Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32332d3233203d3e203532333238.roa
File:                     34352e3232362e3137342e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          nVnf0p2Y7aAjADFLrn9wPRMvqOHMg4dT1eA42mugHVg=
Subject key identifier:   90:02:D0:92:16:61:05:55:C8:ED:9C:4A:76:0E:99:C6:23:49:BB:0B
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       4FDF5AA2AF86881785A8D7603135D1AA632773DA
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 17:44:30 +0000
ROA not before:           Tue 05 Mar 2024 17:39:30 +0000
ROA not after:            Tue 04 Mar 2025 17:44:30 +0000
asID:                     52328
IP address blocks:        45.226.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:df:5a:a2:af:86:88:17:85:a8:d7:60:31:35:d1:aa:63:27:73:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Mar  5 17:39:30 2024 GMT
            Not After : Mar  4 17:44:30 2025 GMT
        Subject: CN=9002D09216610555C8ED9C4A760E99C62349BB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:eb:3f:75:0f:ab:04:05:a6:d8:dd:2d:cb:
                    e6:ad:53:20:68:60:d8:bd:5e:60:d7:71:1b:c8:96:
                    0a:33:99:56:1b:1e:6c:d5:4d:a2:4f:97:f9:65:c4:
                    d4:6c:e7:ca:d5:31:0d:a1:8f:56:dd:3c:5a:89:ef:
                    29:f9:d2:d0:42:9d:d8:46:89:b2:07:b4:d5:84:97:
                    c7:89:f7:a6:f8:71:ac:92:42:dc:02:6d:ce:74:12:
                    66:72:de:13:2f:2f:02:d8:72:3f:a3:e2:5a:6c:87:
                    be:1c:bb:c0:dc:b2:e6:27:2d:04:9c:16:dd:57:57:
                    61:59:f9:51:3e:c2:a0:f3:7e:fd:a6:99:61:3b:ef:
                    36:e9:f1:a2:c5:52:79:18:2b:38:0a:37:a5:e3:c2:
                    8b:8f:53:5a:b3:ce:e9:5c:a5:72:da:f7:f9:63:b1:
                    38:e2:d6:5f:65:4e:a9:b6:9c:70:8b:58:9f:15:63:
                    2c:30:3b:45:57:b8:e0:87:c0:13:03:c7:81:5f:f7:
                    c6:69:d3:fb:d8:55:9c:9b:84:e9:58:84:5a:3c:ac:
                    be:b3:c8:cc:b9:ba:06:d9:7b:20:57:d1:bf:19:d1:
                    18:69:e1:47:c3:68:28:d4:f4:1a:b5:75:71:38:f9:
                    af:85:89:bc:10:7b:ea:6d:06:41:45:49:e1:41:1b:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:D0:92:16:61:05:55:C8:ED:9C:4A:76:0E:99:C6:23:49:BB:0B
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:72:f6:19:b6:a7:33:63:ad:17:dc:70:83:2d:b8:d6:c0:
         82:26:d3:19:35:c2:ec:4d:0d:5d:7e:fb:f5:89:d5:e7:ee:fa:
         72:8f:50:06:79:74:b8:0d:90:cd:9a:05:c2:77:af:f2:d0:a9:
         70:97:3e:b6:a3:3d:c7:75:fb:32:f5:e6:d1:75:3f:59:22:99:
         f2:08:4e:dd:84:37:1f:82:eb:7d:cc:75:54:64:a3:72:21:05:
         0c:fb:24:e3:27:68:bb:a6:5b:47:f8:e2:0b:8b:91:45:dc:35:
         00:7b:8c:e4:8a:28:b6:90:6e:5a:43:49:21:22:d9:c5:0a:99:
         bd:53:fb:a0:cf:49:64:75:df:c9:be:e0:cc:56:9f:92:4a:30:
         a3:75:5b:e7:dc:59:84:8c:a5:aa:f2:84:72:b1:9e:5a:6a:f5:
         13:50:df:a5:93:ac:21:0c:c9:93:9b:37:63:2a:f6:3f:a1:5f:
         93:8c:0a:33:69:75:d9:ce:82:5b:5b:bc:30:d6:58:cc:be:14:
         77:16:81:43:e0:c6:a8:bf:b2:d0:00:a2:97:b4:88:8f:78:cb:
         90:0d:c8:8e:40:3b:b1:81:c5:2d:8e:c9:bc:6e:89:d4:3f:d2:
         06:e5:9f:2e:5f:60:a0:40:29:91:52:cf:85:7f:e1:6e:fb:d4:
         07:ed:87:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:36 2024 by rpki-client on console-ams.rpki-client.org