Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa
File:                     34352e3232362e3130302e302f32322d3234203d3e203532333237.roa (raw, json)
Hash identifier:          kazf9DydSmUmxIRsRIWu+7hKE0onbaaIqhsFblre57s=
Subject key identifier:   FD:F7:26:95:41:ED:32:FF:C9:41:7D:11:93:8E:39:3A:59:30:0E:FC
Certificate issuer:       /CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
Certificate serial:       568907E18CD84AABB4B389C27943988205233686
Authority key identifier: AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa
Signing time:             Tue 05 Mar 2024 17:55:53 +0000
ROA not before:           Tue 05 Mar 2024 17:50:53 +0000
ROA not after:            Tue 04 Mar 2025 17:55:53 +0000
asID:                     52327
IP address blocks:        45.226.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl
                          rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:07:e1:8c:d8:4a:ab:b4:b3:89:c2:79:43:98:82:05:23:36:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4EF7300DCD3572D25AD9FC9E1544193AD7F414
        Validity
            Not Before: Mar  5 17:50:53 2024 GMT
            Not After : Mar  4 17:55:53 2025 GMT
        Subject: CN=FDF7269541ED32FFC9417D11938E393A59300EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:71:9d:2c:c6:c0:66:da:76:24:2b:74:2a:
                    90:93:b5:5c:ff:20:9d:e3:92:93:30:40:88:d7:03:
                    8e:73:29:0b:49:93:bf:d6:44:c4:35:78:0f:60:7a:
                    34:c8:cf:85:54:be:99:67:60:03:64:b3:1a:e7:ea:
                    7b:88:9b:f7:f6:7f:d7:71:35:f9:0a:ea:09:88:5c:
                    0a:93:32:5e:5f:4c:22:07:45:22:e6:2b:6a:ab:99:
                    46:df:ed:b8:5d:e1:21:75:63:e8:9a:1b:9c:79:bc:
                    a6:f7:e8:40:71:3f:f0:a7:24:6e:de:b0:82:4f:b2:
                    56:a6:02:ab:0a:fd:21:fb:74:79:83:c0:38:e1:df:
                    96:54:e8:78:86:05:3b:c0:8c:fb:48:74:e4:91:d5:
                    bc:a7:3f:ca:82:93:5b:9d:94:e8:8e:a8:ff:7a:10:
                    1c:7e:6a:72:e8:ce:99:85:07:ac:7e:74:b9:33:33:
                    94:db:77:2e:8c:e6:33:b3:6d:e2:50:f0:05:ea:eb:
                    e8:4b:79:b6:18:09:4e:a0:04:65:62:7e:40:35:45:
                    eb:ab:09:db:2b:85:e3:9f:fa:09:fa:bc:2c:0c:5d:
                    eb:50:26:a7:e9:a3:5b:a9:25:d7:44:36:66:43:a7:
                    70:cc:01:f1:8a:96:5e:a6:38:ae:bf:cc:f9:7c:26:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F7:26:95:41:ED:32:FF:C9:41:7D:11:93:8E:39:3A:59:30:0E:FC
            X509v3 Authority Key Identifier:
                keyid:AF:4E:F7:30:0D:CD:35:72:D2:5A:D9:FC:9E:15:44:19:3A:D7:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF4EF7300DCD3572D25AD9FC9E1544193AD7F414.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/933AB30FBE5CE44C1A024B5CDB5EE35ED49FE5128A3E8799E94DE435F359CCAB/0/34352e3232362e3130302e302f32322d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:cb:bc:7e:b4:fd:0b:50:c1:b7:f8:3f:f7:34:0d:6e:d2:13:
         eb:7f:53:1c:bd:eb:5c:b9:ad:ed:ce:74:0f:36:be:5f:09:8e:
         39:30:0a:97:74:25:71:e2:cd:e7:cc:a2:ba:99:1b:6f:9b:2f:
         b3:a7:d7:d7:0e:e9:8f:77:ad:d7:46:7f:82:2c:80:80:ac:e5:
         91:b3:d3:fd:66:7e:ca:71:e1:e3:e2:20:92:65:2e:67:f6:b0:
         4e:75:d5:89:94:75:d1:6d:14:4f:6c:ec:e2:7f:b6:55:31:b3:
         16:6e:6e:e2:4a:17:d4:4a:b3:8c:25:18:e0:2b:f0:8d:74:f7:
         f4:4c:fa:be:b7:8c:93:75:b4:d1:a1:0a:e1:42:50:59:0d:73:
         37:6c:6f:8c:c6:79:04:9d:60:f8:fc:4d:69:a8:47:0f:98:5d:
         2e:f3:27:58:d4:cb:b8:ae:1a:e4:54:d4:37:d4:82:dc:c3:91:
         28:e1:20:4d:e8:53:92:e0:f9:03:71:3d:e0:6b:82:0f:98:eb:
         5b:56:90:a4:3d:5f:5f:9f:26:08:c1:95:03:1f:cf:74:44:86:
         65:fc:46:51:b1:bf:54:97:de:ce:94:c3:b4:3b:c7:f4:b6:9a:
         4c:c5:67:85:d4:27:51:5e:eb:5c:e9:71:be:3f:06:25:a6:72:
         80:ab:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:54:05 2024 by rpki-client on console-fra.rpki-client.org