Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/34352e3232392e3138302e302f32322d3234203d3e203237393833.roa
File:                     34352e3232392e3138302e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          in7w5D2Iqm+96RrpKKwh/+htJvHn7MhqxusKUEJ+trE=
Subject key identifier:   26:A3:A1:42:4E:E7:E0:61:84:D4:30:95:93:6A:74:C9:90:D0:61:88
Certificate issuer:       /CN=841690346F5D6FF5299AFCBC310E561F644DBD52
Certificate serial:       3E8200BC28B5D2209B66EB996A998671B2A484A6
Authority key identifier: 84:16:90:34:6F:5D:6F:F5:29:9A:FC:BC:31:0E:56:1F:64:4D:BD:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841690346F5D6FF5299AFCBC310E561F644DBD52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/34352e3232392e3138302e302f32322d3234203d3e203237393833.roa
Signing time:             Tue 05 Mar 2024 18:20:46 +0000
ROA not before:           Tue 05 Mar 2024 18:15:46 +0000
ROA not after:            Tue 04 Mar 2025 18:20:46 +0000
asID:                     27983
IP address blocks:        45.229.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/841690346F5D6FF5299AFCBC310E561F644DBD52.crl
                          rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/841690346F5D6FF5299AFCBC310E561F644DBD52.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841690346F5D6FF5299AFCBC310E561F644DBD52.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:82:00:bc:28:b5:d2:20:9b:66:eb:99:6a:99:86:71:b2:a4:84:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=841690346F5D6FF5299AFCBC310E561F644DBD52
        Validity
            Not Before: Mar  5 18:15:46 2024 GMT
            Not After : Mar  4 18:20:46 2025 GMT
        Subject: CN=26A3A1424EE7E06184D43095936A74C990D06188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:96:4e:eb:47:07:a3:03:7f:8d:27:64:44:
                    b9:30:73:42:35:96:24:d5:05:25:41:da:62:56:eb:
                    34:b6:1a:63:17:3b:18:d3:c9:00:7d:a5:ee:13:54:
                    2b:e8:1d:ba:d2:f5:ec:ac:7d:7b:8b:70:44:fa:0f:
                    31:8a:b4:d1:0a:ca:b9:82:31:0d:bb:66:8b:ab:a6:
                    d6:58:f4:f3:d8:02:7f:af:ff:3f:37:c4:b9:2e:e3:
                    78:10:67:6a:02:be:eb:f0:57:a7:69:ed:d8:49:42:
                    78:9e:f7:ea:b6:57:b3:2d:28:aa:c6:03:1e:63:11:
                    ad:02:53:44:12:67:f4:74:d5:4d:db:c2:7c:00:79:
                    a1:e3:bd:19:18:c4:8b:3c:ab:e8:03:7a:31:90:1b:
                    f4:50:24:e2:74:e9:0a:e2:cd:b5:eb:5d:c0:73:8f:
                    1e:15:38:83:54:91:98:63:d2:1d:fa:9b:70:21:51:
                    40:9d:23:56:31:24:42:f0:8e:de:cb:7b:d2:5f:51:
                    73:96:c2:e9:89:ca:45:ee:b3:75:cf:5d:c8:fb:ed:
                    6a:37:c8:61:8b:e3:5e:19:db:42:16:f3:2a:0e:40:
                    90:a8:14:f2:b9:a7:07:82:b9:65:c6:0c:68:6c:77:
                    c4:ef:09:88:9f:47:71:26:e8:95:5c:32:0f:fa:83:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:A1:42:4E:E7:E0:61:84:D4:30:95:93:6A:74:C9:90:D0:61:88
            X509v3 Authority Key Identifier:
                keyid:84:16:90:34:6F:5D:6F:F5:29:9A:FC:BC:31:0E:56:1F:64:4D:BD:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/841690346F5D6FF5299AFCBC310E561F644DBD52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/841690346F5D6FF5299AFCBC310E561F644DBD52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74B9266FE25C5FB0AC7E833552450D8559C19D7329403F87E4B3AEA76B33AE90/0/34352e3232392e3138302e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:17:7d:c9:59:6e:63:28:7e:83:b8:b2:f7:5c:2f:ee:9e:3b:
         69:92:2e:77:53:dc:91:e1:35:74:2d:59:dc:1b:c3:51:0a:70:
         8e:a7:9b:93:d0:d4:33:25:72:35:57:23:1c:1e:c3:53:ba:2f:
         33:b5:60:dd:73:c7:b0:a1:c3:64:ce:82:30:32:2d:3a:9c:03:
         c0:73:63:e6:4f:c7:24:ca:f4:3f:90:42:e1:be:48:d1:04:1b:
         88:a0:1a:11:e9:ca:48:f7:f2:b5:3c:30:34:8e:04:a1:d2:78:
         9b:9e:09:80:30:97:35:76:e2:2a:ae:8b:b9:d9:88:81:c9:c5:
         77:7c:5b:29:f1:7c:22:d8:d4:20:df:5a:a9:a7:fa:ce:57:06:
         31:28:aa:60:2b:62:c0:29:fe:50:fe:3d:6e:4f:34:24:c2:b5:
         cf:38:23:c5:ce:38:f7:46:0d:36:0e:91:1f:ac:d5:58:52:4e:
         a7:5d:79:96:61:e5:2c:b4:70:c9:a5:6f:2e:8c:85:37:6a:29:
         23:fe:61:57:ff:a0:2b:49:2f:4a:db:d7:f0:c1:f6:d3:1e:db:
         4a:36:7f:33:9a:d0:b6:f2:ea:71:fd:65:e7:ca:fd:7b:8a:8e:
         dd:88:11:bf:8c:76:4e:46:29:47:40:25:e3:56:65:ca:4b:12:
         d2:e1:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:48 2024 by rpki-client on console-ams.rpki-client.org