Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa
File:                     34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa (raw, json)
Hash identifier:          RH83lVma8DGZTWbJf2b9CchuvR4/wTAwEXP+a65ll+k=
Subject key identifier:   A6:CB:7B:62:4E:4E:5A:2F:0D:35:79:9E:F4:BD:E7:D6:E2:9C:36:07
Certificate issuer:       /CN=096026F2035C01DFDDA491A54F0110D751D4B655
Certificate serial:       4D095998CD22D09E63DA7189884954CAAAE64F60
Authority key identifier: 09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa
Signing time:             Tue 05 Mar 2024 18:07:13 +0000
ROA not before:           Tue 05 Mar 2024 18:02:13 +0000
ROA not after:            Tue 04 Mar 2025 18:07:13 +0000
asID:                     267757
IP address blocks:        45.229.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:09:59:98:cd:22:d0:9e:63:da:71:89:88:49:54:ca:aa:e6:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096026F2035C01DFDDA491A54F0110D751D4B655
        Validity
            Not Before: Mar  5 18:02:13 2024 GMT
            Not After : Mar  4 18:07:13 2025 GMT
        Subject: CN=A6CB7B624E4E5A2F0D35799EF4BDE7D6E29C3607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:5b:36:13:7d:f3:2f:16:2d:fd:87:93:82:
                    81:92:4f:5b:cf:62:0c:ac:2e:4d:df:08:db:a0:43:
                    4e:a2:40:fb:cc:43:28:d0:b9:b9:b9:6c:a1:c4:41:
                    5d:57:85:ac:2e:49:91:78:59:a3:77:8e:cc:89:81:
                    a8:d1:f7:be:f0:35:86:e6:8e:4a:f3:9c:72:0a:e3:
                    9a:73:d2:59:75:43:10:de:3c:6f:6e:28:fa:ff:51:
                    b9:22:f2:7f:a0:ce:f7:9b:05:86:ed:61:43:4d:be:
                    8b:3a:18:15:31:1a:40:4f:45:7f:fb:db:31:6d:61:
                    60:38:0c:c1:0e:94:d7:7a:c9:18:35:93:82:6e:4a:
                    94:29:93:f5:ed:3a:66:ee:34:3d:a6:12:27:be:da:
                    bc:7d:55:8e:f6:3f:ae:4b:58:ad:d2:84:1c:3f:ee:
                    e2:a4:c3:2a:68:86:c0:48:a5:aa:b9:e9:1d:6a:4d:
                    62:5a:2e:bb:7e:11:ff:55:47:bc:83:4b:e9:f9:cb:
                    d5:c0:7e:ba:7f:fe:99:54:ee:33:90:e8:4b:2d:54:
                    53:d4:38:40:2e:6b:cc:d6:67:50:f3:05:6b:9b:d6:
                    9c:fd:00:48:ff:cf:cf:e7:27:ab:08:bc:ac:b9:bf:
                    1a:eb:85:e4:80:ad:9d:ca:ba:b4:51:28:49:26:8c:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CB:7B:62:4E:4E:5A:2F:0D:35:79:9E:F4:BD:E7:D6:E2:9C:36:07
            X509v3 Authority Key Identifier:
                keyid:09:60:26:F2:03:5C:01:DF:DD:A4:91:A5:4F:01:10:D7:51:D4:B6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/096026F2035C01DFDDA491A54F0110D751D4B655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/096026F2035C01DFDDA491A54F0110D751D4B655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B7DCDCA99796596E2B2F18D97701A0111D8712778C6A249F94598CC8E01F1A6/0/34352e3232392e3139322e302f32332d3233203d3e20323637373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:76:c7:d1:5f:5b:84:e2:d5:84:af:2d:7c:39:42:e3:52:63:
         50:6b:39:90:bc:4a:42:43:7d:b2:59:5a:d3:ca:bd:a1:cf:8d:
         38:4a:e8:92:1b:d6:99:9f:9c:c9:c3:bd:fb:4a:f0:ea:14:80:
         e2:67:65:34:57:c5:7a:bd:ac:a2:ae:53:51:2c:fd:da:f6:fe:
         bc:43:1d:48:91:cb:1b:a8:38:1b:90:65:c4:19:56:ae:2c:2f:
         f2:93:8a:9e:5a:61:b5:57:42:cb:d6:61:90:c6:58:cf:a9:c2:
         4c:c0:17:27:57:73:fd:50:45:83:22:7a:45:a7:5e:a5:32:c1:
         8a:56:59:b0:1c:d6:da:cf:c5:a6:4c:5f:f6:65:4e:56:7f:b2:
         d1:18:a9:36:62:a2:b2:fa:82:a1:85:7d:21:4b:ac:cf:20:92:
         de:14:41:49:36:26:6d:66:9a:aa:64:e4:9e:47:7c:d4:71:3f:
         a1:fb:d8:bf:8b:e8:ed:15:61:80:95:b1:5b:89:54:b5:21:61:
         61:11:d8:c2:0d:25:20:7f:36:25:fb:23:d7:86:7c:04:c7:78:
         f4:b9:18:f6:9e:40:cc:68:73:ad:a7:eb:69:97:ff:a7:9a:12:
         45:76:09:b1:9b:82:9e:bd:61:65:f7:e9:38:f2:ac:38:05:2d:
         6a:7e:22:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:51 2024 by rpki-client on console-ams.rpki-client.org