Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230322e302f32342d3234203d3e20323636363635.roa
File:                     34352e3232372e3230322e302f32342d3234203d3e20323636363635.roa (raw, json)
Hash identifier:          snQ0eqWBpUplhHy/+mgLskxBjsAmiVifcDyFRlErU10=
Subject key identifier:   88:FD:4C:18:C3:2A:4B:A1:3C:01:F4:DF:73:BB:F1:7B:DF:EE:C1:40
Certificate issuer:       /CN=A42C2536663031C220CC68656426F3680C410069
Certificate serial:       079DC8E54DB6C927BA07FE6E8434FE271084C024
Authority key identifier: A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230322e302f32342d3234203d3e20323636363635.roa
Signing time:             Mon 26 Aug 2024 19:15:01 +0000
ROA not before:           Mon 26 Aug 2024 19:10:01 +0000
ROA not after:            Mon 25 Aug 2025 19:15:01 +0000
asID:                     266665
IP address blocks:        45.227.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9d:c8:e5:4d:b6:c9:27:ba:07:fe:6e:84:34:fe:27:10:84:c0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42C2536663031C220CC68656426F3680C410069
        Validity
            Not Before: Aug 26 19:10:01 2024 GMT
            Not After : Aug 25 19:15:01 2025 GMT
        Subject: CN=88FD4C18C32A4BA13C01F4DF73BBF17BDFEEC140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:31:7a:f2:9e:06:70:40:3a:8a:23:d2:07:c0:
                    95:b2:a2:b5:3f:85:e2:ca:2f:e3:ce:5e:7c:6f:6a:
                    6b:8f:5a:60:c3:81:4a:0e:d9:3e:55:62:6a:af:a6:
                    13:98:f6:2e:c3:b2:66:ac:99:57:30:7f:61:da:72:
                    c7:b8:dd:02:76:2d:1a:47:27:c6:fb:c4:a0:1c:d4:
                    73:94:dd:25:02:ad:98:d0:ce:65:bc:fe:97:c9:ff:
                    da:e5:56:02:72:82:55:63:53:f9:97:74:da:e6:ff:
                    50:b2:cf:f4:e0:b4:b0:ac:0d:26:a6:8c:d1:d2:f3:
                    51:c8:22:92:94:83:03:6b:58:31:4c:29:0e:dc:9f:
                    8a:8d:b4:e8:b7:3e:df:f2:3f:2f:38:a3:62:26:d5:
                    22:6b:f6:46:9a:2a:b1:48:53:9d:8a:56:21:8c:89:
                    aa:c6:49:a3:1a:a3:16:2d:a3:e6:14:e9:a1:a3:84:
                    9f:ad:ed:90:6b:7a:c9:5c:d9:a8:b7:05:b5:30:77:
                    fc:eb:a5:42:97:47:94:7f:56:e8:54:56:8d:80:b5:
                    0e:b6:aa:49:8d:75:3b:ef:30:e3:62:7d:33:a0:5f:
                    da:c9:4a:0a:e9:bf:0a:e1:4d:c7:52:53:c3:e7:cc:
                    5d:23:87:98:b1:b4:4d:e1:ea:63:59:e3:1e:53:2c:
                    70:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FD:4C:18:C3:2A:4B:A1:3C:01:F4:DF:73:BB:F1:7B:DF:EE:C1:40
            X509v3 Authority Key Identifier:
                keyid:A4:2C:25:36:66:30:31:C2:20:CC:68:65:64:26:F3:68:0C:41:00:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/A42C2536663031C220CC68656426F3680C410069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A42C2536663031C220CC68656426F3680C410069.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A25A3564E10B67DCFFFDA864576CDE3C1CBEC157B935F00E09BE8C553E26692/0/34352e3232372e3230322e302f32342d3234203d3e20323636363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:1c:54:36:c5:27:ab:38:ad:cf:f7:c7:1f:d0:ca:2f:24:6d:
         3a:c6:20:28:47:86:a4:ed:ca:a2:79:02:e0:f3:ba:e2:ed:dd:
         9e:f9:37:b6:6f:98:93:99:23:5a:0d:25:15:b5:24:df:ac:61:
         82:f7:b8:a3:4f:e2:4b:65:59:bd:6a:56:7a:31:b9:95:64:6d:
         95:65:35:bf:3c:58:f9:6b:46:9d:98:f7:af:75:9f:8e:7c:38:
         b7:47:ff:7b:f3:4a:97:2e:61:33:21:16:80:e8:cc:b5:5b:d2:
         70:d1:ad:55:ac:cf:24:23:39:e5:84:c3:42:71:94:13:f5:9f:
         70:7a:50:8c:bc:f5:ce:16:19:3a:dd:6a:ac:87:37:88:d3:d0:
         ad:a7:ec:b2:c6:ac:a8:75:2a:cb:c7:ab:bb:5b:47:4b:ea:1d:
         9a:c0:5a:28:94:a2:ee:5a:70:22:1c:26:61:98:48:d7:f5:90:
         bc:35:13:29:9f:47:af:df:49:6c:50:08:5c:e9:96:75:c5:5c:
         46:d1:6c:10:39:41:c4:2f:3d:e9:9a:74:30:02:59:e2:e5:8c:
         0f:92:8e:bf:43:6b:4e:7a:c5:93:52:73:f7:b6:6e:0d:12:40:
         06:a4:6f:ed:52:6e:b1:90:42:fd:d9:47:78:d8:b6:40:3f:5c:
         a5:e3:96:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org