Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa
File:                     34352e3232382e35362e302f32322d3235203d3e20323632313936.roa (raw, json)
Hash identifier:          0xGoXujsqYF4AKq839t0eSzU6oHarwgPIuht7GXmgCY=
Subject key identifier:   44:39:43:F6:73:9E:AC:F2:6E:30:70:23:A1:F4:CE:61:80:BE:E6:CE
Certificate issuer:       /CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97
Certificate serial:       758A0CBD4EFE958E008F82E8EB1C229F2E7BE991
Authority key identifier: 47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa
Signing time:             Tue 05 Mar 2024 17:41:58 +0000
ROA not before:           Tue 05 Mar 2024 17:36:58 +0000
ROA not after:            Tue 04 Mar 2025 17:41:58 +0000
asID:                     262196
IP address blocks:        45.228.56.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8a:0c:bd:4e:fe:95:8e:00:8f:82:e8:eb:1c:22:9f:2e:7b:e9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476EB61F17B49CD88A0DB6ABED2E966A61AAAA97
        Validity
            Not Before: Mar  5 17:36:58 2024 GMT
            Not After : Mar  4 17:41:58 2025 GMT
        Subject: CN=443943F6739EACF26E307023A1F4CE6180BEE6CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8b:b7:e5:c0:1b:83:f6:f7:f1:f8:51:15:a1:
                    a4:59:0f:75:42:9e:80:d1:ca:b1:c7:8c:9a:de:60:
                    ba:b4:d9:bf:c4:d0:9e:10:43:1c:2a:7a:08:22:61:
                    89:29:8d:3f:29:2e:6c:e5:0c:a7:14:87:8a:ab:dd:
                    d9:64:4a:31:fd:84:d0:78:55:42:48:e9:9d:e7:b6:
                    99:76:3a:ab:31:e0:03:47:cc:83:bb:ba:2a:18:47:
                    3e:cf:6a:10:a2:10:c0:5a:5c:4c:ef:b4:a8:5f:03:
                    b6:97:39:df:67:a3:26:44:16:5b:c5:93:59:8b:0e:
                    9a:c0:4d:92:50:50:46:9f:83:1b:9c:0d:2d:de:bc:
                    b2:db:62:bc:36:bf:7f:f2:52:4f:7c:e8:01:e8:6d:
                    f8:b2:7b:ff:f7:15:31:13:47:27:4e:63:6c:96:06:
                    41:52:04:6a:ba:1d:4a:21:72:28:34:54:ba:cf:e2:
                    80:54:a7:01:c8:3c:72:0b:4b:f3:2c:d2:7b:b7:25:
                    78:82:18:f5:d0:bb:c9:6c:7f:13:62:2e:4b:46:ce:
                    12:76:26:55:ea:b5:02:7f:29:5d:41:b9:86:d4:5d:
                    e9:24:c4:ee:89:b8:6a:6e:dd:d5:61:0f:b7:76:ac:
                    08:4e:28:cd:48:1e:4e:0e:bb:c3:51:50:f0:ed:ee:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:39:43:F6:73:9E:AC:F2:6E:30:70:23:A1:F4:CE:61:80:BE:E6:CE
            X509v3 Authority Key Identifier:
                keyid:47:6E:B6:1F:17:B4:9C:D8:8A:0D:B6:AB:ED:2E:96:6A:61:AA:AA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/476EB61F17B49CD88A0DB6ABED2E966A61AAAA97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ABEDFCB2F2ED120F0851CE2E87BD736EF8190C173ABC85DB5A1047E58187136/0/34352e3232382e35362e302f32322d3235203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:49:e8:a4:2c:a5:08:59:d3:a0:7c:02:fc:4c:fb:d8:51:
         5e:ac:9d:78:c2:5e:22:3e:f3:1a:0d:08:4c:d8:7b:30:1b:67:
         89:e5:71:a4:c4:60:4d:8c:1d:81:3a:db:63:4e:53:52:80:99:
         ec:ff:20:c3:f8:9f:7d:21:df:e8:64:44:03:f6:78:c8:61:32:
         0a:67:09:f3:f1:03:79:a5:3d:16:d5:6a:ba:e8:34:19:5f:66:
         7f:f1:09:75:d5:ea:bf:30:fd:a3:06:fa:4b:48:1c:ca:88:a8:
         30:a6:20:e8:24:66:10:0f:e5:52:e8:f0:3a:a7:d5:b2:93:da:
         f3:ff:0a:8c:56:7e:68:27:4a:56:01:33:15:8a:01:10:14:c8:
         38:2e:a4:68:9a:4c:27:a9:a6:2f:05:5d:1a:62:4b:75:c8:cd:
         e8:96:60:5c:7d:ed:46:b7:85:22:b6:03:76:c1:62:ee:1b:e2:
         a9:37:52:78:2a:ee:02:1d:25:d1:ba:c2:09:59:8d:e6:b6:39:
         52:24:36:23:af:6e:78:d0:91:de:ad:b2:d6:b4:a8:79:9d:d6:
         ad:d0:37:11:20:c5:c8:db:14:96:a4:b7:14:fd:71:78:1a:bd:
         bb:fa:28:96:06:fe:0f:e9:6f:d9:50:81:8a:a8:74:b6:52:54:
         55:16:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org