Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa
File:                     34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa (raw, json)
Hash identifier:          /oBj4YlXinvU6bBd0Ea46XgG+ZCv7sKoHN13m6N4gtg=
Subject key identifier:   96:EB:AC:42:47:AA:D3:C9:AC:8F:E4:AF:F0:12:05:6D:73:42:62:45
Certificate issuer:       /CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
Certificate serial:       7281ADD4D268C676A67701CCAE2F6CCBB7B785D6
Authority key identifier: A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa
Signing time:             Tue 05 Mar 2024 17:54:39 +0000
ROA not before:           Tue 05 Mar 2024 17:49:39 +0000
ROA not after:            Tue 04 Mar 2025 17:54:39 +0000
asID:                     265851
IP address blocks:        45.225.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:81:ad:d4:d2:68:c6:76:a6:77:01:cc:ae:2f:6c:cb:b7:b7:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A85589D4CB63F06CB0638FD83DC2356DDD2B6180
        Validity
            Not Before: Mar  5 17:49:39 2024 GMT
            Not After : Mar  4 17:54:39 2025 GMT
        Subject: CN=96EBAC4247AAD3C9AC8FE4AFF012056D73426245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:f8:af:b7:95:89:64:83:77:8d:21:3b:ac:
                    1d:6e:82:eb:2c:26:6f:b7:82:53:6c:09:f7:21:a2:
                    08:3c:d0:1e:a9:85:68:b8:0d:e8:2b:96:8e:dc:49:
                    a0:34:70:6f:15:84:75:6b:02:3c:57:d4:88:ab:eb:
                    c4:0d:71:0f:90:41:a4:e2:ea:d8:64:2b:cf:ce:ac:
                    42:5b:5f:f7:70:a3:ac:29:7f:81:30:61:cf:6e:11:
                    bc:d1:9c:48:bc:90:09:d6:b1:a9:e8:c6:9c:fc:2b:
                    1f:28:58:9f:61:71:f2:da:23:9a:82:26:78:61:9a:
                    8b:08:7e:56:00:d8:46:4f:ff:22:77:9f:72:02:4d:
                    9d:47:e4:d1:e4:9b:cf:e8:c9:0d:d4:12:60:ce:6d:
                    b0:54:41:1a:30:8d:5c:58:f1:28:54:b3:7a:44:58:
                    27:c1:11:be:13:f0:cd:26:34:18:36:9d:cb:a1:2e:
                    1e:87:77:14:be:a9:b9:51:a3:91:a4:66:85:94:22:
                    dc:ba:52:a7:44:ba:a5:af:52:47:73:2f:af:dc:31:
                    0d:4a:1d:84:35:5c:ef:68:14:40:a5:6d:23:4a:6a:
                    8e:c2:bc:c6:e1:06:8c:11:67:7c:2a:1b:41:37:62:
                    23:19:3a:a2:44:fd:cd:89:d7:6e:55:6d:76:69:97:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EB:AC:42:47:AA:D3:C9:AC:8F:E4:AF:F0:12:05:6D:73:42:62:45
            X509v3 Authority Key Identifier:
                keyid:A8:55:89:D4:CB:63:F0:6C:B0:63:8F:D8:3D:C2:35:6D:DD:2B:61:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A85589D4CB63F06CB0638FD83DC2356DDD2B6180.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1B7700E2FE0785B4B650FB6B7B1B35DE8DAFC93A318418EF112801832CDBA73/0/34352e3232352e3138342e302f32342d3234203d3e20323635383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:d2:e9:d2:73:a9:b7:ac:22:16:ff:b2:2a:60:d7:eb:03:
         d3:8e:c9:11:9e:a7:95:b0:10:50:b3:5d:c2:2b:9f:44:3b:2a:
         33:32:e8:55:66:c3:78:60:a7:c2:87:b3:91:3f:bb:fa:ad:69:
         3a:69:8f:9c:fa:3d:b2:03:ce:ae:bd:9c:6a:f0:22:28:4f:99:
         e4:1f:5a:55:b9:d1:c8:fa:e2:92:15:d7:78:40:4e:e3:1a:4c:
         7f:b0:10:89:1f:bc:d1:1d:ee:84:bc:19:4f:3c:dc:5b:17:e6:
         f0:5f:0b:ad:9f:ab:57:9a:57:73:36:f5:57:ef:dd:90:41:0b:
         b9:ec:ad:d9:3a:44:e9:ba:a3:ea:56:4c:50:f6:c1:8d:74:dc:
         7b:54:5f:1f:d7:cc:74:d6:f4:b3:b9:ed:f4:a3:df:96:5d:b9:
         a7:33:27:37:b9:e0:69:71:13:21:13:94:e0:b1:dc:c3:cb:3a:
         f6:59:77:14:ed:3e:4a:9b:cc:2e:66:cf:bd:53:ca:57:73:03:
         3c:aa:6f:98:d0:f4:4c:15:46:ed:72:85:c5:92:11:24:cd:17:
         e0:9c:ab:35:a8:2a:14:8c:ce:a9:f3:fc:aa:63:c7:48:3c:69:
         c6:bf:cd:55:4b:2a:65:a6:44:d1:3c:10:54:b9:76:71:d3:27:
         17:8b:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:10 2024 by rpki-client on console-ams.rpki-client.org