Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/34352e3232362e3137362e302f32322d3232203d3e20323639373435.roa
File:                     34352e3232362e3137362e302f32322d3232203d3e20323639373435.roa (raw, json)
Hash identifier:          17ETddsZHmyfoMuNgWi1lPwGgT086tj/tUMTQlUSz6I=
Subject key identifier:   7D:EF:53:E5:90:2C:3A:4D:FD:16:1E:FF:9A:80:1C:A3:D8:70:54:C6
Certificate issuer:       /CN=9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130
Certificate serial:       6257E9E44FE7FF58E9D0195C070155E8518DECDC
Authority key identifier: 9A:6E:BF:99:07:6B:09:A5:1C:AE:9A:3E:21:C8:CC:5B:2F:66:11:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/34352e3232362e3137362e302f32322d3232203d3e20323639373435.roa
Signing time:             Tue 05 Mar 2024 17:56:27 +0000
ROA not before:           Tue 05 Mar 2024 17:51:27 +0000
ROA not after:            Tue 04 Mar 2025 17:56:27 +0000
asID:                     269745
IP address blocks:        45.226.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.crl
                          rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:57:e9:e4:4f:e7:ff:58:e9:d0:19:5c:07:01:55:e8:51:8d:ec:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130
        Validity
            Not Before: Mar  5 17:51:27 2024 GMT
            Not After : Mar  4 17:56:27 2025 GMT
        Subject: CN=7DEF53E5902C3A4DFD161EFF9A801CA3D87054C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:64:22:5c:70:09:7e:f0:50:c0:ad:7a:d9:a6:
                    98:33:5d:57:db:ff:9b:ef:08:f5:b1:ca:3b:38:ec:
                    18:f6:31:fb:88:b5:c7:cd:a2:ba:1c:94:08:d8:d3:
                    33:2f:a1:e2:ad:d2:ba:1d:e7:ed:9c:49:07:ea:d9:
                    d7:66:85:f2:29:c0:13:01:ee:d8:27:85:4b:d7:33:
                    55:63:e2:03:e0:af:62:c8:4f:06:fb:8f:b3:b4:e1:
                    ea:20:97:2b:f4:e8:af:1d:a1:d4:42:f3:6c:7b:2b:
                    33:3b:10:f5:95:d9:68:85:9d:7d:52:3f:42:a4:5b:
                    56:cf:18:e4:8c:4c:f8:a0:79:22:9b:12:d1:b2:51:
                    44:5c:9b:24:73:d4:59:af:b8:db:1a:e2:d4:3a:c4:
                    60:4e:c6:3e:8e:34:de:50:e5:10:a7:e5:30:28:1a:
                    34:4b:77:c3:86:96:e1:de:9a:4a:f1:0a:6c:3f:21:
                    a5:a0:5f:92:a1:97:14:23:dd:35:36:d0:86:a1:f5:
                    4e:cb:7a:4f:9b:2b:da:b1:79:82:4d:60:8e:ed:9c:
                    5d:d5:06:c4:49:14:a6:4c:7d:9e:30:ea:97:ee:30:
                    d3:a1:ff:b1:36:1a:9f:a0:7a:c0:dd:b7:53:48:c4:
                    7b:88:01:d8:0c:8e:77:63:99:92:23:01:1b:26:e3:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EF:53:E5:90:2C:3A:4D:FD:16:1E:FF:9A:80:1C:A3:D8:70:54:C6
            X509v3 Authority Key Identifier:
                keyid:9A:6E:BF:99:07:6B:09:A5:1C:AE:9A:3E:21:C8:CC:5B:2F:66:11:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/34352e3232362e3137362e302f32322d3232203d3e20323639373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:4e:75:2f:60:28:42:10:9e:89:5f:c5:c5:f8:13:e8:62:ac:
         a2:17:93:99:83:b9:6e:0d:04:aa:78:bf:b3:e0:b1:ef:6e:3b:
         9b:db:db:8c:52:e9:b5:52:b9:aa:c6:e9:39:e5:39:09:8a:37:
         ad:d5:77:82:b7:94:c4:2f:c9:bd:dd:b7:b6:e2:54:c0:1a:d5:
         bd:51:85:36:90:ad:4d:1c:ea:23:15:24:19:50:27:b0:35:0c:
         34:72:f0:fc:54:53:4f:cd:91:bc:6a:a6:f8:f2:e2:78:1c:4a:
         43:b1:66:7a:d3:ef:12:8b:e9:a5:8a:15:bc:ca:b9:54:1f:f6:
         e5:0e:ef:ed:08:28:80:07:b0:b7:d1:90:76:39:17:c5:9a:37:
         7f:dd:35:0c:11:ff:5a:9e:ea:42:b4:5f:b0:ad:70:18:ce:33:
         8b:c0:0c:27:1a:e1:91:c7:98:30:2e:3a:df:f6:57:f7:ab:5c:
         e6:76:ff:76:f8:7b:cf:c7:ee:3c:ed:2d:b6:41:5c:3c:59:2a:
         3a:a5:17:cf:e6:7d:89:c1:7e:78:b9:a4:18:6b:d1:78:b2:f0:
         13:a0:18:d4:97:1b:5e:fa:bf:1b:8c:d2:f1:c3:03:89:b7:dc:
         0b:41:0c:81:1d:c9:c5:d7:7d:73:7b:a8:cd:30:0b:be:c5:0e:
         5b:23:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:43 2024 by rpki-client on console-fra.rpki-client.org