Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134382e302f32342d3234203d3e20323636373039.roa
File:                     34352e3232392e3134382e302f32342d3234203d3e20323636373039.roa (raw, json)
Hash identifier:          aAG04/8C+f8gsugum7BCMa8thIQ+oiFgAL/RnYfcN4w=
Subject key identifier:   4D:4F:51:37:E6:5E:A5:8A:3C:BD:AF:8E:43:72:87:E6:BD:7D:B9:99
Certificate issuer:       /CN=779F88CEF196B5EBF62DE93CD9CB49C78F317C2A
Certificate serial:       24B93CA2954E9DEFA6841C58017A7BBAD5841156
Authority key identifier: 77:9F:88:CE:F1:96:B5:EB:F6:2D:E9:3C:D9:CB:49:C7:8F:31:7C:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134382e302f32342d3234203d3e20323636373039.roa
Signing time:             Tue 05 Mar 2024 18:08:05 +0000
ROA not before:           Tue 05 Mar 2024 18:03:05 +0000
ROA not after:            Tue 04 Mar 2025 18:08:05 +0000
asID:                     266709
IP address blocks:        45.229.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b9:3c:a2:95:4e:9d:ef:a6:84:1c:58:01:7a:7b:ba:d5:84:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779F88CEF196B5EBF62DE93CD9CB49C78F317C2A
        Validity
            Not Before: Mar  5 18:03:05 2024 GMT
            Not After : Mar  4 18:08:05 2025 GMT
        Subject: CN=4D4F5137E65EA58A3CBDAF8E437287E6BD7DB999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:07:03:23:8a:2e:8c:65:ef:8d:b6:11:53:f1:
                    81:4a:22:1c:48:3a:b9:18:c6:e3:0f:03:95:1c:d6:
                    92:a2:cc:53:d0:85:5e:a4:c1:4a:d3:d0:f5:25:25:
                    5a:52:f1:11:3b:0e:05:e0:fe:19:b5:45:b6:ab:3f:
                    1f:20:b5:e2:bb:80:2e:cc:49:93:2d:9d:92:5c:fe:
                    de:a8:cd:5c:91:e9:6a:1f:29:06:db:66:a8:6f:27:
                    ee:57:76:38:e5:f1:e2:31:68:d5:65:aa:34:56:55:
                    6b:44:a9:97:3d:0b:81:bc:8a:88:ff:3b:5b:4a:8a:
                    ba:0f:ef:81:4b:83:74:43:81:53:2b:7f:cc:31:af:
                    13:f1:af:33:9b:1d:a1:1a:8e:6d:87:5e:9d:cd:bd:
                    0a:52:57:06:c9:af:25:10:63:c6:64:4a:02:6b:37:
                    c2:d4:a7:e5:37:7b:f3:f0:f1:2a:23:73:e2:33:65:
                    e5:5a:8e:b6:11:4c:82:04:ca:b3:33:83:d9:0f:32:
                    f1:cd:76:0f:6f:9b:95:48:8f:c9:6b:31:7d:04:3d:
                    ee:b6:e7:34:ce:1d:1d:25:6e:a6:ea:05:dd:76:58:
                    8d:fc:84:dd:52:5b:17:07:3b:28:8a:22:94:af:d6:
                    c4:c8:c0:c3:ad:35:15:75:ec:a1:22:2c:e9:7e:d3:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4F:51:37:E6:5E:A5:8A:3C:BD:AF:8E:43:72:87:E6:BD:7D:B9:99
            X509v3 Authority Key Identifier:
                keyid:77:9F:88:CE:F1:96:B5:EB:F6:2D:E9:3C:D9:CB:49:C7:8F:31:7C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134382e302f32342d3234203d3e20323636373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:4e:33:3b:fd:2d:2f:ea:e6:25:7f:58:54:5f:90:13:29:40:
         ae:85:70:60:9f:40:a3:2c:16:bb:0f:39:e5:55:4f:8b:51:79:
         5a:f9:be:d7:20:0d:2e:82:cc:e5:bd:34:31:ff:d6:2f:ae:95:
         ad:d1:4a:cc:01:68:bf:83:c9:11:1f:32:17:8a:d2:71:a3:f7:
         f8:59:dc:b4:29:4c:f8:8a:de:26:2f:ca:99:15:3e:e2:67:3a:
         9f:d2:dc:ca:30:7e:ea:f0:d7:91:cc:55:d1:41:5c:ca:80:a6:
         4f:10:7b:68:fa:65:b1:04:4f:b4:8e:9d:12:6a:55:27:51:c5:
         2e:32:c4:db:12:04:31:67:cf:e7:9a:0b:a6:61:1f:9e:37:c4:
         e4:c1:02:6b:bd:50:cf:68:40:08:14:4e:53:9c:1a:39:3c:1d:
         2c:2f:55:ef:79:b8:b6:f9:0e:93:42:c0:47:da:d5:63:4e:30:
         01:fd:f0:dd:6b:46:1a:45:88:2e:ea:e1:58:e6:b9:92:5f:77:
         fd:99:5f:89:3f:80:8a:73:24:67:9e:f7:d9:f5:0d:be:53:d1:
         40:42:9a:26:29:9d:40:36:8a:ae:6f:15:06:01:60:ed:0e:2d:
         48:27:6c:6b:48:77:da:76:19:dc:8d:1c:cf:c6:ff:0f:20:69:
         08:88:95:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:45 2024 by rpki-client on console-fra.rpki-client.org