Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323732303039.roa
File:                     34352e3232362e35392e302f32342d3234203d3e20323732303039.roa (raw, json)
Hash identifier:          GIqMyMxIAzxJfAVjSceBQkVb/D6IKQLDZKuycJYk9V0=
Subject key identifier:   7C:99:29:BA:4E:E5:51:A3:D0:72:2C:53:6B:8A:7C:83:87:1D:DC:C7
Certificate issuer:       /CN=4C07ED76182959652B8E9E133053015F589BFC7F
Certificate serial:       0E784827217911F800815AA275539B641D4BFBFF
Authority key identifier: 4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323732303039.roa
Signing time:             Tue 05 Mar 2024 18:17:59 +0000
ROA not before:           Tue 05 Mar 2024 18:12:59 +0000
ROA not after:            Tue 04 Mar 2025 18:17:59 +0000
asID:                     272009
IP address blocks:        45.226.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:48:27:21:79:11:f8:00:81:5a:a2:75:53:9b:64:1d:4b:fb:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C07ED76182959652B8E9E133053015F589BFC7F
        Validity
            Not Before: Mar  5 18:12:59 2024 GMT
            Not After : Mar  4 18:17:59 2025 GMT
        Subject: CN=7C9929BA4EE551A3D0722C536B8A7C83871DDCC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:65:db:c6:04:4a:83:1c:38:e6:68:8e:b0:a8:
                    a9:dc:32:74:96:f5:ab:55:b2:27:e5:5a:48:09:c0:
                    7a:ca:b4:37:35:3b:b2:c4:d3:7b:ad:8f:34:d6:fc:
                    7f:46:93:94:3c:13:72:9c:64:97:04:05:30:39:19:
                    d2:ab:48:ad:f4:f6:7e:55:85:45:75:9f:ff:b8:6a:
                    3b:c5:f6:ee:63:ea:85:1c:b5:36:72:67:af:b6:b3:
                    e9:d4:64:f0:6a:b0:63:6f:b6:03:de:d0:8c:32:59:
                    79:27:0d:d3:18:78:3b:54:0f:db:5a:ae:85:3c:df:
                    bb:aa:13:34:3a:c8:37:8a:4b:74:a4:79:73:d2:0e:
                    71:5b:d6:74:6a:aa:83:c3:a4:a7:25:e1:d9:20:0d:
                    ca:66:13:a8:30:ae:67:87:48:c9:ec:2d:2f:49:f5:
                    fd:04:b6:74:0c:a6:dd:17:08:3c:6b:b9:fd:13:32:
                    90:be:e8:01:25:ac:64:30:4d:a5:4e:e8:69:9d:99:
                    20:6d:df:69:5d:ad:9f:fb:1a:d9:df:12:55:34:60:
                    63:4e:40:ac:b7:75:8c:60:83:e3:14:cd:0a:1f:24:
                    45:9f:b3:c9:15:18:ec:58:d1:ff:e2:63:f1:a8:1c:
                    55:22:c5:e9:b4:46:68:ec:fb:47:fa:29:94:38:61:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:29:BA:4E:E5:51:A3:D0:72:2C:53:6B:8A:7C:83:87:1D:DC:C7
            X509v3 Authority Key Identifier:
                keyid:4C:07:ED:76:18:29:59:65:2B:8E:9E:13:30:53:01:5F:58:9B:FC:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/4C07ED76182959652B8E9E133053015F589BFC7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4C07ED76182959652B8E9E133053015F589BFC7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D2FC1F0B8527B79264CD3CDDC10726CB30A399160BB4044AD90BD66E10B91D/0/34352e3232362e35392e302f32342d3234203d3e20323732303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:aa:6d:ac:e2:95:ae:53:33:40:56:87:5f:a5:92:ca:70:45:
         39:dd:27:7a:2f:71:a3:ec:68:84:33:46:0e:62:06:dc:39:c6:
         ea:a5:10:0e:1a:22:76:d8:b5:1a:51:26:3f:1a:ab:4c:8e:78:
         e4:7a:d7:44:dc:66:61:20:5d:ab:67:64:85:13:74:97:4b:40:
         b4:a4:2b:33:76:ad:4d:13:98:cd:ae:16:26:f4:99:90:dc:19:
         a6:50:bc:48:a9:c2:b9:76:77:48:ac:6b:aa:6e:8f:4c:83:6a:
         d5:50:77:7c:f2:f3:1a:4f:6d:d8:c8:0e:f7:be:f9:9e:15:b9:
         ad:9e:d2:a6:06:d6:ae:0d:c0:84:f0:07:ff:46:be:72:43:dc:
         6e:61:31:20:ff:33:e4:05:2e:06:a6:16:73:72:80:34:2a:56:
         66:ab:a9:5d:14:b1:72:4c:56:12:f4:99:1e:8b:a6:1f:4c:a3:
         68:68:70:2b:82:a5:c7:3a:53:0d:eb:e5:21:08:c8:60:66:f6:
         4c:0c:51:b2:f3:8f:1d:95:92:ea:47:b9:37:50:f9:d2:f8:70:
         8f:8b:68:85:79:93:01:3a:af:90:6a:f7:3f:2e:2e:15:f7:84:
         f0:22:42:20:5e:ed:61:ba:05:ec:c2:a0:17:0d:9f:7d:79:fa:
         75:09:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:32 2024 by rpki-client on console-fra.rpki-client.org