Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/34352e3232362e3134342e302f32322d3232203d3e20323635383434.roa
File:                     34352e3232362e3134342e302f32322d3232203d3e20323635383434.roa (raw, json)
Hash identifier:          tGSqeFRCY++6818KGh8D+l7hd4DtBTt9fUhCkseVs3k=
Subject key identifier:   19:CB:7F:0B:D2:2F:CD:7B:F3:68:70:1B:BF:64:01:0C:AA:BB:42:6D
Certificate issuer:       /CN=6D2323470778FBF541DC6EF3375B47938B0ADCAF
Certificate serial:       258650F3D71C95CC0829C39E26C4A378E512A7FE
Authority key identifier: 6D:23:23:47:07:78:FB:F5:41:DC:6E:F3:37:5B:47:93:8B:0A:DC:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/34352e3232362e3134342e302f32322d3232203d3e20323635383434.roa
Signing time:             Tue 05 Mar 2024 18:03:12 +0000
ROA not before:           Tue 05 Mar 2024 17:58:12 +0000
ROA not after:            Tue 04 Mar 2025 18:03:12 +0000
asID:                     265844
IP address blocks:        45.226.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:86:50:f3:d7:1c:95:cc:08:29:c3:9e:26:c4:a3:78:e5:12:a7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2323470778FBF541DC6EF3375B47938B0ADCAF
        Validity
            Not Before: Mar  5 17:58:12 2024 GMT
            Not After : Mar  4 18:03:12 2025 GMT
        Subject: CN=19CB7F0BD22FCD7BF368701BBF64010CAABB426D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:d3:a4:fa:ac:c3:ae:2c:63:f1:d4:0b:04:
                    8b:2d:23:6b:3d:26:f0:6b:b6:5c:51:db:36:ac:03:
                    ff:57:9a:ad:80:73:38:ec:f2:35:57:f0:5c:7f:ab:
                    2d:df:54:a7:4a:86:cc:cb:4a:b1:5f:ef:5f:0a:40:
                    c5:ab:64:ff:14:4e:56:58:2c:35:6b:78:5a:91:7f:
                    1f:f7:63:87:05:67:f8:41:3b:89:2a:16:d2:4a:f8:
                    31:84:d3:06:f5:a9:9b:ea:30:7d:aa:59:fb:85:b3:
                    ca:f9:5b:e2:91:f8:f9:bc:da:25:77:d4:3b:a4:5b:
                    d9:16:22:dc:8f:87:c4:cb:4d:50:c2:20:70:a5:47:
                    7c:7b:7e:54:57:a1:05:90:05:f3:3a:e9:3e:9c:f0:
                    cb:13:d8:69:19:12:7c:20:72:bc:4d:a5:9a:b7:d6:
                    48:a9:b8:35:4b:a0:59:6d:15:b4:14:a0:72:64:5d:
                    5a:52:1b:de:37:1f:d9:75:2f:11:90:fb:d0:02:43:
                    fd:eb:49:21:a6:a3:c0:89:7c:06:a4:89:e8:b7:85:
                    3a:93:dd:26:f9:47:7e:48:ec:e6:87:48:a5:82:9a:
                    5d:3e:21:c2:ea:78:53:f0:b4:78:ec:3d:d8:42:a7:
                    b7:d5:80:6d:95:f4:59:a1:ce:57:d7:fe:e4:5b:a1:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CB:7F:0B:D2:2F:CD:7B:F3:68:70:1B:BF:64:01:0C:AA:BB:42:6D
            X509v3 Authority Key Identifier:
                keyid:6D:23:23:47:07:78:FB:F5:41:DC:6E:F3:37:5B:47:93:8B:0A:DC:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D2323470778FBF541DC6EF3375B47938B0ADCAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BD1E4001F4D5E67AFCC87F155ECC9195DB391CC31004479AC153BCDC1A9C278/0/34352e3232362e3134342e302f32322d3232203d3e20323635383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:96:a9:cb:e7:1b:17:af:3c:a2:59:35:b2:e3:c6:17:25:15:
         db:90:98:e4:15:0d:7e:0e:7a:58:4f:d9:75:8b:4e:18:ee:48:
         ae:2a:cc:03:29:19:a1:ff:ff:6a:2e:97:a4:63:b7:24:0f:18:
         fe:df:1c:35:13:c8:ad:0f:33:d2:ec:63:6d:c4:be:9a:86:01:
         f0:1e:69:0e:67:5c:b2:82:22:bc:5c:3b:77:c0:08:b3:5b:2c:
         75:8f:e5:c2:e5:3c:61:11:99:b3:0b:70:09:9e:08:2d:24:d1:
         19:32:a4:54:a2:db:25:6b:ea:7a:e6:cc:69:03:86:cf:ad:6c:
         39:5c:f5:de:b7:58:8c:3e:9d:00:d8:5b:1e:ea:ac:72:7f:25:
         44:e0:5e:70:1e:6f:1d:02:aa:ac:47:bd:dc:05:bd:15:60:c4:
         2f:cb:5b:09:69:46:84:b4:ad:95:ea:ed:1c:ec:df:3f:41:94:
         b1:ad:e7:69:86:35:ca:9a:84:1e:96:2b:4a:3a:17:a5:f7:5c:
         6c:33:ea:c5:aa:cb:ac:fe:25:f6:83:5a:a1:44:12:9b:03:cf:
         75:4f:21:4e:1f:10:fa:e9:95:9a:ce:a7:76:7c:54:6a:3f:c1:
         a4:ed:0a:2e:ef:22:fd:ce:4f:3e:bc:c4:09:8a:ef:d3:ed:eb:
         92:a5:87:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org