Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa
File:                     34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa (raw, json)
Hash identifier:          EQ7OAjRT19mDWdlHMBv+0yM2whS5ydsWGUPFnXDIz7U=
Subject key identifier:   2A:3A:CF:55:82:32:15:8D:49:DC:CF:8C:8A:12:58:E4:B9:69:3F:A7
Certificate issuer:       /CN=92148A153BC4CF8D74684857020A59633E66EE4D
Certificate serial:       0D2689DBD129672EF969E3A5BA87243C2F26F844
Authority key identifier: 92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa
Signing time:             Tue 04 Feb 2025 18:12:30 +0000
ROA not before:           Tue 04 Feb 2025 18:07:30 +0000
ROA not after:            Tue 03 Feb 2026 18:12:30 +0000
asID:                     265874
IP address blocks:        45.226.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:26:89:db:d1:29:67:2e:f9:69:e3:a5:ba:87:24:3c:2f:26:f8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92148A153BC4CF8D74684857020A59633E66EE4D
        Validity
            Not Before: Feb  4 18:07:30 2025 GMT
            Not After : Feb  3 18:12:30 2026 GMT
        Subject: CN=2A3ACF558232158D49DCCF8C8A1258E4B9693FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:ea:dc:c6:df:3f:8b:d7:6b:cd:2d:87:38:
                    8d:d3:ba:f7:36:7a:56:67:3c:1e:c6:70:aa:8c:95:
                    04:7b:b4:97:17:65:02:ec:28:38:4c:ba:cf:4c:ad:
                    08:46:66:6f:88:bd:18:15:32:ae:b5:a7:d8:56:92:
                    35:26:55:bf:c5:ba:60:29:00:8f:20:e9:ab:fc:1b:
                    24:8e:1c:c7:7b:c2:7d:d8:2f:b6:83:5d:9a:75:1f:
                    af:9c:5c:1c:f1:b4:7d:39:cd:4e:53:4e:68:a5:15:
                    bb:05:2c:44:26:cd:55:74:aa:06:81:56:4d:c2:f8:
                    ac:f9:e3:ed:22:93:05:18:63:5c:24:ab:d6:43:1a:
                    b0:e3:25:ce:cf:72:ea:a6:c1:b6:bf:d7:d9:4a:63:
                    59:5a:cd:bf:58:4a:79:f8:0b:d8:40:26:d6:e8:6c:
                    3d:27:32:e5:09:11:0e:7d:b5:0b:12:6b:34:6e:80:
                    eb:de:16:5b:24:5f:af:b3:f7:fc:2a:cc:0e:ff:07:
                    6e:a2:4e:8a:eb:46:a1:43:58:74:69:c2:bb:39:74:
                    20:bf:c1:28:12:33:7e:ac:2c:1f:d3:a7:cf:6c:80:
                    c5:31:32:9e:35:75:74:d6:26:95:d0:79:39:93:85:
                    fb:47:14:60:7a:35:33:fe:e8:2d:14:50:2c:06:36:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3A:CF:55:82:32:15:8D:49:DC:CF:8C:8A:12:58:E4:B9:69:3F:A7
            X509v3 Authority Key Identifier:
                keyid:92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:60:63:bc:72:06:0a:03:ec:6e:dc:aa:16:a8:9e:86:12:
         e0:09:59:61:88:b8:10:68:8c:71:b7:d2:03:7d:15:79:f3:3c:
         67:4a:c8:37:dc:88:4d:ea:09:b5:fb:e1:d4:23:a3:fc:cb:00:
         dc:fb:0c:c7:e9:44:55:50:d1:19:71:e9:3d:fc:25:5d:22:e9:
         0c:87:09:88:66:14:eb:07:3e:12:94:f6:28:53:80:09:4d:c4:
         2e:4b:43:e2:24:e1:2e:71:25:20:0c:96:17:ef:59:16:90:1d:
         f6:47:57:96:96:72:fc:b4:37:85:b8:5f:d5:1c:23:a0:a8:5d:
         59:7b:e2:c2:ff:86:2e:4e:7a:98:74:ee:14:88:7c:00:f2:e3:
         df:25:e5:76:93:7c:a7:e8:03:7d:af:3a:10:9e:93:ae:c2:5d:
         ac:91:e3:bd:0e:4d:ff:31:e9:5a:54:65:ef:a2:2d:d6:92:dc:
         b1:19:58:ca:3c:b6:90:8d:ae:70:21:87:1a:d6:69:c3:8b:e3:
         36:3f:a3:2a:aa:68:46:87:ba:50:32:1b:71:2b:f3:10:3c:66:
         44:30:d5:72:b8:a1:15:d6:5a:e6:2d:e8:4f:bd:82:d2:b2:4d:
         3e:1e:ba:f7:1d:ca:da:ad:a9:c2:4b:ef:7d:9f:40:00:84:91:
         1f:de:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:11:22 2025 by rpki-client