Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31372e302f32342d3234203d3e20323636363835.roa
File:                     34352e3232382e31372e302f32342d3234203d3e20323636363835.roa (raw, json)
Hash identifier:          GP7L7S/Jw3e54H1ayUC6DJTM/hYV0mSFj3gHtX2O3aI=
Subject key identifier:   EF:EF:23:CF:20:66:C1:DD:81:E8:FA:4A:B1:2F:2E:93:05:43:95:33
Certificate issuer:       /CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
Certificate serial:       3607428D12D438969806693172FFE8F3F076E667
Authority key identifier: A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31372e302f32342d3234203d3e20323636363835.roa
Signing time:             Tue 05 Mar 2024 17:43:04 +0000
ROA not before:           Tue 05 Mar 2024 17:38:04 +0000
ROA not after:            Tue 04 Mar 2025 17:43:04 +0000
asID:                     266685
IP address blocks:        45.228.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:07:42:8d:12:d4:38:96:98:06:69:31:72:ff:e8:f3:f0:76:e6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA82506B0E7F6BACFA600950807C98CE9C2B3
        Validity
            Not Before: Mar  5 17:38:04 2024 GMT
            Not After : Mar  4 17:43:04 2025 GMT
        Subject: CN=EFEF23CF2066C1DD81E8FA4AB12F2E9305439533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:32:d0:73:d6:0d:fe:36:fa:f2:38:6d:0d:
                    df:16:93:4b:6f:08:0c:66:77:04:78:60:60:1b:d5:
                    f6:02:29:51:7b:63:a6:c8:f1:c5:b8:6d:b9:30:1c:
                    a9:21:cd:47:51:77:42:f9:94:a5:42:ab:f3:ef:a0:
                    03:44:8d:f1:fe:e8:3f:ed:0b:48:bf:2b:40:d5:fc:
                    d6:d0:56:87:7a:3d:2f:14:84:e4:b3:57:e5:99:29:
                    0f:ab:13:6c:b7:7b:23:fd:ab:f3:87:4a:3f:de:8a:
                    3d:91:94:4f:fd:19:50:b3:8f:3b:ea:40:00:12:e2:
                    87:22:b4:b2:96:96:b3:43:10:56:46:92:7d:54:4d:
                    ba:e4:63:80:ab:7c:97:b7:b6:ec:be:a9:bd:74:53:
                    e3:da:d3:af:f9:d7:3e:bd:f7:07:76:74:36:48:57:
                    50:71:11:58:bc:e9:5e:94:49:29:51:c5:57:d0:b8:
                    85:24:42:cd:63:80:54:0f:00:f9:cc:bf:60:1b:9a:
                    52:2a:a2:ce:91:b9:a0:25:00:42:2f:c9:5b:e7:88:
                    78:52:f9:ae:0c:13:a3:a6:6c:a4:8b:a9:0e:c7:4e:
                    25:81:37:23:0e:9c:fb:94:04:dd:52:17:de:1e:4e:
                    64:56:8c:4f:54:0d:be:d7:fe:47:9f:df:79:02:54:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:23:CF:20:66:C1:DD:81:E8:FA:4A:B1:2F:2E:93:05:43:95:33
            X509v3 Authority Key Identifier:
                keyid:A9:1E:A8:25:06:B0:E7:F6:BA:CF:A6:00:95:08:07:C9:8C:E9:C2:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A91EA82506B0E7F6BACFA600950807C98CE9C2B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B4592EA1FBE99BB0E6E1524335D45CE6025A2A7399D3206FDF8C111D7D90E45/0/34352e3232382e31372e302f32342d3234203d3e20323636363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7a:8d:ad:29:fd:00:a3:52:24:67:59:9a:17:0f:97:df:50:
         35:ad:a3:83:17:a2:57:16:ea:a8:f3:f9:b9:d4:d9:39:92:ff:
         ed:56:63:f5:4a:8b:96:63:d4:81:31:b3:b5:3c:a6:0c:c2:f8:
         61:d1:f6:8d:de:41:f3:20:72:cc:50:e5:26:44:c9:f8:83:a8:
         9a:d3:8d:27:4c:89:bf:21:72:2c:2a:6a:f7:a1:18:49:a3:90:
         d0:ff:b7:80:94:97:52:52:d4:d0:4e:3c:b4:fe:bd:38:4f:26:
         fa:6e:a3:f3:24:73:61:32:f0:60:d3:ad:d4:6f:ef:9f:fe:de:
         e8:33:39:ec:e4:32:30:37:d1:8a:95:85:22:2e:38:e2:4b:8a:
         c9:5b:17:14:a3:54:cf:f5:0d:b7:4b:5b:05:b2:59:37:e2:0f:
         09:e3:fe:f0:2d:94:f2:87:39:d6:06:cb:45:ca:cf:a3:59:a4:
         89:a4:4d:8a:ee:91:ed:b8:1d:c2:bc:27:c2:12:ee:57:4c:d3:
         db:9e:71:a2:12:49:4d:c9:6f:81:87:9e:ee:58:b4:0b:7e:4c:
         e6:e7:a1:c6:8d:47:99:16:7a:e1:46:a0:d7:88:05:63:b5:45:
         0e:a0:b8:69:87:55:44:73:ea:2b:93:da:64:43:f1:50:8a:5e:
         9c:d5:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org