Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa
File:                     34352e3232372e352e302f32342d3234203d3e20323636363639.roa (raw, json)
Hash identifier:          /IRPjpW2Y1I1NfKD0WKlDcMMdCkpkKNHSxQq1SdA5Ws=
Subject key identifier:   D9:ED:19:38:98:47:70:43:54:9F:4C:E9:54:F0:F7:53:91:E5:0C:8E
Certificate issuer:       /CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
Certificate serial:       4C1E865027B328B57DDE357322AA560E54EDBE3E
Authority key identifier: AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa
Signing time:             Mon 04 Nov 2024 16:40:00 +0000
ROA not before:           Mon 04 Nov 2024 16:35:00 +0000
ROA not after:            Mon 03 Nov 2025 16:40:00 +0000
asID:                     266669
IP address blocks:        45.227.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1e:86:50:27:b3:28:b5:7d:de:35:73:22:aa:56:0e:54:ed:be:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA7189C75E9BFCB41A376AF33303F62E809AD1DF
        Validity
            Not Before: Nov  4 16:35:00 2024 GMT
            Not After : Nov  3 16:40:00 2025 GMT
        Subject: CN=D9ED193898477043549F4CE954F0F75391E50C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:e3:7e:c8:22:e9:65:4e:1e:0b:e6:b5:88:
                    4f:a1:70:a0:dd:78:87:41:61:47:ac:da:d1:10:45:
                    4c:87:8f:42:2b:0f:03:72:06:00:cd:b0:09:63:55:
                    e6:0b:fa:dd:b1:6a:d6:a5:05:74:05:55:ad:5f:c5:
                    66:27:0d:e6:d3:55:a0:da:36:4f:c0:36:80:16:09:
                    37:c6:13:28:e8:26:a7:5b:6c:b7:10:01:b0:9c:4f:
                    e4:d8:6c:34:01:4c:2a:82:f5:83:c8:17:89:9d:0d:
                    37:68:d1:5b:e0:38:17:44:cf:46:aa:b5:03:46:8b:
                    c0:61:44:6e:4b:fb:7a:ee:0c:14:0a:7d:1c:80:91:
                    f5:11:06:43:51:ec:90:a9:28:c9:c5:27:c7:a2:cb:
                    d9:55:4e:65:7a:2e:a0:d8:16:a7:53:51:4b:cb:8a:
                    8a:3e:f2:1c:52:1d:f1:be:aa:fc:14:33:96:b7:11:
                    74:42:e3:49:e7:49:d5:74:27:cf:98:fe:ba:32:1d:
                    36:72:9a:d6:30:6e:44:16:d3:fe:9f:ab:de:c8:63:
                    dd:be:cd:63:92:18:d3:38:42:df:d9:7d:6c:62:a0:
                    b8:47:6a:25:52:07:b7:ea:a6:19:61:47:f2:3c:92:
                    6a:b9:a7:3d:7d:75:1a:93:45:8e:41:ba:41:72:12:
                    fd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:ED:19:38:98:47:70:43:54:9F:4C:E9:54:F0:F7:53:91:E5:0C:8E
            X509v3 Authority Key Identifier:
                keyid:AA:71:89:C7:5E:9B:FC:B4:1A:37:6A:F3:33:03:F6:2E:80:9A:D1:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA7189C75E9BFCB41A376AF33303F62E809AD1DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20ED4C07EB66687B0212C55332D0FBD17640C89F4A8F6096C769FAD8B819EBFE/0/34352e3232372e352e302f32342d3234203d3e20323636363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:a9:aa:86:1e:79:45:0c:bc:4f:43:4f:76:c7:9a:24:41:
         cb:ae:15:09:19:d5:32:07:a2:ba:11:44:28:fd:b3:7e:5e:8a:
         9b:6c:cb:52:07:fa:00:ba:a0:ad:8a:8f:af:cc:db:ad:d1:0b:
         c9:f3:12:97:c1:fd:2f:c4:0f:a6:fc:52:4e:d4:58:09:d2:0c:
         ff:fc:53:ca:b6:b6:b1:9e:b7:90:31:fb:e9:6d:95:74:cd:2d:
         6c:f2:f3:22:80:24:67:f5:22:24:9d:15:cb:3a:b6:f7:5a:eb:
         ff:31:76:df:01:c4:94:3e:f6:79:35:c0:db:61:07:5e:2a:4a:
         6c:9d:2f:22:e8:c6:33:f6:c9:60:4e:d2:51:cf:6a:e9:3e:d4:
         87:17:c9:89:d6:d1:7b:34:db:d9:6d:20:43:ed:74:d7:e8:05:
         b2:5d:6a:dc:da:89:bf:c2:42:0c:78:f8:a8:b4:29:aa:07:da:
         a7:83:c4:99:34:4f:e9:77:8e:ad:1a:47:00:f9:c4:fa:4f:e3:
         68:50:3f:0e:45:e5:43:8e:66:5e:29:07:27:08:58:15:92:61:
         88:d9:14:30:63:ef:b8:d5:89:e1:4a:e7:bf:c7:95:06:97:ad:
         89:05:94:7b:46:b2:0b:8f:17:29:c7:64:c0:a6:64:87:07:87:
         6b:cc:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org