Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa
File:                     34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa (raw, json)
Hash identifier:          yvHAg+hGRBmAtRVhRIzs+iucKwtAol0Jv+UI2e/e6Ys=
Subject key identifier:   EA:DE:3A:3A:B6:CB:E2:97:F3:E7:41:21:70:09:B7:EA:1C:67:A3:F4
Certificate issuer:       /CN=92148A153BC4CF8D74684857020A59633E66EE4D
Certificate serial:       06A21516D5B7C20ED0CF6123BD58B6AC718141ED
Authority key identifier: 92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa
Signing time:             Tue 04 Feb 2025 18:12:30 +0000
ROA not before:           Tue 04 Feb 2025 18:07:30 +0000
ROA not after:            Tue 03 Feb 2026 18:12:30 +0000
asID:                     265874
IP address blocks:        45.226.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a2:15:16:d5:b7:c2:0e:d0:cf:61:23:bd:58:b6:ac:71:81:41:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92148A153BC4CF8D74684857020A59633E66EE4D
        Validity
            Not Before: Feb  4 18:07:30 2025 GMT
            Not After : Feb  3 18:12:30 2026 GMT
        Subject: CN=EADE3A3AB6CBE297F3E741217009B7EA1C67A3F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f0:c1:b9:94:ac:84:a4:ea:b1:3f:cb:d8:7f:
                    04:82:90:49:be:cd:03:91:8e:9f:9d:5c:69:06:2b:
                    99:91:38:46:19:bd:37:bf:be:6b:63:f9:81:26:3b:
                    99:02:34:c9:b3:09:cc:f3:ce:59:41:2b:c1:b5:0c:
                    19:d4:e2:c9:91:04:e5:5f:40:d6:4c:bb:a0:71:ca:
                    71:28:93:59:9d:e4:8a:03:be:5f:e5:6f:59:7e:c1:
                    11:1d:41:b2:1b:48:d4:59:f8:e0:63:af:3c:b6:52:
                    1c:dd:d7:98:57:da:de:de:c6:4d:aa:41:61:d4:ac:
                    b8:3c:05:ec:b0:2b:b8:19:62:1a:c2:91:c6:ab:21:
                    7a:1f:85:00:fe:23:73:08:d8:91:78:cd:54:ac:40:
                    cf:82:31:de:b8:16:93:81:ad:90:6b:34:77:e7:49:
                    22:6f:de:09:d6:6f:fa:28:96:2d:2f:3f:9d:f7:aa:
                    b8:8c:09:f0:92:06:b5:eb:bb:e6:45:2d:55:b6:9d:
                    8c:8f:cd:79:d3:cd:12:89:b5:ce:ec:ad:2a:83:fb:
                    92:8e:71:a4:00:84:30:3e:0f:f7:fc:ea:99:6c:2a:
                    fe:35:85:ce:f5:ef:b3:45:a1:cf:54:2e:30:25:f1:
                    27:88:f5:7f:0c:f3:df:a3:5e:16:b3:0f:fa:4f:2d:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DE:3A:3A:B6:CB:E2:97:F3:E7:41:21:70:09:B7:EA:1C:67:A3:F4
            X509v3 Authority Key Identifier:
                keyid:92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:3f:a0:8d:9f:10:c8:78:bf:8c:25:8b:50:ae:3e:dd:5e:62:
         4d:92:56:75:16:58:0a:af:cb:ca:c4:0d:b6:04:5b:0c:42:65:
         16:76:2a:9d:dc:aa:32:22:84:25:f4:d4:a2:db:2c:b5:99:81:
         84:6a:92:6e:c7:fc:39:5d:ef:c6:d7:c2:ed:7c:83:a5:a3:bc:
         f0:5c:75:28:d8:13:64:7a:7d:af:15:62:4c:ec:98:d0:c0:a7:
         db:9c:9f:f1:75:23:41:8d:40:9a:d6:a5:89:e5:9d:b9:bd:e9:
         7a:c6:28:cc:80:32:d9:4b:10:22:5c:b2:a1:5a:92:11:60:6f:
         9b:9f:af:47:3f:17:f3:15:84:0c:ed:29:39:8c:c0:ee:1b:d8:
         23:c3:c4:95:d3:89:f9:c9:5a:40:ed:66:ad:0b:42:bb:b0:77:
         bd:f2:c4:aa:55:18:9d:d4:11:03:cf:66:60:ae:f2:25:f4:93:
         63:f1:b5:f8:9c:73:29:91:75:1c:25:8d:7c:fe:8f:6d:7e:9a:
         4b:f1:a4:c4:c7:f1:82:7d:f5:f6:04:fe:e4:e8:7d:e0:54:82:
         c2:f0:83:75:01:35:27:8b:a8:89:91:32:2f:35:25:53:89:66:
         bf:b9:21:cc:8e:08:c9:c7:33:32:40:64:de:23:19:94:6a:d1:
         23:45:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:57 2025 by rpki-client