Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/34352e3233322e3137322e302f32322d3234203d3e20323636383135.roa
File:                     34352e3233322e3137322e302f32322d3234203d3e20323636383135.roa (raw, json)
Hash identifier:          YYTjtzk3QYwdjEns8cDaEvfrQj8cpFKJsURqQf26mVA=
Subject key identifier:   8E:98:6D:9E:95:40:92:BB:3D:1F:A9:27:38:1C:B8:E1:B6:B8:7F:31
Certificate issuer:       /CN=3BE200CBC2748D500CCB2B319E104EF022ECFE5D
Certificate serial:       1B765C08F25D059DDCEDC81ECA55ADD9AD533382
Authority key identifier: 3B:E2:00:CB:C2:74:8D:50:0C:CB:2B:31:9E:10:4E:F0:22:EC:FE:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/34352e3233322e3137322e302f32322d3234203d3e20323636383135.roa
Signing time:             Tue 05 Mar 2024 18:15:26 +0000
ROA not before:           Tue 05 Mar 2024 18:10:26 +0000
ROA not after:            Tue 04 Mar 2025 18:15:26 +0000
asID:                     266815
IP address blocks:        45.232.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:76:5c:08:f2:5d:05:9d:dc:ed:c8:1e:ca:55:ad:d9:ad:53:33:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BE200CBC2748D500CCB2B319E104EF022ECFE5D
        Validity
            Not Before: Mar  5 18:10:26 2024 GMT
            Not After : Mar  4 18:15:26 2025 GMT
        Subject: CN=8E986D9E954092BB3D1FA927381CB8E1B6B87F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:55:71:4d:0c:2f:a1:ed:1e:94:fa:b2:c4:
                    22:4a:da:c9:01:7b:d9:ca:26:ff:1b:9e:96:ea:37:
                    98:5f:59:60:ed:05:ff:cd:11:d7:63:ab:ba:b1:b2:
                    0b:aa:83:dc:92:6e:ab:b1:f6:1d:4a:66:cd:cc:fc:
                    fb:d5:44:d1:d7:59:b1:f6:c9:5b:c2:6d:c1:5a:68:
                    dd:2d:52:1e:11:e1:c1:f0:61:a2:df:91:de:f4:66:
                    5a:77:26:1c:ee:b4:7d:64:f4:d0:b1:f5:d7:40:5d:
                    b3:2b:da:f7:e0:43:b0:95:c7:27:dd:3a:a1:27:20:
                    cc:49:6f:75:1f:aa:e7:53:76:77:d2:24:b0:8d:25:
                    d0:ee:72:c8:2f:27:44:58:59:68:a5:62:db:9f:25:
                    55:9c:3a:4e:e7:0e:87:ba:23:84:cb:91:5e:d3:cb:
                    ad:ab:0b:e6:da:b8:33:f7:82:75:0b:fc:cc:57:e5:
                    fc:6d:31:8a:14:b8:66:03:d7:29:53:df:9d:c8:9e:
                    65:15:fa:6f:f3:b4:8c:d4:51:c2:e3:45:fa:0a:6d:
                    67:66:f8:47:a4:95:1e:4f:78:54:59:5e:17:25:60:
                    53:e2:a0:c9:7c:79:d2:8d:2b:bf:42:51:93:ff:6b:
                    43:30:e1:0e:2d:08:a6:d5:b5:4d:45:f2:ca:d1:08:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:98:6D:9E:95:40:92:BB:3D:1F:A9:27:38:1C:B8:E1:B6:B8:7F:31
            X509v3 Authority Key Identifier:
                keyid:3B:E2:00:CB:C2:74:8D:50:0C:CB:2B:31:9E:10:4E:F0:22:EC:FE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3BE200CBC2748D500CCB2B319E104EF022ECFE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4A8C730B7E8A859E880BA4C198841CD8840D93915108B868FC5BFA7E6E3065D/0/34352e3233322e3137322e302f32322d3234203d3e20323636383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:c4:c8:fe:c8:b5:22:fa:e5:ce:c9:a1:7b:15:54:a6:50:b0:
         e1:e9:35:53:57:b0:5a:ac:21:56:42:83:aa:01:e9:b2:5f:41:
         fc:67:e8:15:28:53:40:40:8c:63:3b:00:64:fa:35:cf:03:9d:
         f0:08:ad:00:33:b1:83:93:0d:40:26:53:30:59:07:3a:87:95:
         45:e5:99:8d:2c:23:3c:63:69:da:8e:4b:81:c3:57:75:2e:59:
         c0:3b:eb:65:53:3a:63:cf:a3:d4:6f:18:2d:9b:7b:49:e4:69:
         cf:a2:88:17:d3:2f:19:22:c3:e2:17:3e:22:1a:73:4d:91:5a:
         23:10:fc:46:60:1c:a0:b0:3f:68:36:d5:0b:2a:aa:f1:72:3b:
         97:4e:ef:8e:3c:f3:bd:76:d4:7e:da:6e:22:08:4b:0e:84:45:
         33:11:f9:a0:57:62:af:74:4f:a4:c2:bd:4f:75:21:74:5c:b8:
         04:a3:fc:62:1f:bd:a1:d0:87:0b:8b:29:43:23:65:9d:ef:bf:
         07:6d:45:db:08:d2:44:4b:bb:eb:d9:85:df:82:59:bd:df:eb:
         45:ed:f3:8c:dd:84:a7:21:96:88:e7:d6:79:50:0e:f5:1a:ad:
         86:d9:32:36:d5:74:99:07:e5:99:22:11:51:1f:f4:a7:70:04:
         37:4d:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:12 2024 by rpki-client on console-fra.rpki-client.org