Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138342e302f32332d3233203d3e20323636373836.roa
File:                     34352e3232362e3138342e302f32332d3233203d3e20323636373836.roa (raw, json)
Hash identifier:          oxOLGX3vjo1OzLkiaQy9APdQv7FpspESJGCLa6wMMhU=
Subject key identifier:   21:C3:FF:4C:05:9C:97:B4:0A:68:C2:72:10:60:D5:0C:62:ED:A7:9B
Certificate issuer:       /CN=985A06560547E393EA93615CCE79B796AFD39350
Certificate serial:       49D13EBB48E99EA85A0FBDDC5A30FE5C7D2B0819
Authority key identifier: 98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138342e302f32332d3233203d3e20323636373836.roa
Signing time:             Tue 05 Mar 2024 18:01:19 +0000
ROA not before:           Tue 05 Mar 2024 17:56:19 +0000
ROA not after:            Tue 04 Mar 2025 18:01:19 +0000
asID:                     266786
IP address blocks:        45.226.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl
                          rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d1:3e:bb:48:e9:9e:a8:5a:0f:bd:dc:5a:30:fe:5c:7d:2b:08:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985A06560547E393EA93615CCE79B796AFD39350
        Validity
            Not Before: Mar  5 17:56:19 2024 GMT
            Not After : Mar  4 18:01:19 2025 GMT
        Subject: CN=21C3FF4C059C97B40A68C2721060D50C62EDA79B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:29:c2:7c:c7:cd:40:57:3a:ec:6d:d0:37:
                    aa:57:ee:b6:e3:ea:35:60:87:f9:63:08:2a:53:e6:
                    ff:04:f9:99:d5:1d:9e:60:fe:e2:9c:05:d2:e7:7a:
                    38:f0:7e:83:79:6c:d4:f1:f7:b6:ff:b1:fb:56:6a:
                    36:8e:4e:5c:83:47:42:1f:f7:3f:86:c6:97:71:0c:
                    56:e6:35:fb:1a:48:3a:b0:16:67:ce:b2:47:95:a6:
                    35:9d:62:84:82:5b:d9:18:f7:ac:b1:37:25:0b:9d:
                    77:13:95:66:1d:4e:d7:05:ab:a9:74:23:82:35:11:
                    0c:08:cf:fd:dd:3a:27:d4:b0:32:fc:a0:79:84:2c:
                    a1:0b:9f:fe:36:c3:a0:d8:ff:55:72:3c:fb:42:5b:
                    0d:0e:7d:2e:59:44:4c:14:1b:33:48:92:1e:09:f0:
                    ba:4f:9a:b6:cf:cb:08:d7:93:b3:3f:f7:79:85:85:
                    25:cf:d3:a7:19:76:44:1c:59:eb:2f:eb:3f:6a:49:
                    2e:51:47:b8:55:69:84:3c:d5:f7:02:c9:bb:0e:64:
                    d3:40:29:1e:97:d2:ad:8f:b1:c1:e6:21:d6:cb:ff:
                    0f:6b:1f:0f:be:ef:c7:7b:e1:69:b8:07:12:4f:56:
                    78:7c:c7:f5:2d:93:5a:68:40:1b:55:ed:a1:10:56:
                    69:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C3:FF:4C:05:9C:97:B4:0A:68:C2:72:10:60:D5:0C:62:ED:A7:9B
            X509v3 Authority Key Identifier:
                keyid:98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138342e302f32332d3233203d3e20323636373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:31:49:6b:d6:f0:89:c0:36:e5:27:ee:0a:f4:d1:4b:58:b3:
         45:d3:b8:ec:ab:69:e8:45:1d:3e:5b:ea:91:b7:94:50:70:11:
         90:3f:b1:f5:f4:e1:1d:a4:ca:cc:fb:2d:70:61:ac:9a:09:b3:
         31:a8:5f:95:0d:e9:0d:a3:06:c1:a1:60:82:a3:83:f1:33:2f:
         b3:56:a7:0f:c7:77:1f:10:34:0e:8c:75:9b:e2:05:ce:29:ac:
         6e:48:3b:fc:77:65:9a:8b:2d:69:d3:d1:e4:93:55:cf:19:98:
         a1:2a:3f:5d:cb:4c:e0:09:41:72:3e:ae:3f:df:92:4c:17:10:
         19:44:36:f9:a6:86:fc:f1:52:ee:64:4c:0f:5e:8e:e5:1f:e3:
         0c:ac:95:e1:3f:7c:d2:32:6d:d8:24:d1:a1:df:7d:68:62:43:
         09:99:30:ad:f5:98:f5:b0:6f:cd:22:b6:4d:c4:3a:13:06:ba:
         47:38:bc:0a:a5:70:89:6c:2c:7e:3b:aa:d3:8d:99:83:c2:fb:
         cb:97:eb:be:79:97:de:d2:67:1c:57:82:96:29:c8:6f:e3:2b:
         44:2f:92:07:fa:33:7e:d9:b9:d0:ef:05:d5:1c:d6:92:50:9d:
         d0:1c:cf:8d:c2:bd:29:da:7f:8b:b6:15:40:ef:b1:44:63:ae:
         0d:9d:c7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org