Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa
File:                     34352e3137322e32372e302f32342d3234203d3e20323637383038.roa (raw, json)
Hash identifier:          EbJ0mKqtifxAO4Pt5VJkB1yyGzQF058xtgl0g0/h6Tc=
Subject key identifier:   CF:57:09:5B:31:B4:BA:C8:FD:53:3F:B6:E8:8D:44:C4:B7:7D:31:5F
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       4053CD4C9B430E8A498E4B84DC724354D45AB7FF
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa
Signing time:             Tue 05 Mar 2024 18:13:20 +0000
ROA not before:           Tue 05 Mar 2024 18:08:20 +0000
ROA not after:            Tue 04 Mar 2025 18:13:20 +0000
asID:                     267808
IP address blocks:        45.172.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:cd:4c:9b:43:0e:8a:49:8e:4b:84:dc:72:43:54:d4:5a:b7:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Mar  5 18:08:20 2024 GMT
            Not After : Mar  4 18:13:20 2025 GMT
        Subject: CN=CF57095B31B4BAC8FD533FB6E88D44C4B77D315F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:40:bc:3f:e2:f1:a2:68:9c:ac:7c:8a:5d:
                    3a:e6:24:77:16:c0:9d:6f:6e:63:68:07:60:58:6b:
                    44:f2:1d:e7:77:61:c4:c0:d5:be:87:c5:db:ab:c3:
                    d2:77:c5:0b:b1:ab:48:fd:7e:6d:e8:ab:20:08:61:
                    49:87:3f:e8:0a:f9:14:27:5e:14:c7:0a:e7:89:aa:
                    f3:61:cf:1e:25:bb:f3:de:f3:ce:91:92:14:db:61:
                    c3:6c:c9:62:6b:6b:26:6c:da:3b:41:cd:a3:45:4f:
                    36:28:7e:44:78:29:4d:dc:01:23:08:e3:f5:5a:1a:
                    c4:94:b0:bb:52:d1:ff:1d:63:f9:84:36:c9:84:c3:
                    82:3d:21:4f:c6:f7:81:8b:dc:58:b5:73:da:94:e2:
                    e1:b0:b8:58:5d:a6:c9:5d:a2:18:f7:31:5b:6b:a1:
                    64:27:8c:b3:21:75:e0:d4:91:7e:fe:4a:9c:7c:9a:
                    03:4d:ba:2e:c1:de:d6:b0:1f:7a:0d:6b:44:9e:69:
                    fc:bb:b7:c7:7b:a5:32:11:7d:b6:d4:3f:fd:5c:13:
                    cd:6c:bc:2f:c8:89:a6:3c:da:e0:04:e7:24:98:f3:
                    39:5e:cd:fb:62:d2:ab:06:c4:8b:01:a4:66:8e:3f:
                    14:51:16:26:6c:86:c4:7b:53:4f:e1:09:de:77:6f:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:57:09:5B:31:B4:BA:C8:FD:53:3F:B6:E8:8D:44:C4:B7:7D:31:5F
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:fd:bc:99:3a:19:fa:cc:a8:2c:82:35:86:93:6e:c8:d5:f2:
         ca:af:3b:f7:b3:2d:d0:3f:46:2d:a2:64:7d:53:c1:33:8d:94:
         29:f7:3c:81:15:e8:91:ed:ff:36:6d:ce:df:75:2c:f6:3e:9b:
         30:f2:ac:c0:82:19:16:19:a8:d2:8d:0f:a0:ec:51:2b:ac:95:
         9e:67:30:f9:da:77:2e:28:69:75:fb:f8:a1:45:48:19:56:05:
         c2:54:60:ca:24:c3:14:73:63:7b:84:04:c3:65:a9:38:7b:b9:
         50:64:01:f5:b7:23:ea:9d:1f:a0:8a:60:aa:ae:9f:69:b2:99:
         d0:70:17:19:33:90:d7:5a:ae:a4:58:6c:72:ea:50:56:09:c9:
         d9:1a:de:d3:55:e3:54:8a:1f:7c:79:ef:5c:d5:28:af:db:4d:
         a1:07:a5:f9:b5:3e:cc:4b:60:fe:83:55:cd:de:4d:0c:da:4d:
         23:14:71:36:3e:a8:4e:e6:3b:c3:ac:1a:3c:73:ad:8e:db:5d:
         8f:38:aa:f4:c6:12:22:25:96:30:e4:b3:b6:14:fb:9c:c1:05:
         a7:28:ac:86:f2:02:40:e6:66:e9:e4:92:9d:0f:57:24:9c:d5:
         41:f9:42:3b:91:fd:28:5a:9b:07:d4:61:c3:28:c2:8b:06:da:
         88:50:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org