Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa
File:                     34352e3233382e33362e302f32322d3234203d3e20323636383331.roa (raw, json)
Hash identifier:          V5Y4OoVphaQLEA7zTupAdT7a+z52ejEzZ1neLL6gsRQ=
Subject key identifier:   16:1C:AA:D8:E8:F5:AF:9D:98:32:39:35:4B:F3:C4:CE:70:B4:A1:29
Certificate issuer:       /CN=662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B
Certificate serial:       74017A014F10076EF79E518E22CAC35562B4B579
Authority key identifier: 66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa
Signing time:             Tue 05 Mar 2024 17:49:53 +0000
ROA not before:           Tue 05 Mar 2024 17:44:53 +0000
ROA not after:            Tue 04 Mar 2025 17:49:53 +0000
asID:                     266831
IP address blocks:        45.238.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:01:7a:01:4f:10:07:6e:f7:9e:51:8e:22:ca:c3:55:62:b4:b5:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B
        Validity
            Not Before: Mar  5 17:44:53 2024 GMT
            Not After : Mar  4 17:49:53 2025 GMT
        Subject: CN=161CAAD8E8F5AF9D983239354BF3C4CE70B4A129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:a6:09:fb:5d:4a:6c:dc:54:b4:d5:b4:29:
                    ec:cb:86:d5:bc:84:ae:1c:6a:35:69:6a:da:67:88:
                    37:9a:be:da:05:0e:4a:3d:cf:9b:24:52:53:99:6c:
                    6a:fb:f9:b7:c6:6a:07:c3:0c:27:3c:8f:90:bb:a5:
                    d2:fe:0c:69:f0:2c:f3:cb:f7:cd:57:5c:9c:4a:0a:
                    d9:46:99:67:86:bc:42:80:a3:1c:77:a7:d6:c9:3f:
                    c9:cf:b6:1f:c8:51:3a:1b:60:ad:f1:b1:8d:03:9a:
                    0f:b9:10:d1:ff:c3:e9:10:b9:11:25:23:9c:e3:67:
                    96:ce:bc:5a:31:b6:0e:8d:01:9f:83:bc:c5:ff:24:
                    e5:b5:ec:84:37:ce:da:dc:b2:35:11:fd:db:90:44:
                    22:f3:ac:ee:33:e1:fc:cc:ee:83:25:37:98:98:39:
                    02:ea:e6:84:98:c4:b3:11:f1:1a:39:3a:3b:b6:2c:
                    df:b1:a2:8a:ed:0b:6d:0f:83:25:9b:2c:42:47:c9:
                    60:6b:95:37:41:0f:13:92:00:cb:e0:0a:2c:65:df:
                    b9:72:7f:9f:03:f5:b0:81:c9:26:a2:f3:f1:51:94:
                    30:27:a0:67:ce:d3:e4:ef:bc:21:7c:20:94:d1:a2:
                    17:41:01:75:5f:9a:7d:47:3b:31:18:a7:e2:c2:70:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1C:AA:D8:E8:F5:AF:9D:98:32:39:35:4B:F3:C4:CE:70:B4:A1:29
            X509v3 Authority Key Identifier:
                keyid:66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/34352e3233382e33362e302f32322d3234203d3e20323636383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:3d:c1:a7:af:e9:c7:81:e8:a2:89:ca:67:bc:3b:92:5d:
         5c:82:16:21:ef:ae:43:2e:74:8b:8d:46:ef:6a:35:7c:50:d2:
         0e:b3:14:51:e3:54:58:3b:7d:3c:ff:0d:1f:55:4f:9e:2f:4a:
         10:98:82:b7:11:7a:01:68:fc:47:85:33:cd:ad:d0:f6:e6:a2:
         42:9f:3e:5c:bb:71:5e:2b:0b:38:fd:08:26:86:2a:ab:81:a1:
         ce:1b:38:25:59:5d:f3:ce:cc:8d:8b:ee:ca:78:12:9a:54:a1:
         f8:38:7a:d6:ea:9c:83:ad:86:a3:55:d3:a2:fe:d8:39:3d:97:
         dd:b2:b0:45:b5:9f:c7:a4:23:9d:e5:73:40:8e:6c:f0:f4:c2:
         e7:70:eb:19:45:99:78:37:82:21:b9:da:e2:e3:4e:79:79:af:
         ca:4f:5e:b8:9a:f0:bf:55:52:78:82:6c:87:20:ba:92:0c:68:
         1c:21:05:1d:3a:0c:a0:4f:ff:b7:6e:00:83:44:32:3e:5e:dc:
         d6:08:6c:85:9c:9a:5f:72:e3:1b:cd:d6:30:0f:d2:fb:34:15:
         1b:ae:67:1a:1d:a2:f0:5f:d6:4a:18:2f:ae:f6:1c:59:5e:06:
         3a:00:b8:d0:eb:62:85:11:6b:69:56:41:00:5a:9c:f3:a5:03:
         ca:53:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 10:06:59 2024 by rpki-client on console-ams.rpki-client.org