Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa
File:                     34352e3232372e3232362e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          Mfu790MF3KypxH69T/jJgfuW+CmyJWglFU388WVd1Ls=
Subject key identifier:   65:0D:62:B3:A9:22:5E:B3:49:9B:C7:74:85:16:9E:D8:95:D7:6E:AB
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       1AB3D9A7D185B97B0A62ABCF29E6853488C7EEF2
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 05 Mar 2024 18:02:47 +0000
ROA not before:           Tue 05 Mar 2024 17:57:47 +0000
ROA not after:            Tue 04 Mar 2025 18:02:47 +0000
asID:                     52328
IP address blocks:        45.227.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b3:d9:a7:d1:85:b9:7b:0a:62:ab:cf:29:e6:85:34:88:c7:ee:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Mar  5 17:57:47 2024 GMT
            Not After : Mar  4 18:02:47 2025 GMT
        Subject: CN=650D62B3A9225EB3499BC77485169ED895D76EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:4e:bf:30:a5:da:d5:95:5c:eb:32:d2:3c:
                    7b:22:a3:81:f2:8f:be:c7:f2:20:50:98:ec:67:60:
                    6c:8e:78:65:b6:ea:aa:1a:03:64:72:bb:2e:9e:8a:
                    1c:bd:1b:9d:1a:b9:4a:cb:d9:55:1f:da:13:7a:8a:
                    f7:73:db:23:a3:6f:45:a6:09:63:b4:8b:81:2d:83:
                    c2:17:b2:89:a1:87:76:fa:f7:00:40:66:57:d3:91:
                    1e:72:ec:b1:84:bd:a5:1c:25:be:59:d9:eb:fb:03:
                    18:31:51:b6:58:f3:08:b4:fd:69:38:e0:7f:70:4f:
                    8d:57:06:4b:02:c2:62:10:9a:9e:4a:91:18:98:80:
                    8e:22:1a:ad:67:da:45:ce:4b:3d:dd:b1:31:fa:1a:
                    ee:71:2f:92:37:81:76:ef:ad:cf:70:de:7b:84:0b:
                    eb:bf:a9:e9:37:bf:4c:a9:69:63:a1:0b:f1:47:25:
                    17:2e:1b:b0:3e:3d:6e:2a:4d:4f:d3:d0:07:7b:be:
                    36:78:4e:33:3b:ec:04:ab:ff:4e:2f:d4:68:e0:f5:
                    99:4c:34:61:bc:41:c0:c5:3d:89:19:d9:c9:bc:f6:
                    64:7c:45:8e:c1:22:49:cb:24:af:77:3a:a4:5c:85:
                    98:54:60:89:9a:c8:e7:55:9a:3b:a4:ae:ac:54:aa:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0D:62:B3:A9:22:5E:B3:49:9B:C7:74:85:16:9E:D8:95:D7:6E:AB
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:3c:1e:19:4e:88:a1:58:39:b3:bb:0a:cc:30:a1:ff:0b:
         8c:44:32:20:f3:36:8b:9d:d9:93:f2:8e:96:22:25:91:81:e2:
         83:aa:c1:4a:e5:17:ea:65:eb:f5:87:33:90:a8:de:9f:56:b1:
         43:17:c5:17:7c:ac:bf:bb:c7:c5:c2:74:84:63:bc:35:af:91:
         d7:ef:ae:d3:47:fb:a1:32:56:20:cc:7b:1e:28:1c:4b:86:9e:
         d7:27:34:7e:4d:ae:3d:e9:28:3f:ac:c7:ac:9c:ad:1c:97:0a:
         c8:a2:4b:ee:df:e2:00:9a:49:08:61:8d:b8:ad:35:bc:96:22:
         1b:10:4d:9e:c5:9c:89:15:e0:9f:3f:c6:9a:94:cc:ea:13:97:
         f1:46:a9:a7:1c:41:88:10:c4:8d:3a:66:5f:8a:3f:b5:b3:75:
         76:29:70:62:46:de:6a:6c:92:83:d9:40:4b:e7:e8:19:a1:9b:
         20:ed:65:86:81:18:eb:14:6e:d2:28:af:1c:57:7a:ee:05:4e:
         09:24:e7:7c:53:6f:39:73:9a:60:8e:cf:41:a5:16:50:24:e1:
         df:88:da:0b:e3:3e:34:5c:95:0c:48:f3:03:a3:79:39:8d:82:
         65:b7:e7:2c:98:f7:ac:fd:55:a9:d3:ca:63:5f:07:3a:77:17:
         f7:d4:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org