Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa
File:                     34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa (raw, json)
Hash identifier:          8cCNhiWJtsU/Mfqz+crPSPLUu/McAbDMikD/VDRYa8M=
Subject key identifier:   46:58:42:8D:F5:E9:65:29:19:9A:43:B8:6F:D5:E0:67:6C:2E:6D:E6
Certificate issuer:       /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial:       7A056EC1ECD9E79E90A315CA967FF6DD57EC43CF
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa
Signing time:             Tue 05 Mar 2024 18:02:57 +0000
ROA not before:           Tue 05 Mar 2024 17:57:57 +0000
ROA not after:            Tue 04 Mar 2025 18:02:57 +0000
asID:                     267784
IP address blocks:        45.227.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl
                          rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:05:6e:c1:ec:d9:e7:9e:90:a3:15:ca:96:7f:f6:dd:57:ec:43:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
        Validity
            Not Before: Mar  5 17:57:57 2024 GMT
            Not After : Mar  4 18:02:57 2025 GMT
        Subject: CN=4658428DF5E96529199A43B86FD5E0676C2E6DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:f7:8c:07:f3:11:4a:72:f2:54:a0:d7:80:
                    5c:cb:57:03:cf:db:e1:2a:b7:b4:fe:4b:d2:35:8b:
                    c1:e2:66:e0:71:de:b5:9f:3b:5d:38:94:8a:c5:21:
                    43:dc:99:1c:aa:88:95:78:4f:14:f6:6f:eb:c0:1d:
                    97:37:bc:2c:04:8d:78:7f:56:58:d7:1e:a8:be:0a:
                    8a:18:eb:77:fb:f8:72:49:31:72:82:78:cb:1b:fa:
                    c4:08:5e:a6:f2:30:57:e1:ed:53:71:d1:26:03:14:
                    43:00:97:ac:c9:52:d8:0d:83:b5:d2:b6:e2:0c:c9:
                    dd:e0:e6:fb:85:50:f4:0d:04:0f:a6:7d:9d:67:c1:
                    fc:8e:69:06:62:0a:f4:aa:f3:d3:58:c7:15:9d:58:
                    9e:8f:16:af:3b:2b:ab:d5:c2:fd:3a:e9:55:ed:d9:
                    6f:9c:34:d1:a7:f6:2b:89:66:25:f7:26:51:e4:e4:
                    a9:14:e6:82:86:3e:08:e3:71:3f:5d:ba:1f:0a:bf:
                    97:04:fb:f7:ed:09:d5:84:e5:3d:81:18:1b:dd:5b:
                    68:15:85:03:c1:ea:6b:82:bb:a6:fb:68:22:15:c8:
                    6a:11:25:30:09:a8:28:3d:18:00:da:16:45:31:f0:
                    e2:cf:af:60:3f:a0:4f:00:04:f0:35:23:dc:55:3f:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:58:42:8D:F5:E9:65:29:19:9A:43:B8:6F:D5:E0:67:6C:2E:6D:E6
            X509v3 Authority Key Identifier:
                keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235342e302f32342d3234203d3e20323637373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a2:4f:c7:af:74:79:d1:f6:c0:fd:ff:cb:f7:7f:7b:9d:8b:
         99:ca:61:28:1e:b4:ba:e2:b9:24:2b:4f:64:98:4c:67:8e:e0:
         13:3a:c6:65:34:b2:e1:9b:82:8e:8a:a6:b7:52:42:96:bb:42:
         c7:37:c0:1a:34:5f:38:21:40:87:60:f0:d9:dd:df:3e:c9:7b:
         09:9a:a4:7b:6a:30:b8:38:f8:5a:9d:b8:af:c9:05:b4:70:bf:
         dc:08:0c:88:1b:d4:c9:38:37:90:58:18:fd:e6:24:3b:8d:18:
         c5:c1:d2:98:20:30:42:b7:e9:71:1d:68:8f:75:13:51:26:2d:
         b1:93:d8:b0:72:95:e9:e0:73:59:e7:2d:08:32:78:81:10:a2:
         16:3b:ae:e9:ec:f0:34:d3:0b:35:86:98:a1:0e:29:0a:4b:d5:
         2d:f8:53:25:02:b9:50:df:38:0f:2e:6c:a7:39:3e:b6:75:4f:
         c2:a4:7c:55:c2:15:d3:52:1b:72:17:55:5e:d2:ef:25:c9:05:
         0a:45:a8:fe:e9:ca:96:ea:11:34:50:4b:cc:3c:7c:f5:f3:1b:
         d3:34:4f:7e:79:3a:6c:c8:11:0c:73:c2:58:ce:64:25:12:af:
         9c:9c:8d:6a:03:d8:cd:21:02:a9:19:1c:af:1c:51:c4:b5:42:
         54:e0:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org