Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/34352e3137392e3136362e302f32342d3234203d3e20323639373330.roa
File:                     34352e3137392e3136362e302f32342d3234203d3e20323639373330.roa (raw, json)
Hash identifier:          S+2dI4FbHHfl+318xKfOCK2/y9INR/qwpY+zrcAulAU=
Subject key identifier:   9D:97:77:46:A8:9A:C5:8C:2B:CA:B7:02:A5:9B:76:5D:95:FF:32:4E
Certificate issuer:       /CN=71D885ED6F4642A4A627D17FCC92858FF0032B31
Certificate serial:       1ECDC10675C61DA4B471D08C7F5C9381481DFEAB
Authority key identifier: 71:D8:85:ED:6F:46:42:A4:A6:27:D1:7F:CC:92:85:8F:F0:03:2B:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/34352e3137392e3136362e302f32342d3234203d3e20323639373330.roa
Signing time:             Tue 05 Mar 2024 17:54:04 +0000
ROA not before:           Tue 05 Mar 2024 17:49:04 +0000
ROA not after:            Tue 04 Mar 2025 17:54:04 +0000
asID:                     269730
IP address blocks:        45.179.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cd:c1:06:75:c6:1d:a4:b4:71:d0:8c:7f:5c:93:81:48:1d:fe:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D885ED6F4642A4A627D17FCC92858FF0032B31
        Validity
            Not Before: Mar  5 17:49:04 2024 GMT
            Not After : Mar  4 17:54:04 2025 GMT
        Subject: CN=9D977746A89AC58C2BCAB702A59B765D95FF324E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:65:d9:e7:46:40:2e:62:36:57:7f:a3:2e:
                    67:bc:19:32:c2:34:97:12:ce:cb:1f:1a:72:95:e4:
                    37:ce:ab:65:65:af:26:f0:dc:d7:33:38:59:f8:ec:
                    5a:dc:eb:66:ce:66:14:0a:8e:9b:c9:cd:fb:74:4b:
                    ec:d7:60:f9:a5:f1:53:75:51:71:84:b9:e3:6e:ac:
                    58:67:ad:cd:29:45:d3:3f:cf:ad:93:1d:0a:ec:a0:
                    8a:ee:db:75:e9:b1:76:0c:f1:32:b5:5f:ea:50:cc:
                    a9:7b:f2:81:dd:87:d7:e6:eb:96:47:ca:93:25:5b:
                    03:bf:3d:26:11:7c:b1:63:77:58:2e:ee:49:60:80:
                    a9:5c:fa:89:f4:ce:aa:ab:fc:d1:9b:a0:5b:9d:34:
                    df:19:7e:f2:cb:ef:8c:f2:a7:8d:a6:a7:6c:ca:77:
                    ea:0c:62:0b:91:3f:a8:16:1a:f0:4e:09:28:ee:ce:
                    6f:5c:b3:2c:d0:f0:14:0e:49:7b:af:e8:c7:e4:f8:
                    f8:d7:a0:03:4c:94:8e:e6:64:fd:67:8e:04:88:5f:
                    ab:ae:52:d1:c1:9d:a4:97:16:06:a2:ec:fa:d6:af:
                    0f:68:ad:0f:4b:55:96:d1:12:f6:4d:7c:0e:36:41:
                    10:96:a6:a8:fa:49:75:dd:8f:44:92:b9:36:09:9c:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:97:77:46:A8:9A:C5:8C:2B:CA:B7:02:A5:9B:76:5D:95:FF:32:4E
            X509v3 Authority Key Identifier:
                keyid:71:D8:85:ED:6F:46:42:A4:A6:27:D1:7F:CC:92:85:8F:F0:03:2B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/71D885ED6F4642A4A627D17FCC92858FF0032B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0AA0A66C1C02D2F0667BDF6DAFDD67C2A813FEFBED6D0F463951A042884077C/0/34352e3137392e3136362e302f32342d3234203d3e20323639373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:74:0c:a0:a5:10:aa:83:bf:a1:bd:e7:8f:b9:a6:0e:53:c1:
         99:86:89:a6:b4:f4:8e:ba:34:13:ff:e7:dc:75:81:55:32:3d:
         5a:c1:fd:47:1d:a3:97:8e:2c:66:f1:44:dd:f8:ea:7a:ec:ef:
         29:1a:20:4e:08:04:65:24:2d:4b:2b:c5:a9:d5:e9:cb:8f:e2:
         c5:4d:7a:88:f5:9a:88:1c:30:62:5b:cb:97:66:9f:dc:3d:7d:
         a4:96:4f:5b:0d:2d:5b:e0:32:07:f3:47:4c:5e:b8:aa:ea:bf:
         a1:00:e0:f6:cd:b4:d1:43:93:bb:2f:ae:52:b9:2d:da:36:87:
         df:2c:6b:7a:df:0e:62:b3:2e:40:69:d6:33:ac:50:6c:db:7e:
         9e:f3:81:54:c7:d6:d8:71:7a:fa:45:db:cc:21:cb:57:e3:f9:
         01:8a:67:ce:f0:40:fa:99:a2:fd:0b:3b:d5:12:80:43:35:23:
         e8:c2:f3:f2:aa:da:58:dc:f7:50:61:58:c0:82:f9:75:7c:33:
         74:3e:45:ce:ba:46:47:ef:80:3c:e9:a2:43:a6:fb:ce:56:4c:
         6a:49:a4:b5:05:3b:fe:cc:89:d0:6b:13:33:fb:e0:26:4f:97:
         84:46:33:ea:9c:81:89:77:49:ef:af:83:55:20:4e:4d:c1:77:
         ef:20:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:11 2024 by rpki-client on console-ams.rpki-client.org