Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa
File:                     34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa (raw, json)
Hash identifier:          43Pnnhjh+le3yXZPKGA7tKUO2n0qCSEVjomGR1vGyos=
Subject key identifier:   66:C6:7D:7D:74:4B:7B:CB:D5:34:23:B9:CC:9C:A5:A8:D2:46:B3:E7
Certificate issuer:       /CN=92148A153BC4CF8D74684857020A59633E66EE4D
Certificate serial:       5A2643C25FC2DB42E992E2314B5C67A525A0A6A5
Authority key identifier: 92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa
Signing time:             Tue 05 Mar 2024 17:45:17 +0000
ROA not before:           Tue 05 Mar 2024 17:40:17 +0000
ROA not after:            Tue 04 Mar 2025 17:45:17 +0000
asID:                     265874
IP address blocks:        45.226.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:43:c2:5f:c2:db:42:e9:92:e2:31:4b:5c:67:a5:25:a0:a6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92148A153BC4CF8D74684857020A59633E66EE4D
        Validity
            Not Before: Mar  5 17:40:17 2024 GMT
            Not After : Mar  4 17:45:17 2025 GMT
        Subject: CN=66C67D7D744B7BCBD53423B9CC9CA5A8D246B3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:b4:0e:0c:0f:62:d4:34:91:3e:fb:bd:eb:
                    5c:43:ee:d4:a8:38:b9:c5:0d:76:9f:90:9a:64:40:
                    e3:94:e6:22:6e:37:2a:8a:11:49:42:f8:02:af:cb:
                    a3:c4:76:ad:dc:67:0c:90:02:43:05:99:a2:a3:30:
                    a1:48:53:51:08:d6:9a:b2:d5:f0:20:82:22:3e:94:
                    c3:82:73:c7:73:f5:1e:89:d6:96:36:83:b2:28:16:
                    da:05:68:c4:dd:80:c8:16:66:c9:3b:09:66:1e:d2:
                    43:28:b7:a9:fe:78:5e:6a:c5:5b:df:ee:09:02:6b:
                    90:65:4c:75:f2:6b:1e:76:7b:26:35:c1:d6:6d:53:
                    73:66:1e:ae:32:51:ec:5d:a5:df:d9:ec:b5:6a:4c:
                    e1:56:e5:02:5e:2c:ee:f2:71:f1:d5:50:0a:9a:f9:
                    2c:2a:f4:e1:d7:55:4c:18:c0:91:a8:8d:9d:d3:9b:
                    c5:39:f2:02:75:a5:d2:d5:80:c2:89:dd:c6:17:69:
                    0e:3b:31:5e:5c:10:22:c2:84:59:3f:d2:64:22:4d:
                    6a:3b:61:39:15:72:27:a9:5b:40:3c:fb:d8:1f:cd:
                    81:d0:85:31:5f:bd:2b:58:eb:5e:1e:ac:b9:c3:6c:
                    be:df:0b:9f:aa:7d:c5:c6:8c:59:38:19:9b:2e:21:
                    9e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C6:7D:7D:74:4B:7B:CB:D5:34:23:B9:CC:9C:A5:A8:D2:46:B3:E7
            X509v3 Authority Key Identifier:
                keyid:92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137322e302f32342d3234203d3e20323635383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:a6:d5:40:bf:3a:b9:dd:dd:dc:6d:c8:0c:d2:50:c9:1c:
         32:ca:b8:62:4c:9d:d8:6e:d6:aa:c7:aa:28:98:0a:98:17:41:
         a3:d7:ea:4c:89:72:7d:b4:01:a4:65:38:f7:e8:96:87:86:13:
         76:c0:d9:5c:0b:a1:15:e6:f2:a6:e8:3b:f7:80:84:87:48:b0:
         db:16:23:43:3f:9c:96:86:20:f6:52:3c:23:d3:dd:56:60:df:
         c8:74:e4:6a:66:13:50:f9:7f:1f:bd:bf:17:9f:50:e5:ed:d9:
         81:73:92:d6:57:06:4f:c2:91:78:c2:17:90:af:fb:c9:ca:89:
         2c:6d:fd:43:0d:30:4c:9a:76:31:a9:b5:ca:ab:4e:d5:53:da:
         9f:c5:0e:51:76:41:81:38:d2:0e:92:e8:ab:2d:42:f6:31:0e:
         c5:f4:ec:ac:cf:83:8a:53:6a:ff:fc:19:c7:02:83:69:c7:41:
         5d:59:91:81:8a:0a:d4:88:1c:f3:47:9d:a6:dc:82:60:60:2c:
         c2:ab:57:fd:b5:74:93:28:72:0b:e8:31:3a:91:61:11:75:48:
         7e:55:3f:3f:da:d7:ff:a4:d3:a4:74:6a:c7:8b:c0:cc:db:08:
         04:e3:a4:07:1d:d9:00:10:61:54:11:04:1e:23:4f:db:d6:09:
         4a:88:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:48 2024 by rpki-client on console-fra.rpki-client.org