Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa
File:                     34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa (raw, json)
Hash identifier:          jaZkO+WYUWUbODPVqSYFFJ3/KpEwvRitwhgYS/PUvWs=
Subject key identifier:   07:D5:76:63:6B:C6:F7:49:C6:F2:29:9E:71:2D:93:C3:04:55:DC:65
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       6E787EADB2F578B851C9606F395D17A58F77FEC8
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa
Signing time:             Tue 05 Mar 2024 17:40:18 +0000
ROA not before:           Tue 05 Mar 2024 17:35:18 +0000
ROA not after:            Tue 04 Mar 2025 17:40:18 +0000
asID:                     266684
IP address blocks:        45.228.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:7e:ad:b2:f5:78:b8:51:c9:60:6f:39:5d:17:a5:8f:77:fe:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Mar  5 17:35:18 2024 GMT
            Not After : Mar  4 17:40:18 2025 GMT
        Subject: CN=07D576636BC6F749C6F2299E712D93C30455DC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:6e:46:d8:02:06:97:84:ec:d3:5d:0c:2d:
                    fc:ed:e9:1b:11:df:73:28:b9:1b:16:a9:b7:c4:27:
                    32:f8:d8:bb:dd:c7:59:3d:c6:84:ae:4d:8f:2b:20:
                    79:f8:6f:40:62:fa:d6:b5:e8:ad:00:a4:a5:c4:ce:
                    51:e0:3c:89:7c:b7:e1:84:57:1b:15:08:68:88:f0:
                    9f:c3:5e:db:38:32:3d:37:b6:9d:14:d9:11:fb:22:
                    b0:c0:d8:9d:82:fd:8c:a4:1a:70:f4:70:73:98:0e:
                    5d:51:e6:e8:3e:78:9b:c0:e7:81:8c:a1:26:ab:4f:
                    b7:3a:23:9a:38:84:6a:03:8b:7e:c1:7f:ef:63:6e:
                    ac:8f:db:e2:a6:d5:04:34:73:d1:05:b8:6f:80:ec:
                    88:08:3e:93:46:55:5f:a6:80:aa:d3:30:e1:b1:b5:
                    64:af:97:61:ab:ed:b6:56:34:01:3a:32:db:a0:6e:
                    fd:d2:42:47:ec:b3:48:4b:f8:67:77:2c:94:b2:68:
                    b5:b8:0d:3f:6e:33:d1:30:49:b2:3c:02:5e:b1:d6:
                    9e:ad:ac:aa:5a:43:2e:53:e7:16:84:3d:25:f2:b8:
                    bf:91:62:e7:be:fe:3d:84:8f:c4:38:d4:4b:78:08:
                    25:bf:47:80:af:81:cd:76:17:0c:9e:3e:27:d8:8c:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D5:76:63:6B:C6:F7:49:C6:F2:29:9E:71:2D:93:C3:04:55:DC:65
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32342d3234203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:e3:68:c2:c8:7e:76:55:02:25:ae:0c:56:0f:72:7a:06:
         07:9a:c6:c7:ad:a5:96:9a:aa:23:e9:9d:ee:ae:35:39:23:6f:
         04:66:0a:23:93:da:a5:65:a0:87:7c:16:53:d5:3e:10:26:a0:
         ab:3e:35:41:3d:a3:90:b1:dc:26:a2:42:76:b1:b0:f5:09:39:
         9e:d4:81:65:51:14:c4:93:26:1c:2f:ae:08:67:b0:22:c6:d9:
         fc:55:a7:98:f0:2c:36:8d:91:e1:c7:e3:f4:e5:b5:dd:c6:c1:
         d3:b8:86:c2:bc:22:2c:96:a0:17:0d:a4:d5:3e:21:d6:a7:44:
         ac:4e:b4:5e:d2:8f:21:64:a8:da:f8:d8:e0:0d:77:9a:89:5d:
         0f:c1:12:da:57:0a:b1:13:24:f1:65:20:ec:46:29:df:8c:b2:
         52:3e:a9:64:b0:e2:3d:f6:60:ad:98:6a:fc:97:a4:92:c1:bb:
         3c:8f:a8:6c:56:aa:71:10:c5:db:2e:df:32:0d:a8:31:9f:a5:
         c2:43:ea:1a:62:a6:84:7b:32:5f:17:57:80:bc:20:59:5c:47:
         a4:e8:6e:2b:66:f8:d9:f6:24:81:e2:9d:40:5f:77:e9:90:be:
         68:f7:d7:8a:d9:d3:ba:41:c5:63:98:8e:be:35:f0:9e:d2:47:
         a3:3a:fd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:45 2024 by rpki-client on console-fra.rpki-client.org