Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/34352e3232372e3137362e302f32322d3234203d3e203631343636.roa
File:                     34352e3232372e3137362e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          TZxgw9rwtbPF5KjIlcvdX09iMMF3TfVu4Ck1bsSp6II=
Subject key identifier:   2F:F4:9F:A0:D3:08:28:8F:44:59:16:EF:6C:74:3F:C6:0D:F0:C3:49
Certificate issuer:       /CN=EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF
Certificate serial:       4487069F48821337E7D4CD779D1A4B11017281A6
Authority key identifier: EB:3A:EC:DA:D8:C4:95:8B:03:58:94:6F:A5:F0:6C:CF:FD:B7:6B:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/34352e3232372e3137362e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 05 Mar 2024 18:01:26 +0000
ROA not before:           Tue 05 Mar 2024 17:56:26 +0000
ROA not after:            Tue 04 Mar 2025 18:01:26 +0000
asID:                     61466
IP address blocks:        45.227.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:87:06:9f:48:82:13:37:e7:d4:cd:77:9d:1a:4b:11:01:72:81:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF
        Validity
            Not Before: Mar  5 17:56:26 2024 GMT
            Not After : Mar  4 18:01:26 2025 GMT
        Subject: CN=2FF49FA0D308288F445916EF6C743FC60DF0C349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:a8:c3:8d:49:3a:26:56:94:05:91:24:7b:
                    df:5c:46:a1:0b:b4:04:d3:b8:ee:71:f6:b4:17:9f:
                    09:76:8d:10:4a:f6:98:c0:13:53:6a:10:fb:3f:10:
                    a9:07:1b:4a:b5:42:11:00:c5:52:1f:a2:31:8b:d4:
                    12:24:d9:19:52:80:68:10:17:b9:a1:6e:03:c8:b3:
                    40:55:54:bb:9f:73:11:26:0c:42:b7:47:29:32:0c:
                    74:19:e8:cb:c7:0d:a1:23:d6:ae:84:72:9d:17:2d:
                    a6:35:5f:99:90:6e:3f:5c:60:e7:c6:5a:5d:62:c5:
                    1e:7e:fc:d8:34:23:43:53:43:e6:53:fa:eb:d9:1a:
                    6c:3c:95:51:67:6f:4e:b2:a9:d6:f5:26:9d:97:f2:
                    78:20:b9:64:21:a2:73:fa:33:4e:bc:9f:9f:da:fd:
                    9e:9c:38:79:07:e1:da:a6:b6:b0:d0:ea:a6:93:dd:
                    b0:16:6c:0c:ff:ef:77:95:99:db:f8:8c:93:e9:c9:
                    bb:44:ac:16:41:83:f8:5e:58:fb:c6:8f:7a:4c:3c:
                    01:c9:50:d2:30:cd:c2:d8:7c:f9:7e:81:38:47:df:
                    ad:85:8a:fd:2d:d5:65:f2:a1:fb:74:46:c5:af:e5:
                    8e:4c:f1:be:0d:64:08:f4:0c:54:18:98:61:15:df:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F4:9F:A0:D3:08:28:8F:44:59:16:EF:6C:74:3F:C6:0D:F0:C3:49
            X509v3 Authority Key Identifier:
                keyid:EB:3A:EC:DA:D8:C4:95:8B:03:58:94:6F:A5:F0:6C:CF:FD:B7:6B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB3AECDAD8C4958B0358946FA5F06CCFFDB76BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95A2529B164CB267D41D7E5A0A5283D6DC3D618E2B21986BB43C0DDEA21848D5/0/34352e3232372e3137362e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:6e:54:99:3c:51:d0:c8:be:bc:fd:ec:6c:1a:c3:7f:35:
         47:34:ff:c0:90:7b:5f:05:3b:5e:b1:9b:82:4a:28:4c:27:fc:
         a4:2b:f5:84:a2:5f:ff:57:21:e2:de:97:d3:01:e4:a9:4b:f3:
         9d:f6:82:3c:86:33:9f:b4:33:59:98:dc:23:89:3b:98:84:50:
         f4:a7:96:06:95:59:75:d4:23:0c:2f:3e:fe:58:e0:0b:4f:a1:
         1a:c8:36:86:c5:d5:c6:86:38:23:65:2b:ff:cb:a3:ef:7a:3a:
         d8:00:8d:d0:6d:f7:f3:df:c6:25:55:52:28:ef:ba:8d:71:dd:
         37:05:ea:4b:0a:99:26:86:9d:00:de:b8:21:c7:b6:ab:7a:75:
         f6:f1:ce:e6:5c:d8:f5:bf:c0:67:d2:cf:77:87:a8:2e:6e:88:
         7d:43:27:14:ef:f4:cf:36:0d:3c:68:cd:35:21:2c:46:91:55:
         49:38:de:20:f4:e8:c1:de:0e:23:2b:32:75:a3:f7:fa:6c:cf:
         9e:d4:08:45:06:bb:8b:d9:c0:24:87:f6:09:05:ab:0a:9e:ae:
         8e:88:6c:73:99:68:cd:49:98:25:27:e7:34:f9:bf:62:13:57:
         64:e0:5d:fc:4a:95:df:6c:8b:9b:c5:79:1e:ce:d3:15:61:91:
         c2:8b:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org