Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/34352e3232372e34382e302f32322d3234203d3e20323634383338.roa
File:                     34352e3232372e34382e302f32322d3234203d3e20323634383338.roa (raw, json)
Hash identifier:          TRKwC07QuuKwcRYJLsqnHaiIeeYuc1mvIuOsWZOpRrE=
Subject key identifier:   4F:04:5D:B5:7F:78:5C:69:91:80:C1:05:D6:9F:A7:F4:BA:2F:78:FE
Certificate issuer:       /CN=FDB692B7B90C4707701C811F7179377E0289AC4C
Certificate serial:       1CAAF813EAB956149F1877189B4CB00387D0509F
Authority key identifier: FD:B6:92:B7:B9:0C:47:07:70:1C:81:1F:71:79:37:7E:02:89:AC:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB692B7B90C4707701C811F7179377E0289AC4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/34352e3232372e34382e302f32322d3234203d3e20323634383338.roa
Signing time:             Wed 06 Nov 2024 15:00:00 +0000
ROA not before:           Wed 06 Nov 2024 14:55:00 +0000
ROA not after:            Wed 05 Nov 2025 15:00:00 +0000
asID:                     264838
IP address blocks:        45.227.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB692B7B90C4707701C811F7179377E0289AC4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:aa:f8:13:ea:b9:56:14:9f:18:77:18:9b:4c:b0:03:87:d0:50:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB692B7B90C4707701C811F7179377E0289AC4C
        Validity
            Not Before: Nov  6 14:55:00 2024 GMT
            Not After : Nov  5 15:00:00 2025 GMT
        Subject: CN=4F045DB57F785C699180C105D69FA7F4BA2F78FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:b3:75:e3:26:1e:d2:c6:fe:28:ab:28:48:
                    7b:3d:9e:c4:86:e4:d6:d4:5b:6e:c3:18:18:a5:19:
                    3a:64:53:09:e9:36:a7:a2:0d:ac:d9:6d:5a:f8:bc:
                    4d:fe:38:24:c9:b0:7f:72:db:18:1a:b9:6d:d9:90:
                    c3:08:f6:1b:d7:8e:d9:ae:eb:29:17:99:81:5d:10:
                    96:54:25:8e:f4:b0:e1:26:4e:30:42:24:f9:1d:d2:
                    43:8e:62:a9:9c:f5:a8:1e:1e:d4:5b:1b:37:2f:f5:
                    ae:af:62:f2:e5:3e:91:b6:63:f7:e5:10:d4:b6:5c:
                    53:63:b2:1d:41:e6:d7:5f:d3:0e:65:27:92:58:93:
                    23:5b:03:d8:6b:09:d6:9e:79:b3:78:fc:b9:cc:fe:
                    b9:3d:9d:5f:0f:21:14:f9:33:42:3d:dc:82:f5:82:
                    18:32:93:e1:e7:43:4d:d6:7a:0e:e8:e5:41:74:17:
                    ac:a1:63:84:f6:ea:dc:56:eb:cb:e0:4c:7d:cd:8b:
                    9e:1a:31:52:b6:11:54:39:26:40:d6:7c:9e:2d:11:
                    e0:65:6e:84:3f:42:97:6a:ce:95:7c:c2:8b:46:05:
                    d8:98:66:9e:36:0e:08:2c:30:3e:19:a4:ce:e1:be:
                    1b:6d:4d:3e:d6:38:da:b8:b1:75:44:60:50:76:1c:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:04:5D:B5:7F:78:5C:69:91:80:C1:05:D6:9F:A7:F4:BA:2F:78:FE
            X509v3 Authority Key Identifier:
                keyid:FD:B6:92:B7:B9:0C:47:07:70:1C:81:1F:71:79:37:7E:02:89:AC:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/FDB692B7B90C4707701C811F7179377E0289AC4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDB692B7B90C4707701C811F7179377E0289AC4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75ADA18295AE5AA1B76C1ACB6F819BB421BDD5CC3F99E1309C3344E3F7B7DCD3/0/34352e3232372e34382e302f32322d3234203d3e20323634383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:50:1b:ed:97:6b:c9:f2:ee:b3:42:6b:02:13:f0:ac:6d:
         81:1a:8c:50:cd:0b:92:2e:78:bf:f0:52:6f:01:c4:a0:17:c9:
         7a:56:73:eb:89:75:77:38:d9:6e:c5:9a:86:bf:07:20:2f:d7:
         dc:79:f4:f2:17:06:0c:89:f9:00:fb:5d:c2:ad:b1:8d:e2:16:
         58:5e:3b:28:e5:8e:57:1e:12:ec:df:8b:91:da:d3:32:89:5a:
         5a:9c:68:d8:f7:76:91:bc:5f:f5:89:9e:27:10:82:1f:16:fc:
         1b:17:b1:9a:f6:1c:da:f0:43:f1:14:dc:b5:fc:2b:b1:37:0f:
         f8:6c:ae:84:98:1b:f9:5d:72:24:ae:f4:b4:d3:6f:f3:bc:4f:
         fe:5f:c3:56:1f:40:9d:c0:05:c7:17:bf:c3:dd:b8:1f:c6:82:
         8d:5a:f8:52:5b:d9:e5:bc:39:8f:b0:b9:37:cd:d9:05:c5:82:
         75:3e:ca:66:78:55:ba:d9:6d:11:4c:cd:ae:99:8a:41:1e:5c:
         23:c3:64:58:09:ab:da:0f:e2:ab:58:39:a1:6f:78:77:23:24:
         f0:d9:a6:85:10:85:96:7c:ac:eb:a0:ec:08:5d:07:4b:6f:86:
         a1:f2:b6:8c:19:98:6c:54:e1:db:00:ab:db:eb:00:b6:9d:fe:
         17:4e:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 00:36:00 2024 by rpki-client on console-fra.rpki-client.org