Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3234203d3e20323637373331.roa
File:                     34352e3136362e37362e302f32332d3234203d3e20323637373331.roa (raw, json)
Hash identifier:          rUqZofg0xB5yE+XxFUey08xvMkui6UZ9zpLJciYGQoY=
Subject key identifier:   EB:7E:87:D0:0A:82:33:21:FC:39:6F:11:7D:53:96:59:8C:4D:12:7F
Certificate issuer:       /CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
Certificate serial:       2C44C9E8873515CB2D5F3DC8A5F94E113E1AE695
Authority key identifier: 1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3234203d3e20323637373331.roa
Signing time:             Tue 05 Mar 2024 18:02:02 +0000
ROA not before:           Tue 05 Mar 2024 17:57:02 +0000
ROA not after:            Tue 04 Mar 2025 18:02:02 +0000
asID:                     267731
IP address blocks:        45.166.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:44:c9:e8:87:35:15:cb:2d:5f:3d:c8:a5:f9:4e:11:3e:1a:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB
        Validity
            Not Before: Mar  5 17:57:02 2024 GMT
            Not After : Mar  4 18:02:02 2025 GMT
        Subject: CN=EB7E87D00A823321FC396F117D5396598C4D127F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cd:39:45:10:4f:13:b8:26:25:26:f2:44:1c:
                    2a:80:25:86:3a:a5:3f:df:07:ce:c1:9b:5c:01:c9:
                    36:ea:aa:c6:02:7b:2d:d0:19:14:ef:12:0c:6d:e4:
                    95:e4:3f:f0:6a:1e:d9:9c:03:de:8a:12:0e:fb:77:
                    b3:2e:8a:a2:d6:d3:2d:07:c0:69:5d:ed:c7:a6:d6:
                    c4:07:9a:54:d3:3b:af:fd:98:6d:9d:ac:c8:7c:df:
                    e9:a4:b6:f3:c1:61:60:f0:3f:71:c6:29:4d:06:07:
                    27:da:e0:c9:51:ea:e6:6d:ef:07:20:97:cf:da:2d:
                    dc:25:7b:87:af:37:80:6f:57:0a:b6:36:86:3b:91:
                    4b:3f:44:59:8e:9e:69:2b:f3:aa:2b:a1:d0:44:5f:
                    8f:59:fc:2f:19:3c:2e:46:99:11:5b:af:72:fa:0a:
                    e4:0d:5e:d7:7b:c2:c3:ed:5f:f1:15:89:bd:28:61:
                    36:02:25:14:1a:33:42:65:ce:63:fb:16:2b:8d:b6:
                    fc:29:99:da:e1:60:ee:84:fd:a0:35:1c:e1:20:ca:
                    b2:e7:c7:c2:87:44:f7:76:1e:73:42:e3:4a:d9:46:
                    c9:9f:eb:57:00:64:32:6d:13:95:48:00:40:ce:8b:
                    d5:84:83:f5:42:9e:df:93:d5:33:36:d0:89:cb:ea:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7E:87:D0:0A:82:33:21:FC:39:6F:11:7D:53:96:59:8C:4D:12:7F
            X509v3 Authority Key Identifier:
                keyid:1F:5F:5C:11:C4:97:16:D8:46:EA:AF:C3:D8:25:E3:CE:A2:CF:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F5F5C11C49716D846EAAFC3D825E3CEA2CF91DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDB201F6FA82D551FD4804520FA77DE3A67BD1461B64099C5DD9FC5F5FB04F98/0/34352e3136362e37362e302f32332d3234203d3e20323637373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:72:8a:f3:48:a8:09:00:b9:ff:9a:d3:7f:ec:bd:16:a1:27:
         3c:ae:1b:53:3e:d1:c4:8a:d3:bb:89:4d:bb:b8:8d:65:de:f3:
         54:d8:a6:7e:44:44:f3:84:08:c1:90:2c:ad:e4:30:be:e1:26:
         ff:e2:08:fe:10:4f:56:4c:99:0f:50:a5:6c:ba:10:0a:bc:f3:
         f6:1a:09:16:1b:2d:93:36:6e:80:b6:51:e7:b0:62:e0:6a:ed:
         92:eb:41:d8:e0:57:22:cf:32:9a:2e:b5:7d:92:94:3f:17:b0:
         b4:5f:8f:2a:f6:0c:28:a8:14:01:91:db:53:9f:dc:9d:8d:dc:
         3b:7c:1c:58:29:ca:d9:28:79:ff:c5:a5:2a:c7:3e:3d:ba:da:
         61:4c:84:02:dd:77:7d:9b:75:f9:ac:21:cf:5d:79:cd:c4:3f:
         bf:3a:ce:99:ac:c1:9c:80:c6:d3:52:4c:22:a4:b9:dc:28:ee:
         22:40:4c:92:cc:ff:1a:ea:fd:d3:85:c4:58:36:aa:20:d6:e6:
         80:6b:04:37:2a:0d:6f:69:4c:bc:1f:dd:23:10:04:3b:e2:52:
         6b:aa:60:0d:15:5d:10:0a:1c:b2:c1:a8:5c:e7:5c:af:87:b7:
         68:fc:b1:63:a7:44:ba:0c:94:09:59:81:3a:e3:9c:00:e7:a5:
         f5:30:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org