Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa
File:                     34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa (raw, json)
Hash identifier:          1WYMk6uqkLanFOpRhZ1z43fjwIDAxSyLW/F1KjzgyrM=
Subject key identifier:   29:19:B1:94:95:48:22:8A:A6:68:35:16:E9:12:3F:11:C0:11:C3:D2
Certificate issuer:       /CN=EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2
Certificate serial:       72A17AD302656A0894DDC0DD6CC056446A4AE63D
Authority key identifier: EB:5A:24:FC:B6:11:79:13:E5:FF:CA:98:D8:9C:77:9B:A4:2A:7E:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa
Signing time:             Tue 05 Mar 2024 17:40:41 +0000
ROA not before:           Tue 05 Mar 2024 17:35:41 +0000
ROA not after:            Tue 04 Mar 2025 17:40:41 +0000
asID:                     266785
IP address blocks:        45.234.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a1:7a:d3:02:65:6a:08:94:dd:c0:dd:6c:c0:56:44:6a:4a:e6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2
        Validity
            Not Before: Mar  5 17:35:41 2024 GMT
            Not After : Mar  4 17:40:41 2025 GMT
        Subject: CN=2919B1949548228AA6683516E9123F11C011C3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:6d:e5:79:97:ec:a7:ed:71:cf:b4:03:53:
                    2e:da:a2:61:72:90:b0:9b:79:a8:ed:ab:4c:aa:64:
                    4b:dd:7c:43:07:a9:4b:1d:4c:6b:6b:e5:d9:8b:20:
                    75:bd:3a:45:8d:b7:cf:89:82:33:55:89:bc:12:f3:
                    1e:51:9a:90:13:8b:06:35:02:97:e5:03:56:72:2e:
                    a6:ed:c5:e5:65:f3:2d:d6:f4:2c:cf:7c:61:5f:ef:
                    57:de:dc:a1:75:0b:7e:33:07:09:21:74:43:8d:33:
                    92:a0:94:df:96:14:35:77:d1:bb:c7:b8:08:c2:75:
                    84:8b:45:41:62:d5:54:35:d0:80:e3:95:ed:9e:64:
                    89:d8:d4:cf:da:86:c2:9d:8b:23:e1:9f:2c:35:93:
                    99:ab:95:4d:2a:51:75:27:76:27:ef:32:a3:9d:5d:
                    3f:da:6e:f2:0d:e4:ef:ed:f8:32:c3:0c:a1:f9:3f:
                    b5:a7:a8:98:4b:3a:b5:e4:c9:22:25:d3:32:e5:f3:
                    12:67:87:0d:4c:0a:e6:7e:c6:68:62:18:d3:58:ac:
                    f2:1c:75:5e:96:fb:aa:6c:d3:8b:19:8d:73:0b:a3:
                    93:f2:6b:14:29:46:b0:7e:b7:da:70:ad:aa:f3:8f:
                    ad:45:45:39:05:28:26:c5:07:f0:d4:20:04:22:72:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:19:B1:94:95:48:22:8A:A6:68:35:16:E9:12:3F:11:C0:11:C3:D2
            X509v3 Authority Key Identifier:
                keyid:EB:5A:24:FC:B6:11:79:13:E5:FF:CA:98:D8:9C:77:9B:A4:2A:7E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB5A24FCB6117913E5FFCA98D89C779BA42A7ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B491B7752D67EDA140D2FE5C0FD40BFB54A4241FC513A48C5615DDFEFBDD0BC1/0/34352e3233342e3232382e302f32322d3234203d3e20323636373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:83:c9:d6:ad:92:ac:3a:bd:3b:bf:0c:47:64:22:db:74:
         8e:6c:55:cb:57:0e:2b:ca:34:c0:dc:e4:94:c9:e8:35:e8:0b:
         bc:16:28:cc:61:76:37:01:c2:98:21:46:c3:d2:7f:93:76:c7:
         b9:af:64:23:c6:9f:e9:40:d0:85:d4:87:6f:82:34:39:b3:b7:
         b7:4b:3c:ef:7e:c5:c2:b8:e3:c0:e0:43:0c:cd:87:8c:59:4d:
         c2:ec:a3:7f:d6:29:83:98:85:66:47:1d:cf:58:2f:7a:80:1d:
         7d:b6:40:c2:45:47:97:8d:86:dc:be:0e:93:53:b7:e5:74:cf:
         9b:1e:0b:05:4e:f0:66:c5:72:cd:f8:73:03:ec:bc:a2:54:ba:
         61:87:75:7c:13:b8:0d:20:82:df:04:22:c8:ac:07:9e:50:a3:
         5d:31:32:cb:c9:bd:8b:fa:3a:4e:a3:4e:bf:04:e4:e9:be:1b:
         3d:3e:fd:95:24:33:51:1f:38:82:e0:26:99:35:8e:a2:02:7f:
         1e:6f:31:38:ad:cf:b7:93:8e:8d:9b:23:5a:ba:a7:73:72:bc:
         dd:a2:17:f6:ea:e9:4c:67:10:ff:66:2c:eb:d8:0c:3d:ea:4c:
         fb:35:cf:f8:29:5c:95:5f:9c:97:76:f8:59:fe:e1:08:43:23:
         f0:ce:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org