Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e203532343638.roa
File:                     34352e3232342e3134382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          m8S+YRLRuP9y9tjR7+RwRydIN327+Wm6JInQ3gniNLg=
Subject key identifier:   B2:44:1E:3E:D6:D4:C8:08:DF:D6:B5:02:96:2B:8C:AC:62:57:B5:94
Certificate issuer:       /CN=DAADFF1BE65A83E411EFC02ED029233890DD0646
Certificate serial:       0835E00334C5AE9409F9714B80659725987FA1E9
Authority key identifier: DA:AD:FF:1B:E6:5A:83:E4:11:EF:C0:2E:D0:29:23:38:90:DD:06:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:50:45 +0000
ROA not before:           Tue 05 Mar 2024 17:45:45 +0000
ROA not after:            Tue 04 Mar 2025 17:50:45 +0000
asID:                     52468
IP address blocks:        45.224.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:35:e0:03:34:c5:ae:94:09:f9:71:4b:80:65:97:25:98:7f:a1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAADFF1BE65A83E411EFC02ED029233890DD0646
        Validity
            Not Before: Mar  5 17:45:45 2024 GMT
            Not After : Mar  4 17:50:45 2025 GMT
        Subject: CN=B2441E3ED6D4C808DFD6B502962B8CAC6257B594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:1a:50:f9:e3:49:89:d4:ca:81:c6:86:a3:
                    7f:4f:51:9d:ba:80:ab:16:53:5b:fd:87:16:4d:18:
                    f7:0f:f4:47:bb:4b:65:30:32:6b:a0:ef:b6:34:0d:
                    06:ca:6a:b6:9d:81:10:2b:07:12:26:5d:b3:8e:77:
                    62:e1:61:79:4a:2c:26:bf:8a:b0:e8:e4:a9:45:4c:
                    c4:13:a8:96:6c:df:07:a3:7e:44:80:df:45:c1:1d:
                    a6:ff:a9:67:a4:fe:ba:b2:6e:64:57:4d:21:04:bb:
                    6b:6e:63:4d:5d:6d:64:97:a3:a7:87:0e:7c:53:80:
                    9d:84:a6:99:ba:bc:3e:7d:c3:49:c8:e8:23:4c:93:
                    6b:e4:d5:45:74:22:78:6b:ef:f4:6e:3c:ae:fe:95:
                    72:15:f6:fd:1f:6e:a4:55:9e:08:c1:5f:f8:5a:24:
                    49:9d:67:37:26:8e:f0:8b:83:e7:07:d5:c3:2d:1d:
                    66:14:0d:c8:42:54:82:c0:01:b6:1c:87:bd:67:0b:
                    3c:b3:98:82:f7:14:b1:8e:a1:0b:77:4a:75:9b:09:
                    80:e7:53:c3:83:91:2a:14:4b:9c:31:f7:6c:e6:aa:
                    4a:b3:b4:5a:d8:7c:66:63:7a:69:28:c9:c2:46:55:
                    55:84:4a:9a:71:80:d0:08:a8:9d:01:4a:b1:4c:e6:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:44:1E:3E:D6:D4:C8:08:DF:D6:B5:02:96:2B:8C:AC:62:57:B5:94
            X509v3 Authority Key Identifier:
                keyid:DA:AD:FF:1B:E6:5A:83:E4:11:EF:C0:2E:D0:29:23:38:90:DD:06:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DAADFF1BE65A83E411EFC02ED029233890DD0646.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3791B0F7B9B0A0F44434E8FDED11277147ED16CD9781BE55AC801FE3EFFFA896/0/34352e3232342e3134382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:03:a7:ba:25:c1:4b:0c:f3:dd:49:25:aa:2d:f3:03:1e:a1:
         ba:75:c1:f1:f5:34:6e:25:4a:fd:a8:bb:62:dc:e3:8f:a6:a7:
         b0:16:a8:88:e5:31:37:a5:21:e3:24:73:1a:16:de:4c:ac:b4:
         8f:1f:36:12:ba:1a:1c:44:11:f6:bb:17:4e:4b:ae:e0:1d:d8:
         68:03:0f:6a:bc:d0:db:27:da:1d:40:47:a9:49:0b:6e:6a:ae:
         98:0f:39:fd:7e:21:8e:7d:b6:0c:b2:c1:13:29:e2:5b:90:3b:
         bb:4c:6a:4f:dc:db:de:22:cf:ee:c5:df:2a:33:39:2c:98:53:
         64:78:cb:6e:11:13:75:63:4f:04:e6:9f:60:35:a6:92:16:54:
         96:6f:5a:6f:94:4a:90:c0:79:89:59:c9:93:cb:95:26:45:88:
         24:a2:db:f9:d1:84:39:da:7c:8d:1e:20:6a:6e:f9:73:2d:74:
         3c:5e:71:70:46:a6:55:39:2a:56:0c:b5:21:3e:a0:41:38:1a:
         bd:bd:7f:68:b2:9f:bf:c6:74:e4:54:07:2b:56:2a:54:84:22:
         0a:09:80:3f:1a:32:c5:9e:f4:da:bf:c1:74:51:ad:f3:27:44:
         fa:3e:d9:15:d2:de:eb:35:18:00:9b:30:10:17:9c:f3:b7:6f:
         d9:9a:d0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org