Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/34352e3232362e32382e302f32322d3234203d3e20323635383638.roa
File:                     34352e3232362e32382e302f32322d3234203d3e20323635383638.roa (raw, json)
Hash identifier:          cyoH2r/ytVNrpaFoSFuaMwRkbgFbYeSy3nzJ8C8MkOU=
Subject key identifier:   9E:F4:B0:F5:88:D4:E2:A3:50:D2:DD:4B:16:DD:57:C6:03:07:72:9A
Certificate issuer:       /CN=550F60A736CB45E447499B31D8249CBB97AEB73E
Certificate serial:       74470E11E44066A1A50BF614A56D9FAE8C2759A9
Authority key identifier: 55:0F:60:A7:36:CB:45:E4:47:49:9B:31:D8:24:9C:BB:97:AE:B7:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/34352e3232362e32382e302f32322d3234203d3e20323635383638.roa
Signing time:             Tue 05 Mar 2024 17:58:11 +0000
ROA not before:           Tue 05 Mar 2024 17:53:11 +0000
ROA not after:            Tue 04 Mar 2025 17:58:11 +0000
asID:                     265868
IP address blocks:        45.226.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:47:0e:11:e4:40:66:a1:a5:0b:f6:14:a5:6d:9f:ae:8c:27:59:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550F60A736CB45E447499B31D8249CBB97AEB73E
        Validity
            Not Before: Mar  5 17:53:11 2024 GMT
            Not After : Mar  4 17:58:11 2025 GMT
        Subject: CN=9EF4B0F588D4E2A350D2DD4B16DD57C60307729A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:31:cc:60:fc:7a:e2:78:33:da:b6:79:01:52:
                    6a:29:11:d3:b8:f9:4c:81:e3:39:19:ef:c1:41:27:
                    ff:96:4a:64:18:f5:84:8f:d3:c2:09:cb:65:22:33:
                    8a:75:c5:a9:07:44:ed:08:cf:4a:c0:b6:bc:af:ca:
                    f2:54:49:09:3f:3e:93:62:9f:85:c6:9b:42:b9:d0:
                    42:66:9c:10:96:6e:4b:8d:32:71:fe:94:18:b9:18:
                    e4:1b:99:d0:37:d2:09:f3:5c:78:89:aa:88:34:76:
                    dc:f8:96:6e:bb:39:c9:37:93:30:81:a4:ad:e5:d2:
                    2c:47:b3:73:4a:ae:cd:88:6b:ac:0c:14:f5:78:cb:
                    53:21:ad:24:59:db:61:66:ab:4b:e9:a2:e1:eb:fd:
                    28:a5:7a:58:61:35:73:80:eb:06:9b:61:50:55:70:
                    55:62:17:74:33:ca:d7:20:b1:c6:8e:83:01:b0:98:
                    5e:73:99:04:88:96:24:03:58:34:1c:3c:e0:86:e1:
                    29:68:47:ac:7b:ca:32:1a:f0:7c:77:b2:c9:32:ce:
                    ac:57:62:f1:7a:48:48:0d:6e:f4:dd:2f:49:a4:21:
                    85:7a:bb:9b:16:dd:f3:6e:f9:f8:69:9d:20:f7:1b:
                    12:7a:6e:39:f8:4c:95:4f:9a:f7:34:01:6f:32:da:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:B0:F5:88:D4:E2:A3:50:D2:DD:4B:16:DD:57:C6:03:07:72:9A
            X509v3 Authority Key Identifier:
                keyid:55:0F:60:A7:36:CB:45:E4:47:49:9B:31:D8:24:9C:BB:97:AE:B7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/550F60A736CB45E447499B31D8249CBB97AEB73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/550F60A736CB45E447499B31D8249CBB97AEB73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F4791AF5BF1502AAEE5BCC2802797A1B3E98483B53EF04AF0F4CC78A4D584D0/0/34352e3232362e32382e302f32322d3234203d3e20323635383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:13:db:9b:ca:cd:3a:74:32:21:7e:62:0b:c0:40:22:38:3c:
         f5:20:87:bb:14:d6:8f:47:f3:47:05:80:55:7c:b5:a9:f3:0a:
         f6:d2:e3:fc:35:98:29:92:57:fb:36:88:29:44:61:e6:d4:e7:
         5f:5f:b2:bf:13:6f:4d:56:ec:5c:02:72:28:cb:00:9e:b5:3a:
         2e:0c:9e:3f:b7:e6:07:a6:71:0b:d8:1d:dc:e8:18:92:d2:32:
         ac:dc:f4:21:d1:9b:d3:98:39:5f:40:9b:fd:9b:bd:6b:78:2e:
         ef:7b:8e:54:5a:80:d3:b7:6f:cb:2b:d3:70:09:5b:3f:fd:a1:
         5a:f7:92:62:3b:db:c9:94:72:d3:b3:27:c8:33:9d:58:45:3e:
         5d:c0:79:34:c9:c4:b5:48:32:6c:59:c6:34:b9:34:5e:07:0a:
         9c:13:89:8d:29:8a:59:8c:da:b0:cf:43:c4:a6:62:2e:9b:69:
         7d:2b:21:7b:bd:50:0d:bf:9c:6a:0f:55:d1:61:8b:ed:7b:2e:
         78:8c:1c:3a:80:a3:b4:89:78:d9:0b:7d:b3:ad:b9:fc:df:db:
         6f:d2:cb:e8:c9:5c:6d:32:85:32:b9:1e:79:28:cb:98:62:86:
         ee:fa:33:28:25:9a:e8:20:bd:79:5e:3f:63:16:c1:ae:de:5a:
         39:54:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org