Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138342e302f32342d3234203d3e20323636373836.roa
File:                     34352e3232362e3138342e302f32342d3234203d3e20323636373836.roa (raw, json)
Hash identifier:          ogQzQ7T5RZ4Q7Muzly01uKvMSnUNZkPlk7/XH4d9iuU=
Subject key identifier:   93:69:51:A3:67:E4:E2:62:5A:F3:43:39:C2:33:99:7F:12:6B:FC:AB
Certificate issuer:       /CN=985A06560547E393EA93615CCE79B796AFD39350
Certificate serial:       74695F872A44B905583736BF23493868574B5E1A
Authority key identifier: 98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138342e302f32342d3234203d3e20323636373836.roa
Signing time:             Tue 04 Feb 2025 18:12:47 +0000
ROA not before:           Tue 04 Feb 2025 18:07:47 +0000
ROA not after:            Tue 03 Feb 2026 18:12:47 +0000
asID:                     266786
IP address blocks:        45.226.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl
                          rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:69:5f:87:2a:44:b9:05:58:37:36:bf:23:49:38:68:57:4b:5e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985A06560547E393EA93615CCE79B796AFD39350
        Validity
            Not Before: Feb  4 18:07:47 2025 GMT
            Not After : Feb  3 18:12:47 2026 GMT
        Subject: CN=936951A367E4E2625AF34339C233997F126BFCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d7:48:8a:4d:65:84:c8:d5:25:ec:4f:06:56:
                    35:9f:05:70:7e:8a:5e:6b:6a:7c:77:6e:85:9a:60:
                    70:be:fd:16:44:7b:c9:8c:a3:38:18:c2:44:fc:a1:
                    51:f4:57:31:83:e7:ec:25:66:84:81:d9:d5:5c:a2:
                    fa:f4:0e:71:30:8b:25:04:ed:f3:cf:77:1e:5a:a0:
                    db:31:7e:ab:95:29:10:4f:99:7d:3d:9f:ac:8d:ce:
                    3a:94:99:9a:9b:56:c2:5e:4d:5e:6a:39:18:5e:5b:
                    f5:c4:77:24:8f:b6:34:d8:1b:e8:fd:45:45:af:e4:
                    3b:c9:a5:49:ce:08:2c:ce:b0:31:ea:d9:e0:56:01:
                    31:8d:b6:30:8c:92:83:5c:99:91:bf:a0:d4:01:b7:
                    07:65:91:ce:10:45:94:ee:07:9d:f1:c9:b1:79:e3:
                    b1:ff:5b:48:19:5f:1e:19:c6:66:96:77:f2:58:7e:
                    34:6f:c9:46:01:78:3b:49:53:af:eb:7f:da:d3:e5:
                    7b:7e:f0:98:2e:97:50:0b:ff:8d:88:6d:ca:92:73:
                    7c:07:ce:99:8c:47:12:f9:1a:ce:94:04:c7:ff:3f:
                    bb:e8:3f:45:1e:34:42:d1:ac:cd:4c:0a:03:0c:46:
                    31:62:dc:69:e2:08:9a:f8:c6:6f:7e:f6:81:b9:76:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:69:51:A3:67:E4:E2:62:5A:F3:43:39:C2:33:99:7F:12:6B:FC:AB
            X509v3 Authority Key Identifier:
                keyid:98:5A:06:56:05:47:E3:93:EA:93:61:5C:CE:79:B7:96:AF:D3:93:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/985A06560547E393EA93615CCE79B796AFD39350.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/985A06560547E393EA93615CCE79B796AFD39350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82E23CCA12E8C57FB492FCD3E9D31A8849553C751476F75EE7FB5EA2A7589605/0/34352e3232362e3138342e302f32342d3234203d3e20323636373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:34:96:12:aa:5d:32:18:f3:17:be:2e:f4:09:87:04:8a:b3:
         d2:7e:10:f1:5d:98:ad:3e:f3:b5:28:e2:d7:03:1f:c8:cc:ce:
         98:7f:a0:49:e7:22:aa:88:1f:71:8b:3b:5a:43:30:10:a7:b4:
         16:33:70:df:b8:3e:b4:09:48:4d:78:e4:43:a1:7f:18:bb:eb:
         09:62:27:a2:a2:ec:4c:a4:40:87:3e:5b:bd:b8:33:ee:80:dd:
         1d:e4:16:59:b4:9e:89:73:07:41:86:ad:6c:2f:1e:36:b3:33:
         38:63:c0:c0:2e:07:10:ca:a6:46:15:70:09:30:72:1d:68:9c:
         25:c0:ec:a6:7f:e8:0c:8f:31:4e:07:49:07:18:92:ec:e1:14:
         1e:4e:f2:e0:78:25:0a:50:ef:a5:9f:a0:dd:1f:1b:5a:00:11:
         11:2f:05:7f:f8:8e:9b:63:ce:40:b4:1a:74:c3:08:7e:57:e1:
         8e:92:da:ed:34:1e:24:a7:36:e3:a0:37:49:31:69:f6:1d:cf:
         59:2d:e3:d6:ea:a2:e6:48:73:3c:2c:40:f9:54:ad:c8:3d:12:
         bb:65:ba:ae:dd:ce:c4:7f:df:94:0b:e2:be:ea:8f:c8:34:93:
         4b:48:27:19:fa:ca:b0:92:b5:57:a3:43:3e:a3:9f:78:fd:dd:
         2c:b7:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:15:54 2025 by rpki-client