:f8:3e:7f:58:22:
         ec:7b:a8:4e:30:8f:c3:d0:18:21:ae:bb:6a:e8:b3:0d:78:cc:
         86:7d:05:30:5c:5a:17:07:5c:f9:1c:11:6f:f3:1e:29:50:bc:
         69:e6:84:9d:aa:ec:02:dc:54:c6:65:db:f0:0b:5b:dc:93:12:
         c0:0f:28:98:1c:29:36:cc:f7:99:57:22:b2:e0:9a:df:cb:57:
         7c:84:0e:d5:0c:85:8f:ae:7f:8c:b0:c9:89:10:23:52:7f:6b:
         d1:9b:39:cf:82:15:48:7c:cc:d9:7e:f6:f6:54:bc:ce:57:30:
         72:11:60:1f:08:d9:2f:54:99:6b:5f:70:31:06:e9:90:86:93:
         2f:02:97:50:51:d7:a5:f2:f7:91:97:8a:ee:16:d8:3b:4f:23:
         d1:dd:79:b1:66:d2:37:ea:fe:bc:8d:65:0f:3d:15:88:13:ae:
         da:5b:1b:c7:eb:d1:94:1b:da:90:f9:b0:f4:b9:67:2f:09:b5:
         df:69:e8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org