Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/34352e3232352e37352e302f32342d3234203d3e20323636363731.roa
File:                     34352e3232352e37352e302f32342d3234203d3e20323636363731.roa (raw, json)
Hash identifier:          fEy3vyOnnnt4BX/oQTFK6RCok3hNG5Ap+9hOavmrk9M=
Subject key identifier:   B0:89:C8:6F:95:70:97:A9:FD:9F:54:4D:C1:66:38:4E:E1:D0:A3:9F
Certificate issuer:       /CN=49B1A7F3F084BD80E21A4EEBC75931ED9C458056
Certificate serial:       77BCC5CA0222D5037773C2830D0B37334783FFC3
Authority key identifier: 49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/34352e3232352e37352e302f32342d3234203d3e20323636363731.roa
Signing time:             Tue 05 Mar 2024 18:09:03 +0000
ROA not before:           Tue 05 Mar 2024 18:04:03 +0000
ROA not after:            Tue 04 Mar 2025 18:09:03 +0000
asID:                     266671
IP address blocks:        45.225.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bc:c5:ca:02:22:d5:03:77:73:c2:83:0d:0b:37:33:47:83:ff:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B1A7F3F084BD80E21A4EEBC75931ED9C458056
        Validity
            Not Before: Mar  5 18:04:03 2024 GMT
            Not After : Mar  4 18:09:03 2025 GMT
        Subject: CN=B089C86F957097A9FD9F544DC166384EE1D0A39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:71:93:78:62:3f:3e:ec:55:90:9d:28:89:
                    f6:27:9a:0d:69:a1:a5:1b:cc:62:4f:45:98:c7:b2:
                    7b:c7:70:16:be:a8:cb:51:07:77:04:b9:dd:28:d2:
                    c4:d0:0e:29:00:94:ca:b7:45:32:bc:99:41:75:4a:
                    3b:15:87:21:9f:bb:23:a3:68:e4:7a:98:d7:66:0c:
                    58:39:0b:39:00:5c:92:ca:50:0d:3d:17:ae:f6:02:
                    dd:4f:32:cc:e9:19:06:f2:fd:61:cb:e6:db:a1:0a:
                    98:1c:75:c8:3b:de:e9:9f:5e:cb:57:ef:f6:cb:03:
                    fa:39:d2:44:72:df:6c:9a:30:67:e5:13:f3:82:61:
                    ac:8b:8e:2a:e6:4d:b6:a1:85:18:92:78:03:43:f2:
                    c8:a7:dc:dc:05:6a:5c:7a:dd:e9:27:cf:97:dd:95:
                    7e:13:5e:71:de:df:e6:8a:ea:ad:7a:26:e8:4b:dc:
                    69:ad:6d:e1:71:fe:22:6f:f3:5a:fe:c8:5a:7c:d6:
                    6b:a9:1e:6e:c4:e9:40:5a:a6:0b:93:af:e1:d6:a7:
                    98:c1:44:0b:3a:29:c0:ac:5d:ba:f1:99:70:54:7a:
                    7f:cc:37:d5:bc:6c:34:4e:a0:b2:78:53:5b:63:9b:
                    ea:75:c7:8f:cd:b4:09:b0:21:67:3f:91:6e:f1:f6:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:89:C8:6F:95:70:97:A9:FD:9F:54:4D:C1:66:38:4E:E1:D0:A3:9F
            X509v3 Authority Key Identifier:
                keyid:49:B1:A7:F3:F0:84:BD:80:E2:1A:4E:EB:C7:59:31:ED:9C:45:80:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49B1A7F3F084BD80E21A4EEBC75931ED9C458056.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52ED2CF8405F4F6F4843763D866A63D2BC3E11F97C38DE67412360A72D20C560/0/34352e3232352e37352e302f32342d3234203d3e20323636363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:16:25:23:98:38:f6:63:8f:ba:b6:8a:4f:70:7c:ed:4f:a1:
         13:82:4e:c7:e9:4b:5d:ae:c0:cc:b2:be:76:ff:cf:f0:50:34:
         eb:fc:11:a4:7e:9d:1f:8f:fb:fc:3b:68:c2:23:b1:e0:a5:69:
         57:26:4b:8f:b2:25:75:10:30:b5:e6:d9:ca:66:3f:93:05:16:
         35:02:0a:88:0a:2f:2c:ce:7a:a1:8d:7b:d1:91:25:f2:c1:21:
         0a:89:f9:4e:17:38:39:5f:4a:1d:52:28:42:fc:80:92:a0:fb:
         25:26:09:3b:96:a7:f1:67:38:de:8c:4b:26:9b:87:15:fc:de:
         35:aa:11:f0:56:ab:e7:6f:34:a7:2c:fe:c4:79:55:3d:1d:37:
         e0:e8:6c:91:90:2a:ae:52:2b:89:ee:ba:50:70:64:64:e1:13:
         4f:d9:bb:00:d6:49:98:2f:9f:ca:87:48:a0:d5:28:c2:6b:6b:
         8d:75:8e:b6:f1:88:fc:1c:9d:20:3c:f8:b2:79:46:93:fc:90:
         b5:0a:12:0b:77:57:b7:ac:57:95:71:f1:99:a2:b9:da:25:cb:
         42:4d:da:a7:4e:e3:a7:6e:da:73:a8:28:b8:af:a2:b3:4c:aa:
         f4:67:71:d2:ab:54:fe:54:17:31:0d:be:ef:a7:13:fb:fa:93:
         29:63:88:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org