Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa
File:                     34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa (raw, json)
Hash identifier:          aRG4zOCO1yLROUyXJzSxVm2t/G7nx7UNr1jx7xa8LIg=
Subject key identifier:   19:5F:92:58:26:F7:DF:E7:63:57:05:52:BF:79:9B:5C:47:76:66:BA
Certificate issuer:       /CN=92148A153BC4CF8D74684857020A59633E66EE4D
Certificate serial:       7B45BC8F4A954D7D027B1FC9E6C096D39337F869
Authority key identifier: 92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa
Signing time:             Tue 05 Mar 2024 17:45:17 +0000
ROA not before:           Tue 05 Mar 2024 17:40:17 +0000
ROA not after:            Tue 04 Mar 2025 17:45:17 +0000
asID:                     265874
IP address blocks:        45.226.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:bc:8f:4a:95:4d:7d:02:7b:1f:c9:e6:c0:96:d3:93:37:f8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92148A153BC4CF8D74684857020A59633E66EE4D
        Validity
            Not Before: Mar  5 17:40:17 2024 GMT
            Not After : Mar  4 17:45:17 2025 GMT
        Subject: CN=195F925826F7DFE763570552BF799B5C477666BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7a:17:48:ff:71:79:4c:f5:8d:4c:a9:32:88:
                    0c:a5:69:6a:83:ef:c9:33:3f:2b:52:7d:4b:3d:70:
                    5f:87:dc:68:fa:4b:17:57:08:0f:3e:16:16:08:76:
                    e0:81:e6:f2:f3:b6:5a:85:e2:3e:1b:38:be:81:f4:
                    5f:b8:94:d5:28:ff:b4:3e:e9:2c:69:41:a8:e8:15:
                    a4:56:81:f7:7f:55:82:75:1e:09:02:a0:eb:20:26:
                    6c:0c:94:0d:c7:67:24:1f:2b:d4:7d:b2:df:14:f5:
                    3a:56:3e:17:92:58:bb:5f:2f:d5:2b:48:18:01:7c:
                    86:71:05:7b:8d:ff:27:68:0d:5a:ed:81:7b:54:60:
                    2f:c8:f4:9e:f1:a3:fa:1e:c5:13:4a:ec:8c:98:de:
                    40:31:55:50:3a:21:8b:3d:11:17:72:da:2b:81:e9:
                    f0:64:6d:21:f5:32:81:40:f9:7f:bc:58:ee:3d:f1:
                    31:5d:00:b3:e2:fc:cd:44:8d:42:41:83:83:3b:3b:
                    9c:4b:5e:1f:d5:4e:4d:6c:23:01:10:06:bd:38:4b:
                    fc:2f:2e:bb:98:98:d7:df:f1:32:38:04:c8:2e:70:
                    a8:6e:05:29:f1:c9:71:04:0b:32:d0:e7:92:12:88:
                    9b:41:73:39:32:71:f8:15:79:b1:9d:6a:7d:b0:cb:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5F:92:58:26:F7:DF:E7:63:57:05:52:BF:79:9B:5C:47:76:66:BA
            X509v3 Authority Key Identifier:
                keyid:92:14:8A:15:3B:C4:CF:8D:74:68:48:57:02:0A:59:63:3E:66:EE:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/92148A153BC4CF8D74684857020A59633E66EE4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92148A153BC4CF8D74684857020A59633E66EE4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F0EEE742121DCD6BA137FCC5792C993671A0DE83EF477521C436B50958165A3/0/34352e3232362e3137332e302f32342d3234203d3e20323635383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:36:c1:92:6b:2a:5e:9f:0f:28:b0:7c:6a:32:9f:28:f4:
         98:91:d3:c2:d4:f6:52:a8:a9:c4:58:4d:c4:2f:66:9d:57:88:
         4e:36:e5:2e:eb:e1:bd:f6:81:80:91:a1:4f:46:19:c8:67:f5:
         17:43:1a:5d:ed:d2:d8:f0:7a:99:a6:46:e2:5c:57:8a:9d:fb:
         78:46:de:bb:36:92:15:09:34:81:5f:f4:bd:78:ad:07:c1:4a:
         01:e5:52:1d:62:d6:00:c3:8e:52:5a:28:73:1b:6c:d7:8f:77:
         6c:b7:69:ed:87:5e:73:19:9b:35:0b:bd:67:73:9b:5a:31:13:
         75:cc:4b:c9:f5:52:6e:a1:8b:97:a5:16:e2:3e:9d:d9:27:df:
         46:6e:57:79:3d:01:8c:5b:7f:28:60:23:5d:7a:9c:10:d7:bf:
         6e:c1:57:bb:88:fa:ec:7d:c1:98:5c:4b:5b:f6:73:3e:9f:29:
         ed:1e:2b:50:7a:d4:55:7e:48:e1:b8:cf:74:b2:e2:9e:4b:90:
         ee:d2:85:48:3d:f9:42:75:64:3b:35:66:8c:db:74:bb:41:ea:
         02:00:94:d8:f2:69:22:8e:3c:87:34:af:a4:54:d8:61:7c:f9:
         24:22:39:c6:44:9f:8a:c1:b9:8b:59:d4:fa:16:47:09:5d:7c:
         09:85:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:21 2024 by rpki-client on console-ams.rpki-client.org