Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/34352e3233302e38362e302f32342d3234203d3e20323733313836.roa
File:                     34352e3233302e38362e302f32342d3234203d3e20323733313836.roa (raw, json)
Hash identifier:          BSU6oSzEmyY8c2Q4AdDWza4BqCRwYzhDBgVbSG80N0c=
Subject key identifier:   25:FC:F6:4D:80:39:8C:F1:ED:1E:A0:C8:BB:D9:06:D8:98:8F:A2:81
Certificate issuer:       /CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
Certificate serial:       5CE9557CC11CB1B2D19213B6D081CAD4674848DD
Authority key identifier: 49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/34352e3233302e38362e302f32342d3234203d3e20323733313836.roa
Signing time:             Tue 05 Mar 2024 17:50:30 +0000
ROA not before:           Tue 05 Mar 2024 17:45:30 +0000
ROA not after:            Tue 04 Mar 2025 17:50:30 +0000
asID:                     273186
IP address blocks:        45.230.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e9:55:7c:c1:1c:b1:b2:d1:92:13:b6:d0:81:ca:d4:67:48:48:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0
        Validity
            Not Before: Mar  5 17:45:30 2024 GMT
            Not After : Mar  4 17:50:30 2025 GMT
        Subject: CN=25FCF64D80398CF1ED1EA0C8BBD906D8988FA281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:20:5c:24:d6:73:30:ca:99:0e:7a:13:a5:
                    be:64:ac:af:6d:13:ee:52:48:a8:87:c3:6c:e6:7f:
                    ed:c8:78:e3:19:e5:0e:79:41:77:1a:80:e9:85:a0:
                    5d:80:51:b9:26:82:fd:7e:86:4d:12:2f:15:11:bc:
                    56:2d:70:83:db:93:f2:e2:dd:cc:38:e3:3b:c3:01:
                    68:27:22:c2:bd:c5:c3:f8:dc:33:2c:e9:36:82:1c:
                    05:25:3d:17:fd:9f:9e:c3:58:04:0a:ea:43:7d:93:
                    98:e7:d8:62:a2:6c:b3:3c:63:e7:f8:55:25:84:26:
                    90:64:f0:1d:bf:40:af:53:54:48:db:2f:cb:a7:0c:
                    32:5c:15:4d:ed:2a:cd:20:fd:8f:99:91:35:9a:e0:
                    60:eb:07:a9:52:5a:4e:e6:84:71:9a:62:bd:f1:21:
                    a4:79:2c:8f:01:ea:e6:6e:19:00:8e:bf:cc:86:04:
                    fe:65:a2:82:11:df:79:00:05:5f:1f:28:15:07:f2:
                    a7:52:65:93:3a:54:bb:5f:82:a9:83:03:6a:4c:94:
                    d7:7e:60:0d:cc:d3:93:cb:56:06:ba:05:96:cd:e7:
                    af:9a:89:eb:3a:8e:68:ad:19:5f:6f:ae:5d:98:50:
                    f2:f2:42:5e:75:d7:01:18:7f:de:c3:d7:89:47:29:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:F6:4D:80:39:8C:F1:ED:1E:A0:C8:BB:D9:06:D8:98:8F:A2:81
            X509v3 Authority Key Identifier:
                keyid:49:AF:E5:D3:AF:C3:6E:51:04:ED:49:C7:14:4D:92:1C:53:BA:2D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49AFE5D3AFC36E5104ED49C7144D921C53BA2DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77204DDF9F9ABB5A75365B8759924406AADA4F427A68C3AC40A648851A9556A0/0/34352e3233302e38362e302f32342d3234203d3e20323733313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b7:a6:3b:cc:b7:b4:30:b7:e9:c6:40:92:d7:4c:0a:51:61:
         ba:c0:15:21:69:a1:cf:b9:dc:e8:ff:c5:03:ff:fb:fd:a9:f2:
         69:52:e7:a3:f2:c8:04:26:5d:64:06:b3:93:82:70:c9:8a:99:
         d2:d8:7b:ea:b7:ab:e6:11:15:c9:58:d2:80:c6:99:32:6d:33:
         b8:d7:19:0d:82:f9:d8:ca:55:70:ad:a5:7c:ef:86:c1:da:a6:
         9b:17:53:91:cb:24:df:1d:aa:09:d3:d5:f7:a7:84:26:15:67:
         86:3a:31:1e:31:8f:15:71:f7:78:0a:49:a1:df:40:12:9f:51:
         73:6b:20:bd:b8:78:46:5d:e8:b2:8b:21:7c:91:da:42:7e:10:
         fe:dd:f2:e4:37:16:0f:82:b6:95:7a:6a:f4:84:dc:05:f8:80:
         da:9e:0f:05:ab:19:16:e5:a8:79:1e:58:38:0a:7e:1d:c7:e6:
         81:2d:ea:5c:24:a4:e2:f4:5a:15:f1:a2:0a:d4:99:68:a2:4f:
         2a:60:af:2a:d2:d6:a1:11:c0:63:d6:1d:82:cd:f9:00:ba:18:
         aa:27:2a:fd:ff:60:4d:76:44:b6:03:2c:b8:08:c1:7f:bd:72:
         87:d0:a6:a1:9b:15:90:42:df:83:1f:1d:c4:ca:29:90:9d:09:
         5e:42:64:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 14:08:40 2024 by rpki-client on console-ams.rpki-client.org