Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32342d3234203d3e20323636363635.roa
File:                     34352e3232372e3230302e302f32342d3234203d3e20323636363635.roa (raw, json)
Hash identifier:          apf37F3RxQlreqNmxLw93yl+DrM5lVzdRSEULD9vOIQ=
Subject key identifier:   95:AE:1E:FC:03:66:71:5A:46:69:3A:F9:19:99:FE:58:EE:2F:B8:64
Certificate issuer:       /CN=A42C2536663031C220CC68656426F3680C410069
Certificate serial:       476088CBC328C2005275BBE502F2CAD25C670D0D
Authority key identifier: A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32342d3234203d3e20323636363635.roa
Signing time:             Mon 26 Aug 2024 19:15:00 +0000
ROA not before:           Mon 26 Aug 2024 19:10:00 +0000
ROA not after:            Mon 25 Aug 2025 19:15:00 +0000
asID:                     266665
IP address blocks:        45.227.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:60:88:cb:c3:28:c2:00:52:75:bb:e5:02:f2:ca:d2:5c:67:0d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42C2536663031C220CC68656426F3680C410069
        Validity
            Not Before: Aug 26 19:10:00 2024 GMT
            Not After : Aug 25 19:15:00 2025 GMT
        Subject: CN=95AE1EFC0366715A46693AF91999FE58EE2FB864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:01:78:0c:65:5d:74:c1:47:29:12:82:ef:2d:
                    5a:e0:78:3d:ef:a5:62:d4:b2:43:0b:d2:f2:35:a3:
                    fa:6a:55:73:d4:97:3f:5e:e2:17:1e:fd:85:1e:28:
                    cb:b4:5f:62:cf:87:5c:cd:00:41:4f:ef:3f:ba:9d:
                    14:8a:54:da:64:66:7c:ba:7e:cd:b5:bb:30:f4:56:
                    82:8b:69:89:ff:75:55:1e:b8:5f:4b:f7:37:82:af:
                    9f:2e:c0:1c:55:17:d4:fc:7e:34:3b:a3:e6:33:d4:
                    f2:a4:2f:07:30:41:37:b2:3c:a6:7a:87:e3:5a:ed:
                    27:8b:c3:16:49:b2:a5:83:23:fe:ca:fd:af:0c:9a:
                    0e:91:b5:30:c7:ec:91:95:ab:72:1c:f8:e6:9e:c0:
                    73:63:54:94:37:f4:7a:0e:ba:9c:4c:eb:fc:3a:71:
                    f5:7f:bd:6b:cc:50:75:c5:f0:6e:ee:25:2a:2d:98:
                    c0:ae:31:54:ff:2d:5b:ff:9a:12:81:dd:96:fe:4e:
                    6f:d7:8c:4d:b0:91:3e:3f:b7:f3:3e:07:18:9b:c3:
                    cc:fe:13:a1:ff:0c:49:75:d8:38:48:7d:2f:3c:96:
                    e1:0d:68:b4:9e:13:80:6c:77:39:13:b5:a6:0d:90:
                    c3:80:23:1a:9d:35:93:02:ae:44:19:45:3b:d0:70:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:1E:FC:03:66:71:5A:46:69:3A:F9:19:99:FE:58:EE:2F:B8:64
            X509v3 Authority Key Identifier:
                keyid:A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230302e302f32342d3234203d3e20323636363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a2:9e:b8:cb:d5:55:19:99:65:22:90:0a:82:85:f0:c9:6a:
         72:88:40:a8:cf:81:ef:55:b1:c1:e9:a2:89:9e:df:cc:ca:14:
         b5:b1:8e:83:9c:dd:2e:a4:71:a2:0f:7d:8b:0c:68:86:a6:9d:
         c3:ea:15:06:05:53:c7:28:2a:4d:91:e2:4a:3a:d2:ab:f8:68:
         d6:64:81:58:de:4b:20:49:33:b3:34:d5:d5:cf:bf:22:f2:6f:
         76:6b:23:4c:dd:0a:75:cd:09:9b:1c:5d:a3:ac:b2:6a:c5:01:
         a8:f9:fd:91:71:93:7b:38:29:d9:e8:a6:42:d5:d5:20:98:61:
         d8:63:c1:3d:b4:9b:01:50:e9:39:9b:1f:cf:2c:2b:44:2d:7b:
         f0:11:24:d8:fe:e6:b8:08:9c:3d:71:48:7c:fc:d2:54:cb:0c:
         37:db:e6:3b:d6:3f:48:79:a3:9a:9a:9e:7e:33:3b:84:72:df:
         78:58:64:f8:46:13:9f:9a:a9:d6:33:67:cf:f7:21:97:2f:12:
         6f:7e:d4:71:7c:84:73:d7:56:f3:97:b4:37:7f:97:0b:e3:af:
         a8:d7:f2:a4:1d:e7:49:a1:da:1c:db:b6:45:e0:a6:5f:ef:a4:
         3a:ee:e4:bf:f6:1a:38:c6:f7:de:a8:bf:ba:fe:b9:be:4c:e4:
         00:ed:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:00 2024 by rpki-client on console-ams.rpki-client.org