Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138352e302f32342d3234203d3e20323636373836.roa
File:                     34352e3232362e3138352e302f32342d3234203d3e20323636373836.roa (raw, json)
Hash identifier:          cpxm9eMdVv6HPjDD/AlJdjWxzoKPk/i3Pf8HaX7NSS8=
Subject key identifier:   AB:E1:D9:6D:A7:24:C9:26:1D:CA:B2:39:C5:39:DA:09:D6:99:F1:59
Certificate issuer:       /CN=985A06560547E393EA93615CCE79B796AFD39350
Certificate serial:       664471DF479ED2126B6798522637A1520ABD19DC
Authority key identifier: 98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138352e302f32342d3234203d3e20323636373836.roa
Signing time:             Tue 05 Mar 2024 18:01:20 +0000
ROA not before:           Tue 05 Mar 2024 17:56:20 +0000
ROA not after:            Tue 04 Mar 2025 18:01:20 +0000
asID:                     266786
IP address blocks:        45.226.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl
                          rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:44:71:df:47:9e:d2:12:6b:67:98:52:26:37:a1:52:0a:bd:19:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985A06560547E393EA93615CCE79B796AFD39350
        Validity
            Not Before: Mar  5 17:56:20 2024 GMT
            Not After : Mar  4 18:01:20 2025 GMT
        Subject: CN=ABE1D96DA724C9261DCAB239C539DA09D699F159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:89:b5:16:73:f9:d7:44:16:bc:ea:65:24:
                    f0:c0:ca:19:2c:3f:a3:7d:fd:e1:44:d9:03:e1:9f:
                    be:f6:7d:ec:58:59:54:7f:22:19:dd:46:17:11:1a:
                    58:89:2e:d4:6f:cf:20:2c:c7:2b:a0:46:c8:17:74:
                    44:57:62:0a:72:4f:9b:cb:2e:eb:bb:97:07:e0:fe:
                    2f:a9:7b:55:8f:fb:ed:c5:47:73:b2:58:26:24:08:
                    cb:09:39:40:48:7e:8e:42:1c:d7:16:5d:d8:8e:4d:
                    8d:1c:2d:17:ec:b2:61:75:28:10:4c:a1:ef:ce:cc:
                    ae:5f:1e:d5:9e:99:15:3d:9d:e0:24:ae:1c:ca:11:
                    e0:38:05:7a:32:65:7d:56:ec:fd:75:de:43:99:34:
                    0b:7f:18:98:d2:cb:f2:7d:1a:8d:e4:8b:b0:5b:8f:
                    c5:52:92:04:e3:2f:1a:e4:c2:63:db:69:34:33:ca:
                    a1:59:19:6e:d5:b0:e4:e3:0f:9c:96:38:bd:9b:14:
                    e2:0a:22:f8:20:d4:1a:15:64:8b:81:87:45:bd:40:
                    7b:67:dc:de:67:73:a8:75:ee:8e:43:7f:e6:9e:33:
                    ac:fd:93:07:d2:91:74:68:65:72:a2:63:16:67:cf:
                    36:75:09:8a:ad:3d:c1:ef:ef:6a:b4:b3:cb:5e:42:
                    19:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E1:D9:6D:A7:24:C9:26:1D:CA:B2:39:C5:39:DA:09:D6:99:F1:59
            X509v3 Authority Key Identifier:
                keyid:98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138352e302f32342d3234203d3e20323636373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:75:64:d3:54:90:f9:55:33:50:a0:b8:0d:2a:b0:59:5d:
         79:cc:8b:3f:09:73:17:fa:d3:f4:72:93:75:2a:ba:13:9a:30:
         a1:96:91:ba:f6:c3:51:36:bb:07:05:e2:1b:20:c0:0c:56:70:
         8a:73:a1:b1:e2:0b:a7:ee:bd:2c:cc:66:26:de:aa:bd:94:ef:
         34:05:bd:5f:8e:f6:a9:c2:5f:a0:dd:04:90:27:ff:7e:c7:19:
         00:38:a2:2a:f0:e9:27:d9:dc:32:57:25:0b:cd:b6:f7:c6:91:
         77:94:79:fd:f3:b7:08:5c:a4:23:c7:cd:38:73:65:37:97:49:
         c1:d9:41:11:63:30:da:0d:ea:2a:32:ea:86:b6:96:0d:89:45:
         9d:63:36:b7:5c:19:f5:77:aa:1d:60:2c:0d:59:93:e6:7a:ac:
         2d:36:b8:cd:a1:92:4f:40:e1:6f:76:b7:72:22:0b:96:3e:98:
         1b:84:72:9d:d6:b9:6b:0f:2a:e1:f4:7d:dd:98:45:c6:ca:16:
         98:e9:cc:a7:a1:61:8f:31:29:65:12:56:d2:b7:2b:1a:3c:b7:
         1b:89:80:fa:08:e7:47:4c:16:35:ba:58:c1:79:9d:70:4e:99:
         cf:57:33:d7:4d:dd:35:1c:d9:29:cc:86:51:13:3d:53:d4:e3:
         fc:6b:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:51:45 2024 by rpki-client on console-ams.rpki-client.org