Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32322d3234203d3e20323636383039.roa
File:                     34352e3233362e32382e302f32322d3234203d3e20323636383039.roa (raw, json)
Hash identifier:          Dfe2Rxtmc7G9DhFM0RUMMWlLBpcSp+fPyopoteRJOQM=
Subject key identifier:   8B:58:4F:D2:05:B5:7F:45:31:20:14:E8:C2:60:0F:12:8D:6E:9E:B8
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       6AF614FC7252EAAF5876446801EC1A1C727CD516
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32322d3234203d3e20323636383039.roa
Signing time:             Tue 05 Mar 2024 17:49:04 +0000
ROA not before:           Tue 05 Mar 2024 17:44:04 +0000
ROA not after:            Tue 04 Mar 2025 17:49:04 +0000
asID:                     266809
IP address blocks:        45.236.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 07:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f6:14:fc:72:52:ea:af:58:76:44:68:01:ec:1a:1c:72:7c:d5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: Mar  5 17:44:04 2024 GMT
            Not After : Mar  4 17:49:04 2025 GMT
        Subject: CN=8B584FD205B57F45312014E8C2600F128D6E9EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:f0:c3:16:26:de:c2:7b:bc:2f:08:6a:e6:
                    60:45:7b:cd:40:63:c6:50:3b:40:e7:42:01:8b:63:
                    c2:e9:46:ee:6d:ed:ed:af:d6:88:2a:0a:9d:f8:eb:
                    54:d8:b0:12:9d:8d:23:54:c9:be:c5:e8:0a:68:21:
                    d2:81:8f:dc:ca:87:d0:89:49:e6:00:61:0c:c5:1b:
                    f7:95:5b:eb:92:7e:5c:68:e5:44:79:64:7a:e2:9a:
                    67:99:34:15:9b:99:37:02:bc:a3:fd:4e:43:e4:8c:
                    90:f0:c1:a7:05:70:73:6f:2d:36:c6:7a:6c:87:6d:
                    75:e1:e2:15:64:ba:79:74:fb:4b:7a:fd:85:d0:a0:
                    6a:09:85:ad:d0:d8:68:4a:f7:00:67:11:4b:29:09:
                    5a:68:2e:58:79:db:98:8f:9e:86:e4:47:58:73:16:
                    78:85:e8:be:dd:a7:38:40:73:ff:81:65:56:fe:20:
                    b8:d0:f3:a6:7c:3a:e5:03:b8:52:f2:12:bb:1c:41:
                    b2:c1:c1:18:39:a8:79:7c:0c:f4:9e:64:fb:6f:0c:
                    e8:e2:38:d8:e5:70:19:35:0f:ba:c1:aa:30:52:ee:
                    7b:98:b2:7c:11:97:f5:a5:8b:0a:48:7b:ae:e6:69:
                    7d:a3:75:c7:8d:cd:d1:07:92:63:22:3f:24:5e:d0:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:58:4F:D2:05:B5:7F:45:31:20:14:E8:C2:60:0F:12:8D:6E:9E:B8
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32322d3234203d3e20323636383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:67:03:b4:55:8b:7e:73:82:af:1f:de:d4:6d:85:d2:34:
         6b:2e:3e:6d:c3:6d:1b:fb:f1:00:c0:69:6c:6b:88:5e:78:cb:
         3d:a7:fc:ec:31:3f:51:ad:ae:85:88:af:19:dc:cd:1e:fc:00:
         72:9d:e0:50:f1:87:d7:f6:b3:36:5a:54:ab:33:52:88:2e:3d:
         60:a2:5f:26:90:f3:fc:42:c1:c3:f0:27:c0:1e:03:13:4b:df:
         d5:28:75:36:de:c9:e9:99:f3:59:c0:a3:78:68:4c:2a:5f:59:
         41:92:ae:0f:c8:3c:5b:15:db:73:8f:3f:b7:6b:e0:5f:0a:14:
         3f:e3:10:2d:3c:9b:26:32:78:67:b5:b8:c2:be:f9:57:33:b6:
         5e:14:9d:4c:13:c4:1c:0c:b5:47:41:65:80:ac:42:5a:44:c3:
         b9:a9:26:b2:e3:a6:71:8d:f5:05:09:e9:34:88:d5:8a:d5:f5:
         2c:70:2c:74:fc:54:9b:33:ee:5e:51:76:dd:69:e1:8a:23:fc:
         b0:cc:76:28:c0:1e:6d:56:9a:bf:94:ff:35:23:23:22:d3:4f:
         45:6c:39:c6:a5:54:77:6f:ea:8c:7d:42:94:42:03:71:52:f7:
         46:e1:96:a7:ec:02:78:09:5d:e9:b5:b8:93:e9:70:56:a8:54:
         42:a0:fd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:34:29 2024 by rpki-client on console-ams.rpki-client.org