Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32342d3234203d3e20323636383039.roa
File:                     34352e3233362e32382e302f32342d3234203d3e20323636383039.roa (raw, json)
Hash identifier:          mdK2m3wOsl9arfWxkPG0NSyect44sHh/SXCx0GnUP8U=
Subject key identifier:   69:16:30:C2:BE:A0:AE:D7:3B:36:E0:8A:63:4C:9D:FB:18:A2:7A:20
Certificate issuer:       /CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
Certificate serial:       34A5EC86695F688A8FF72F7EBA1D22E6AB946500
Authority key identifier: 22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32342d3234203d3e20323636383039.roa
Signing time:             Thu 30 May 2024 13:35:00 +0000
ROA not before:           Thu 30 May 2024 13:30:00 +0000
ROA not after:            Thu 29 May 2025 13:35:00 +0000
asID:                     266809
IP address blocks:        45.236.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a5:ec:86:69:5f:68:8a:8f:f7:2f:7e:ba:1d:22:e6:ab:94:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D
        Validity
            Not Before: May 30 13:30:00 2024 GMT
            Not After : May 29 13:35:00 2025 GMT
        Subject: CN=691630C2BEA0AED73B36E08A634C9DFB18A27A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:dc:e2:70:7e:95:4f:de:47:a9:ed:e0:2f:
                    b0:bc:41:c1:20:c7:09:c7:c9:94:34:c3:a9:d6:0f:
                    fa:25:68:69:e4:d4:39:fb:ec:3f:41:cf:c6:47:f1:
                    91:77:93:d1:aa:54:4b:29:74:f2:9c:63:b8:6d:b7:
                    3f:cf:69:be:b2:43:01:42:20:bc:8d:35:81:0d:2d:
                    f4:8f:50:8c:66:22:dc:f4:53:95:51:e5:af:31:a8:
                    55:99:4b:fe:b3:f3:87:8e:fe:5c:c8:a1:5c:0b:02:
                    c9:e4:16:62:a3:98:e2:59:c4:6c:e2:30:30:16:f7:
                    6d:55:2f:8c:7a:a3:d3:b3:53:65:e8:77:ad:29:f3:
                    3c:76:06:6d:89:19:e3:33:f8:f7:07:ab:de:47:aa:
                    12:0b:ad:70:e3:5d:1b:a9:71:61:cf:f3:d4:b0:af:
                    64:2a:f5:89:a1:62:a1:d2:8b:61:14:4f:a0:c2:93:
                    0f:17:5f:36:f6:d6:db:b2:2a:f5:2f:63:73:1f:0d:
                    6b:c4:ed:0d:39:17:91:f9:c1:50:7c:36:b4:18:98:
                    b2:a1:da:ab:c2:06:47:91:49:b2:60:a5:0d:38:0e:
                    65:4d:e9:92:40:a3:b5:58:91:fa:97:2a:60:f1:63:
                    23:46:ef:30:4b:39:2a:52:4a:8e:7f:6f:4f:03:75:
                    01:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:30:C2:BE:A0:AE:D7:3B:36:E0:8A:63:4C:9D:FB:18:A2:7A:20
            X509v3 Authority Key Identifier:
                keyid:22:61:00:C1:EB:3A:9C:EB:94:E4:55:0B:DB:99:7B:7B:3D:F9:BC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/226100C1EB3A9CEB94E4550BDB997B7B3DF9BC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5F11BED027C4AC40A8376C7B472166FF12F62C250B8B3A847995ACC4058A38C/0/34352e3233362e32382e302f32342d3234203d3e20323636383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d3:2f:4f:39:d9:38:1d:a3:81:4f:e3:40:9c:11:45:57:db:
         52:3c:b3:d2:c1:70:42:07:a2:d2:bc:22:b1:49:81:ac:6d:72:
         02:d6:f6:79:5d:75:02:04:be:80:f2:5e:75:3a:aa:33:f3:c8:
         9f:2a:47:b1:2a:42:e3:8c:13:e6:c1:d5:21:d1:7b:d0:d7:8b:
         9f:61:a9:b8:5f:08:da:89:cf:da:43:13:d2:20:15:84:62:c7:
         80:67:de:1d:dc:8e:7a:1f:91:c6:e2:92:06:43:fc:77:82:57:
         6b:a2:c8:10:b1:50:c1:e6:8c:9d:b5:dd:b2:d5:ff:51:bf:e7:
         df:96:11:d9:0e:df:52:6d:bd:60:01:8e:00:e1:95:f7:8f:09:
         d0:93:5d:f8:62:e0:db:6d:41:6b:d6:83:ae:2f:42:69:f9:71:
         01:ec:32:c4:1c:c1:9d:cb:dd:5a:7b:77:99:ab:b1:45:1c:0f:
         ca:5f:30:11:dd:de:ab:89:69:fb:f2:65:fd:5a:1c:36:c8:ad:
         0a:1d:98:a7:37:b0:23:39:44:16:a1:b2:30:54:b9:e6:21:6b:
         ef:dd:e5:c3:ab:0b:9d:b8:35:05:35:f1:1d:15:29:da:d2:38:
         00:27:49:42:15:26:83:ca:48:f3:f8:ff:f6:23:c8:c7:42:f4:
         1e:b0:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org